$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa File: 95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa (raw, json) Hash identifier: r//qfaliPGVt5VgX3NYgnuLU+7KRyHc6Aw3ia6SbW2w= Subject key identifier: F4:88:CF:E8:31:8A:13:DA:A1:BA:3B:E9:BF:DD:4A:D6:2E:EA:34:CC Certificate issuer: /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Certificate serial: 010D0C9F43285849C0A4E2EBC0312D8ABD60FFC0 Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 53334 IP address blocks: 199.38.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e2:eb:c0:31:2d:8a:bd:60:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=156aeb77-18dc-47f8-850c-525192e9edce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:e2:36:62:1a:ab:2f:e2:65:59:e6:8a:96: 8e:7e:05:98:32:2f:c2:34:b0:75:dd:a4:ab:35:da: 52:7c:2f:33:c8:48:ed:17:5d:4f:1e:bd:cb:16:2b: da:b6:3c:02:86:b1:ac:48:58:a6:ef:e0:4e:6a:73: 47:14:18:04:30:67:e8:3c:ff:75:34:8a:2e:bb:e6: e6:d6:65:50:75:ec:6f:5e:18:c5:3f:09:cb:14:be: 47:fd:5b:3a:60:17:be:60:01:b0:2b:96:9f:2b:db: 31:df:d9:c6:0d:db:c1:0e:5b:4a:99:1f:9c:38:b8: db:dd:fc:11:63:b3:c2:be:e6:7c:30:1b:a0:87:34: 8b:c0:13:86:ed:27:c6:bb:cb:e5:ff:55:6f:34:cc: 01:d8:12:aa:f0:6e:7b:01:7d:57:53:e1:b3:4a:54: 8f:4c:dc:fe:36:1b:b9:75:d3:b1:17:ee:65:95:56: 86:99:09:9b:e7:f8:14:dd:98:e1:0d:52:8b:11:68: 34:8f:b4:1e:90:60:da:24:25:70:c0:54:68:6f:40: 99:6d:13:9d:33:d9:e2:0a:bb:d0:1d:7d:6f:f1:05: ee:c7:32:d2:1e:99:ae:b4:c7:be:e5:33:fc:2c:79: 3e:6a:c5:a4:c8:fa:e0:b1:45:eb:d4:50:8b:c0:ac: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:CF:E8:31:8A:13:DA:A1:BA:3B:E9:BF:DD:4A:D6:2E:EA:34:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/95a90206-f9c0-3b10-8ac5-b4579d72e37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl X509v3 Authority Key Identifier: keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer sbgp-ipAddrBlock: critical IPv4: 199.38.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:69:60:6f:f1:d0:b5:b5:ce:31:18:42:1f:86:d9:f9:04:b6: 71:e6:5f:0e:0c:c5:34:61:78:62:c4:0a:0f:65:0a:45:2a:22: e4:61:92:5a:a2:4e:3c:92:86:a7:bb:2d:de:f0:a3:e5:83:74: f1:c5:3c:c3:7a:d8:ea:ef:fa:83:fe:dc:1b:1c:ad:29:3e:64: 55:81:9c:a3:01:0b:80:49:bc:fe:05:c3:16:dd:87:8b:28:7c: 9a:90:52:72:38:69:31:26:e6:c5:c4:3e:79:05:e9:3d:d4:cf: 60:25:31:dc:20:dc:35:5c:3b:ca:ac:6a:2a:29:d0:64:17:a5: d7:f4:f6:5b:6d:37:20:e3:d3:ed:d0:c3:6d:ce:2f:a5:10:0b: f3:98:21:6c:c0:da:85:30:3d:fd:63:3e:4d:e1:6d:4c:a9:d0: 32:8b:16:46:08:e2:90:db:85:16:eb:30:da:cb:72:d4:73:95: 20:eb:8f:9f:52:37:4a:ac:e8:a1:27:14:93:53:f4:ea:8f:7f: e0:26:bf:c5:94:09:81:c9:81:6c:ee:55:ea:1e:db:2f:2f:d9: c2:dd:ca:45:f2:45:27:5b:88:30:f4:c4:64:15:e7:dc:6f:32: 7a:4d:8c:64:aa:48:74:3d:0c:86:98:34:92:df:d1:b8:b4:28: 36:08:fd:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOLrwDEtir1g/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj OGQ0MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MTU2YWViNzctMThkYy00N2Y4LTg1MGMtNTI1MTkyZTllZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgPiNmIaqy/iZVnmipaOfgWYMi/CNLB13aSr NdpSfC8zyEjtF11PHr3LFivatjwChrGsSFim7+BOanNHFBgEMGfoPP91NIouu+bm 1mVQdexvXhjFPwnLFL5H/Vs6YBe+YAGwK5afK9sx39nGDdvBDltKmR+cOLjb3fwR Y7PCvuZ8MBughzSLwBOG7SfGu8vl/1VvNMwB2BKq8G57AX1XU+GzSlSPTNz+Nhu5 ddOxF+5llVaGmQmb5/gU3ZjhDVKLEWg0j7QekGDaJCVwwFRob0CZbROdM9niCrvQ HX1v8QXuxzLSHpmutMe+5TP8LHk+asWkyPrgsUXr1FCLwKxNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSIz+gxihPaobo76b/dStYu6jTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvOTVhOTAyMDYtZjljMC0z YjEwLThhYzUtYjQ1NzlkNzJlMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4 YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0 NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJpYG/x0LW1zjEYQh+G2fkEtnHmXw4MxTRheGLECg9lCkUqIuRhklqi TjyShqe7Ld7wo+WDdPHFPMN62Orv+oP+3BscrSk+ZFWBnKMBC4BJvP4Fwxbdh4so fJqQUnI4aTEm5sXEPnkF6T3Uz2AlMdwg3DVcO8qsaiop0GQXpdf09lttNyDj0+3Q w23OL6UQC/OYIWzA2oUwPf1jPk3hbUyp0DKLFkYI4pDbhRbrMNrLctRzlSDrj59S N0qs6KEnFJNT9OqPf+Amv8WUCYHJgWzuVeoe2y8v2cLdykXyRSdbiDD0xGQV59xv MnpNjGSqSHQ9DIaYNJLf0bi0KDYI/ek= -----END CERTIFICATE-----Generated at Thu May 8 05:07:12 2025 by rpki-client