$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa File: 958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json) Hash identifier: iKGeR+x2hrzxG92pITiaDikrN05NAmbAcdt7lthXDgg= Subject key identifier: 2D:55:21:9A:66:DF:8A:24:14:C8:63:AD:6D:CF:4D:AD:79:46:C6:95 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F43285849BF3F5E31D551F05D3D25EC80 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 56274 IP address blocks: 198.208.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5e:31:d5:51:f0:5d:3d:25:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=bb536220-00bd-438a-87d5-dce0c17be9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:3f:18:9f:3a:20:d0:a2:44:e5:3b:80:e8: c0:68:c1:cf:5a:70:0f:3f:40:65:e3:ee:15:c4:aa: d3:b0:a3:da:dc:81:09:8e:38:78:79:9b:5c:a2:95: b2:63:6a:0c:e7:45:f6:2a:c8:c1:24:23:33:59:8e: cd:3c:b3:e4:1e:50:4c:6e:68:6d:ac:b6:03:d9:dd: fb:b7:a7:50:4f:a0:b1:5b:05:0f:5b:38:6c:74:f5: 56:94:8f:ef:7d:da:ca:09:b9:c7:65:8f:eb:1f:51: 23:31:ef:56:15:c6:17:52:dd:fb:1b:4c:57:50:7c: c5:ff:84:3f:1e:ab:0f:ba:c1:71:5c:aa:9c:c6:0f: 5a:70:7e:5d:ab:2c:fa:94:11:c3:16:e8:83:4f:7b: f8:89:81:1f:46:57:0a:ad:94:6d:e7:75:89:ad:ed: cb:ed:d6:1a:e7:eb:43:16:cc:e9:62:12:42:03:b7: 89:29:67:ea:e5:95:a1:8f:1b:6d:1b:5e:5c:26:92: 74:9e:9e:af:8f:3f:0f:61:d5:be:00:74:39:e2:f6: bc:e4:3c:22:42:03:55:cc:b2:75:54:69:db:02:62: 2d:fc:72:08:94:9b:49:82:b7:af:39:ed:98:d7:88: 8f:bf:5c:65:26:66:9b:1f:62:8f:c3:a1:d6:1c:4d: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:55:21:9A:66:DF:8A:24:14:C8:63:AD:6D:CF:4D:AD:79:46:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:73:79:dc:c2:13:1c:9d:c3:12:dc:5f:60:0f:7d:16:6b:2a: e0:e4:c8:7d:1e:21:fb:ad:43:f3:17:75:10:a2:c5:6a:1a:9a: cf:8e:ba:f6:fa:44:e2:b9:a0:c6:6e:92:ea:60:9c:0f:9f:7d: 52:50:22:de:ce:80:77:2e:bb:48:61:75:60:9f:8b:6a:50:3b: 0b:b8:b1:23:a7:b7:48:49:e3:36:41:b1:44:59:17:da:c8:b0: df:48:61:b4:df:99:43:db:74:1c:25:1c:69:02:b8:0f:38:35: 09:0d:3b:4c:61:12:d0:5d:69:ea:16:bf:42:68:08:32:c6:e4: 1f:8e:61:20:f8:aa:9a:de:e7:c4:a9:f8:05:33:45:8a:f7:69: 36:55:d5:b4:9e:ab:32:49:f1:3e:2c:e3:5f:2b:56:be:97:1d: 46:cf:68:a9:27:9a:ea:27:87:4c:f4:e9:30:8b:10:29:6e:59: bf:d7:75:3b:ea:b0:43:ef:d9:8f:e5:a5:6d:e3:dd:5b:fa:cb: fa:af:3f:f5:d7:d8:1a:c7:76:19:2b:b5:d2:17:53:a1:d9:1d: b5:4e:ac:71:8a:07:0d:eb:2a:59:fd:f7:be:b4:85:92:6a:c9: 2b:68:eb:7e:26:3e:29:f7:12:b7:a5:1d:9b:e4:07:0f:70:4f: d7:a2:24:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P14x1VHwXT0l7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YmI1MzYyMjAtMDBiZC00MzhhLTg3ZDUtZGNlMGMxN2JlOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Q/GJ86INCiROU7gOjAaMHPWnAPP0Bl4+4V xKrTsKPa3IEJjjh4eZtcopWyY2oM50X2KsjBJCMzWY7NPLPkHlBMbmhtrLYD2d37 t6dQT6CxWwUPWzhsdPVWlI/vfdrKCbnHZY/rH1EjMe9WFcYXUt37G0xXUHzF/4Q/ HqsPusFxXKqcxg9acH5dqyz6lBHDFuiDT3v4iYEfRlcKrZRt53WJre3L7dYa5+tD FszpYhJCA7eJKWfq5ZWhjxttG15cJpJ0np6vjz8PYdW+AHQ54va85DwiQgNVzLJ1 VGnbAmIt/HIIlJtJgrevOe2Y14iPv1xlJmabH2KPw6HWHE2gNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1VIZpm34okFMhjrW3PTa15RsaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1zedzCExydwxLcX2APfRZrKuDkyH0eIfutQ/MXdRCixWoams+Ouvb6 ROK5oMZukupgnA+ffVJQIt7OgHcuu0hhdWCfi2pQOwu4sSOnt0hJ4zZBsURZF9rI sN9IYbTfmUPbdBwlHGkCuA84NQkNO0xhEtBdaeoWv0JoCDLG5B+OYSD4qpre58Sp +AUzRYr3aTZV1bSeqzJJ8T4s418rVr6XHUbPaKknmuonh0z06TCLECluWb/XdTvq sEPv2Y/lpW3j3Vv6y/qvP/XX2BrHdhkrtdIXU6HZHbVOrHGKBw3rKln99760hZJq ySto634mPin3ErelHZvkBw9wT9eiJNY= -----END CERTIFICATE-----Generated at Sun May 11 14:38:55 2025 by rpki-client