$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa File: 38aff81e-4d57-3a68-a63f-70e16a421366.roa (raw, json) Hash identifier: s2TDGLxR/GWaLvlXD3z7op2eoo3o/dWTYMfH7vxMdEo= Subject key identifier: D6:FD:96:63:9F:9E:24:8C:20:36:30:1D:92:73:3A:FC:28:A1:AA:E9 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584A331B236181867F0A786EB4C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 54113 IP address blocks: 199.232.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:23:61:81:86:7f:0a:78:6e:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=df892cbf-5ef6-46c9-bc89-436f8f5d878c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:95:33:5e:35:d6:a1:cb:28:da:1b:ea:84: a7:5e:50:c6:7c:87:86:90:e0:7b:b3:df:10:f1:ef: 85:d1:38:a0:6a:00:88:7f:1c:cd:5e:0d:ad:2f:3d: 29:0c:c6:dc:e3:a3:3d:1b:d1:e0:e7:94:7d:27:eb: 9e:46:7d:19:af:91:c9:a9:f0:df:7b:c5:0e:85:15: ac:c2:15:ff:bf:35:b0:a5:df:ce:bc:ae:14:81:3b: 6e:f2:23:2f:b9:1b:4e:95:4f:2c:97:d5:99:10:39: 0c:e6:aa:66:e9:fd:c9:50:59:c5:24:8b:8b:ec:8c: d5:6a:5c:59:07:c0:6e:19:9f:c1:4c:88:4e:38:b8: c4:04:de:ca:58:88:0c:2a:23:0b:63:0f:93:d0:21: 3a:42:f7:73:e7:83:38:4a:0c:8f:7a:45:cb:31:a2: f8:25:c1:66:0a:d6:15:dc:94:6d:f9:c0:d1:b5:1d: 83:d8:2a:c5:0f:37:4b:89:65:3b:3a:f1:ec:46:dc: 77:bb:93:c0:17:eb:c9:50:96:a4:fb:4a:96:c1:b6: 3a:53:82:d1:8e:d8:5d:fd:13:75:dc:21:f4:22:71: 13:74:0b:59:79:73:be:4b:45:b3:cf:3c:51:a3:58: 39:bb:f6:ae:d6:98:c5:15:6a:88:ef:bf:4b:82:84: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:96:63:9F:9E:24:8C:20:36:30:1D:92:73:3A:FC:28:A1:AA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 199.232.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:7b:f0:ae:3f:e7:ed:d2:42:cc:6d:87:be:67:d7:d1:a5:28: 3e:d9:23:95:06:9a:90:93:52:00:e5:57:59:c0:e2:e8:25:92: 05:6f:d3:49:2b:75:ae:b9:3b:d1:36:48:ff:4f:b7:a4:97:89: 30:e4:a6:47:85:97:93:64:4e:f5:0e:1a:7c:09:d8:65:71:53: d0:5d:e4:15:bb:d0:3d:3d:86:ab:9e:90:b6:d1:e9:87:f3:5c: 84:9a:6b:2b:b4:31:12:66:8f:ca:6a:a4:37:1e:cb:ba:f6:e0: 27:e1:01:d9:fc:70:3f:3a:b9:c9:64:d2:10:d7:fd:a7:52:89: d2:1e:2b:92:2a:07:90:0e:ed:7f:f3:af:d4:cc:e0:c3:39:75: a5:ed:34:97:d4:30:8b:6e:bc:36:85:a2:a7:0e:ac:20:3d:9c: d1:f2:52:b9:e4:3e:36:24:7e:da:13:b1:a2:88:d7:25:e3:e6: f8:6f:56:a4:95:ff:f8:d2:ee:97:c6:48:19:62:20:dd:96:82: 7a:ed:f7:5d:dd:89:78:25:21:c2:2c:52:de:c3:60:fb:5a:45: 63:8d:ad:19:8f:f3:76:83:6b:6c:0e:76:f2:2d:62:38:d3:77: e0:04:4a:e6:b6:9e:a5:29:31:14:3f:b1:e8:3a:43:2f:59:21: b6:e3:bc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGyNhgYZ/CnhutMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGY4OTJjYmYtNWVmNi00NmM5LWJjODktNDM2ZjhmNWQ4NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjWVM1411qHLKNob6oSnXlDGfIeGkOB7s98Q 8e+F0TigagCIfxzNXg2tLz0pDMbc46M9G9Hg55R9J+ueRn0Zr5HJqfDfe8UOhRWs whX/vzWwpd/OvK4UgTtu8iMvuRtOlU8sl9WZEDkM5qpm6f3JUFnFJIuL7IzValxZ B8BuGZ/BTIhOOLjEBN7KWIgMKiMLYw+T0CE6Qvdz54M4SgyPekXLMaL4JcFmCtYV 3JRt+cDRtR2D2CrFDzdLiWU7OvHsRtx3u5PAF+vJUJak+0qWwbY6U4LRjthd/RN1 3CH0InETdAtZeXO+S0WzzzxRo1g5u/au1pjFFWqI779LgoRX/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb9lmOfniSMIDYwHZJzOvwooarpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzhhZmY4MWUtNGQ1Ny0z YTY4LWE2M2YtNzBlMTZhNDIxMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx+gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALB78K4/5+3SQsxth75n19GlKD7ZI5UGmpCTUgDlV1nA4uglkgVv00kr da65O9E2SP9Pt6SXiTDkpkeFl5NkTvUOGnwJ2GVxU9Bd5BW70D09hquekLbR6Yfz XISaayu0MRJmj8pqpDcey7r24CfhAdn8cD86uclk0hDX/adSidIeK5IqB5AO7X/z r9TM4MM5daXtNJfUMItuvDaFoqcOrCA9nNHyUrnkPjYkftoTsaKI1yXj5vhvVqSV //jS7pfGSBliIN2Wgnrt913diXglIcIsUt7DYPtaRWONrRmP83aDa2wOdvItYjjT d+AESua2nqUpMRQ/seg6Qy9ZIbbjvLQ= -----END CERTIFICATE-----Generated at Tue Jul 1 03:49:05 2025 by rpki-client