$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa File: 84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa (raw, json) Hash identifier: PVUkx64dDlbSiDmo+Lfk5Ylkq4O3y8PfSCso0A5/D50= Subject key identifier: A3:7D:D5:9B:A4:A6:79:53:C5:4C:04:36:B9:E4:1F:4F:49:F3:0D:0B Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584A3CE0260F03B6D9CA7AE2E800 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 6498 IP address blocks: 199.249.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:26:0f:03:b6:d9:ca:7a:e2:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=c35d5ba8-1da7-463b-858f-41745de15f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:55:a2:23:78:76:95:86:29:1c:7d:f4:de: d6:56:ba:3d:70:f2:79:23:54:94:96:d6:ff:5c:4a: 5c:0a:0b:15:a5:08:7e:ea:2c:99:b2:86:d7:94:dc: b6:00:17:9b:f0:79:4c:3e:6d:01:0a:19:4c:a3:f2: d4:e1:78:86:ba:fa:26:06:fc:4e:d6:6a:21:f4:23: f6:73:67:61:2e:7c:4d:05:12:d7:0b:25:ce:67:8d: c7:92:28:3b:c1:2a:66:9c:f1:c6:fe:14:1d:0c:36: 19:6d:05:1c:05:21:5f:c2:2e:52:91:b3:16:bb:2f: ac:91:3a:85:b2:72:51:8a:04:8f:85:a7:42:e7:c5: dd:db:38:f9:6e:04:38:94:5c:72:f1:ed:67:e6:bd: 52:78:45:b2:a8:69:1c:21:e9:ae:a1:bc:ab:ca:22: a8:2e:59:cd:89:17:12:e2:e3:52:77:20:b6:55:37: d2:78:f7:0b:ca:c6:0d:81:ff:7e:71:c4:d7:3a:0a: 5a:0b:a9:ba:4b:41:39:14:c4:3b:6f:d5:a1:48:3f: f1:a4:2b:89:71:ec:0b:d3:ee:08:81:97:8a:91:30: b6:2b:70:86:44:ce:f3:74:41:a9:32:ae:50:d6:01: 55:02:78:54:2b:9f:b5:ad:d3:cb:bc:79:07:c9:fe: fa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:D5:9B:A4:A6:79:53:C5:4C:04:36:B9:E4:1F:4F:49:F3:0D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/84a605f6-859c-3546-8b63-9a0eeb2e63f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 199.249.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:51:18:24:c2:f5:20:27:80:9d:ce:c5:5a:49:49:b2:3b:3f: 67:47:95:a8:f8:b8:b8:0d:5a:6e:66:ae:93:50:7e:53:31:ea: 3e:e5:64:1a:7f:18:0d:c7:1e:28:d6:72:84:7b:a0:77:76:22: 2a:2a:b6:6d:4d:f5:5b:56:c1:5f:29:96:f7:37:b4:2a:7f:99: 97:e3:3f:8a:27:9f:63:4c:a6:08:fb:e9:ad:12:74:ce:4a:0e: 4c:a0:8c:d9:eb:af:1c:0b:89:93:51:20:2a:f8:d3:a4:a6:7c: a0:ba:a0:ee:50:d5:00:51:4e:a2:f1:d8:80:4d:f3:82:4d:03: 21:31:10:32:f8:32:53:c7:7c:3e:55:76:35:f0:f7:d5:28:7d: 55:73:fb:30:df:03:19:10:9c:29:00:a9:32:11:5c:6c:31:da: bd:27:75:a2:a2:59:b4:fc:1f:e3:6b:c1:cf:c8:88:17:35:56: 2c:54:3c:5d:bd:30:24:de:19:38:50:0c:ff:13:80:8d:ef:ae: da:2a:db:67:50:0f:bd:40:43:c4:0d:77:30:8a:1b:f6:2e:a9: 62:8f:09:ba:a3:5b:3f:0a:57:eb:33:d8:1e:4c:89:b4:34:58: 08:40:bf:0b:76:a8:04:b2:aa:13:eb:f8:f4:6c:60:dc:40:e4: fa:81:f2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CYPA7bZynri6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk YzM1ZDViYTgtMWRhNy00NjNiLTg1OGYtNDE3NDVkZTE1ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0thVoiN4dpWGKRx99N7WVro9cPJ5I1SUltb/ XEpcCgsVpQh+6iyZsobXlNy2ABeb8HlMPm0BChlMo/LU4XiGuvomBvxO1moh9CP2 c2dhLnxNBRLXCyXOZ43Hkig7wSpmnPHG/hQdDDYZbQUcBSFfwi5SkbMWuy+skTqF snJRigSPhadC58Xd2zj5bgQ4lFxy8e1n5r1SeEWyqGkcIemuobyryiKoLlnNiRcS 4uNSdyC2VTfSePcLysYNgf9+ccTXOgpaC6m6S0E5FMQ7b9WhSD/xpCuJcewL0+4I gZeKkTC2K3CGRM7zdEGpMq5Q1gFVAnhUK5+1rdPLvHkHyf76HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN91ZukpnlTxUwENrnkH09J8w0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvODRhNjA1ZjYtODU5Yy0z NTQ2LThiNjMtOWEwZWViMmU2M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdRGCTC9SAngJ3OxVpJSbI7P2dHlaj4uLgNWm5mrpNQflMx6j7lZBp/ GA3HHijWcoR7oHd2Iioqtm1N9VtWwV8plvc3tCp/mZfjP4onn2NMpgj76a0SdM5K DkygjNnrrxwLiZNRICr406SmfKC6oO5Q1QBRTqLx2IBN84JNAyExEDL4MlPHfD5V djXw99UofVVz+zDfAxkQnCkAqTIRXGwx2r0ndaKiWbT8H+Nrwc/IiBc1VixUPF29 MCTeGThQDP8TgI3vrtoq22dQD71AQ8QNdzCKG/YuqWKPCbqjWz8KV+sz2B5MibQ0 WAhAvwt2qASyqhPr+PRsYNxA5PqB8g0= -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:01 2025 by rpki-client