$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/db87c754-86c3-3598-8cb0-edac3cdac02b.roa File: db87c754-86c3-3598-8cb0-edac3cdac02b.roa (raw, json) Hash identifier: n+Tu8dRJXSe9UuHktMSHSW6q28ICI1FTq6rkBhsKMi8= Subject key identifier: D5:B5:46:45:45:8A:51:1B:27:2A:FE:A4:74:97:CB:97:CF:DA:06:6B Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584A3CE025F9D55A527201A1D54D Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/db87c754-86c3-3598-8cb0-edac3cdac02b.roa Signing time: Thu 19 Jun 2025 01:00:50 +0000 ROA not before: Thu 19 Jun 2025 01:00:50 +0000 ROA not after: Wed 17 Sep 2025 01:00:50 +0000 asID: 6498 IP address blocks: 199.38.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:e0:25:f9:d5:5a:52:72:01:a1:d5:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jun 19 01:00:50 2025 GMT Not After : Sep 17 01:00:50 2025 GMT Subject: CN=5f837b5a-97ea-4462-bae2-7561276f65e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:0a:73:29:de:75:8c:40:78:19:f7:6e:de: 51:6c:e5:20:92:b6:d1:0f:34:e5:05:f1:ae:ee:76: 45:44:04:33:4b:b9:06:17:3d:4e:40:42:f3:0e:ad: 3d:86:4b:df:dc:73:39:0a:cb:0e:ac:73:89:a6:5c: 22:c9:54:92:2c:c6:ad:17:c6:d8:7c:14:c6:ec:bb: 8a:27:99:7c:21:d6:c0:9b:7b:95:1f:15:f6:85:79: 7a:78:4a:8d:2f:e5:70:91:50:e7:61:93:d1:c1:07: 40:0b:89:2c:de:70:00:a1:65:e8:50:92:88:78:71: 5f:fa:13:1b:94:09:c9:a6:15:e1:1a:74:46:7e:58: 65:9f:49:77:b9:38:30:3d:b1:a3:cf:82:95:3b:38: e6:d1:64:d4:cf:c8:81:ca:4f:e1:28:3e:7f:7b:56: 32:43:8b:ea:48:aa:88:15:ea:86:8b:2a:a4:78:66: d6:a6:bd:3e:ba:b2:49:42:b2:96:9b:c3:d8:8d:4a: cb:01:76:61:78:4d:f6:db:d3:02:d4:18:6c:2d:fb: 2f:30:89:5c:d5:04:89:15:4a:be:8e:18:b7:43:fe: b2:99:46:c6:79:ee:5c:4c:a2:c8:a5:5a:16:66:c5: 74:93:34:bf:ce:dc:eb:ff:4f:62:4b:68:39:11:1b: 5a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B5:46:45:45:8A:51:1B:27:2A:FE:A4:74:97:CB:97:CF:DA:06:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/db87c754-86c3-3598-8cb0-edac3cdac02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 199.38.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:32:0b:84:41:c8:df:05:ca:6d:e9:ad:23:86:f8:0d:d6:1f: 29:8a:e7:52:9d:5e:ab:09:38:2b:65:d4:d5:e3:d0:55:ba:f6: 99:c3:b7:e3:e7:33:b7:a7:09:a6:ff:ad:8b:b9:70:d2:47:52: 7f:b3:9f:65:26:92:81:b2:1c:4b:b1:07:e6:4e:88:01:eb:36: 55:e6:ef:92:d1:be:27:7f:c8:6e:ad:8b:a8:2f:f3:f0:b1:17: 20:4b:d5:64:09:29:1a:25:7b:5e:8e:65:76:33:94:a9:f0:1b: e8:99:ef:fd:f9:87:3b:31:70:5f:6d:89:09:aa:46:fe:2d:71: 6e:3c:ee:50:f0:62:eb:6f:d4:b1:b4:2b:32:fa:03:fd:a9:84: c3:61:0f:fb:95:b7:2c:ff:ca:87:db:22:91:18:b1:6d:4c:30: a7:05:f0:48:52:9a:72:2b:71:51:fc:d9:d9:37:08:94:d8:1b: 54:eb:77:f5:40:fc:94:f9:e8:32:f2:db:48:41:5b:ef:66:28: 3e:25:24:9d:4a:86:f0:dc:86:4e:cb:8a:9d:32:eb:c8:f9:80: c3:21:89:2b:d6:42:e1:50:4a:c7:2e:e1:45:ce:d7:db:e6:12: b2:b8:ec:22:f3:33:ea:ae:b3:f0:bf:dd:5a:56:61:5f:f6:aa: f2:bc:ba:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CX51VpScgGh1U0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk NWY4MzdiNWEtOTdlYS00NDYyLWJhZTItNzU2MTI3NmY2NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc8KcynedYxAeBn3bt5RbOUgkrbRDzTlBfGu 7nZFRAQzS7kGFz1OQELzDq09hkvf3HM5CssOrHOJplwiyVSSLMatF8bYfBTG7LuK J5l8IdbAm3uVHxX2hXl6eEqNL+VwkVDnYZPRwQdAC4ks3nAAoWXoUJKIeHFf+hMb lAnJphXhGnRGflhln0l3uTgwPbGjz4KVOzjm0WTUz8iByk/hKD5/e1YyQ4vqSKqI FeqGiyqkeGbWpr0+urJJQrKWm8PYjUrLAXZheE3229MC1BhsLfsvMIlc1QSJFUq+ jhi3Q/6ymUbGee5cTKLIpVoWZsV0kzS/ztzr/09iS2g5ERtaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW1RkVFilEbJyr+pHSXy5fP2gZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvZGI4N2M3NTQtODZjMy0z NTk4LThjYjAtZWRhYzNjZGFjMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8yC4RByN8Fym3prSOG+A3WHymK51KdXqsJOCtl1NXj0FW69pnDt+Pn M7enCab/rYu5cNJHUn+zn2UmkoGyHEuxB+ZOiAHrNlXm75LRvid/yG6ti6gv8/Cx FyBL1WQJKRole16OZXYzlKnwG+iZ7/35hzsxcF9tiQmqRv4tcW487lDwYutv1LG0 KzL6A/2phMNhD/uVtyz/yofbIpEYsW1MMKcF8EhSmnIrcVH82dk3CJTYG1Trd/VA /JT56DLy20hBW+9mKD4lJJ1KhvDchk7Lip0y68j5gMMhiSvWQuFQSscu4UXO19vm ErK47CLzM+qus/C/3VpWYV/2qvK8uuo= -----END CERTIFICATE-----Generated at Sun Jun 29 16:42:38 2025 by rpki-client