$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: Vr8F+aJNpc0M1DAGuRPyjKVjNmEdRg9ScDZjWPeMIQ4= Subject key identifier: D9:2C:1E:9A:13:2C:2F:F6:72:5F:83:6A:BC:DE:B9:34:E5:42:B1:AE Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F4328584A0C05492C761775D6DEE05F00 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:49:2c:76:17:75:d6:de:e0:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d21e8a16-2b0d-4b19-9f72-20140e0269f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:d9:10:c6:3c:17:c3:60:17:0a:86:93:72: 47:26:87:7e:9a:b5:9d:c0:39:b9:25:f9:c4:ed:92: 8d:52:64:aa:9d:7d:63:2e:83:f0:a5:2b:25:55:05: 32:ab:66:80:17:5e:92:9f:57:8d:1e:a1:3b:f0:d1: e5:c5:61:67:63:a1:18:9c:58:d7:ad:d3:72:f4:4e: b4:8d:9f:da:81:cd:95:4c:d0:51:21:86:62:85:54: 5e:69:50:a6:cb:db:1a:3d:e7:54:01:e0:58:a8:6d: ba:24:fd:99:05:5b:0a:6d:73:fc:26:c4:fa:e5:dc: 8d:07:55:bd:10:68:e2:68:aa:2b:c4:74:15:0a:f1: 98:aa:b0:64:07:15:70:f1:cd:50:65:86:d6:5c:21: c4:dc:a7:3b:71:4b:e9:ce:33:d5:33:70:43:60:d4: 6c:9b:58:55:e1:c2:b2:b1:ec:60:a0:72:39:24:ce: 0e:5d:59:e0:4f:b7:c6:d3:fd:2e:8f:00:3b:8c:d5: 67:b3:54:c9:4c:dc:86:5c:bf:0a:23:70:33:8b:af: 59:bb:39:b1:18:39:0a:58:36:3e:a1:2b:a2:b9:29: 34:26:3f:fb:6b:98:9e:26:f7:eb:31:30:b8:7d:ef: ab:42:8c:60:4d:5c:2a:ee:dd:c5:7e:e9:82:b2:8a: 4b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:1E:9A:13:2C:2F:F6:72:5F:83:6A:BC:DE:B9:34:E5:42:B1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c1:5f:74:b9:28:48:ca:cf:93:37:42:05:df:e7:87:65:35: 54:47:b7:6f:3c:61:09:7d:7a:03:c5:4f:da:0c:3f:1e:21:6f: 70:b7:a1:df:48:07:ef:64:3b:21:20:db:c0:61:a9:ac:16:c0: 2b:b5:98:bb:22:c9:37:e8:5f:78:75:61:05:47:97:19:af:8e: c4:4e:8c:43:75:ba:a3:1d:fe:33:33:a0:a8:cc:71:f7:8a:fb: ce:0e:f1:83:f6:ee:2d:d9:3f:77:9d:fb:ec:e9:c0:1d:4e:41: 6a:18:64:d8:83:b1:38:c0:6f:11:bd:45:fd:fc:27:f6:25:c4: 7d:81:e6:4f:0a:7a:2b:a5:1d:d0:31:7c:99:4c:57:fe:88:ba: 04:a2:17:fe:63:2e:d0:d8:30:34:e1:59:9d:e7:05:c0:b8:1d: 5b:c6:ff:8a:c7:80:18:35:05:6e:2e:56:e7:a9:34:b5:a7:4c: c7:52:fb:ef:f4:b2:17:bf:b6:2a:ce:34:e8:0d:6f:e1:37:13: a2:2c:af:d9:19:4a:5c:7e:de:1c:d3:69:64:a3:81:d0:95:47: e5:06:6e:ab:11:c2:24:6e:6e:66:5c:46:ab:7c:ec:da:ea:f9: d1:7e:08:21:bf:0a:90:24:91:ce:6f:4a:a0:0d:5f:99:58:50: 9c:5d:b5:96 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEoMBUksdhd11t7gXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDIxZThhMTYtMmIwZC00YjE5LTlmNzItMjAxNDBlMDI2OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc7ZEMY8F8NgFwqGk3JHJod+mrWdwDm5JfnE 7ZKNUmSqnX1jLoPwpSslVQUyq2aAF16Sn1eNHqE78NHlxWFnY6EYnFjXrdNy9E60 jZ/agc2VTNBRIYZihVReaVCmy9saPedUAeBYqG26JP2ZBVsKbXP8JsT65dyNB1W9 EGjiaKorxHQVCvGYqrBkBxVw8c1QZYbWXCHE3Kc7cUvpzjPVM3BDYNRsm1hV4cKy sexgoHI5JM4OXVngT7fG0/0ujwA7jNVns1TJTNyGXL8KI3Azi69ZuzmxGDkKWDY+ oSuiuSk0Jj/7a5ieJvfrMTC4fe+rQoxgTVwq7t3FfumCsopL8wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNksHpoTLC/2cl+DarzeuTTlQrGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAPBX3S5KEjKz5M3QgXf54dlNVRHt288YQl9egPF T9oMPx4hb3C3od9IB+9kOyEg28BhqawWwCu1mLsiyTfoX3h1YQVHlxmvjsROjEN1 uqMd/jMzoKjMcfeK+84O8YP27i3ZP3ed++zpwB1OQWoYZNiDsTjAbxG9Rf38J/Yl xH2B5k8KeiulHdAxfJlMV/6IugSiF/5jLtDYMDThWZ3nBcC4HVvG/4rHgBg1BW4u VuepNLWnTMdS++/0she/tirONOgNb+E3E6Isr9kZSlx+3hzTaWSjgdCVR+UGbqsR wiRubmZcRqt87Nrq+dF+CCG/CpAkkc5vSqANX5lYUJxdtZY= -----END CERTIFICATE-----Generated at Mon Jun 30 04:01:49 2025 by rpki-client