$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: fL0qyIQ/A9+SSH4Z0WVaBl1M8fEQ1njfB78p+NLg9j4= Subject key identifier: 8D:99:5A:91:19:D5:51:E7:86:89:30:C8:C3:FB:ED:59:0D:10:E0:32 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F43285849C4D4C2BE9AD4D51F3D3739C0 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c2:be:9a:d4:d5:1f:3d:37:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=ad98a4f5-6428-4cb9-a5c7-90d7eae89c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:25:70:a8:dd:e8:82:ec:01:86:37:7d:4e: df:58:94:27:a0:48:63:0a:27:87:77:6c:08:ca:5f: d0:15:3a:c1:46:38:4a:e2:cf:37:3e:e4:d1:46:39: b4:70:3c:bb:4c:5d:30:52:ee:79:1d:8d:db:ed:b5: 2f:11:41:aa:77:d5:c6:f6:ed:73:a7:5f:1c:b1:e5: 38:e2:a9:50:90:7e:cf:5f:f7:43:9c:b0:2d:3a:d4: 16:5d:08:97:f0:42:5d:d6:de:58:41:38:04:c6:c4: eb:b8:35:ad:9b:49:08:c0:42:86:d4:8c:1a:c8:b5: c7:ef:e7:e1:bb:6f:0a:6e:d2:f7:aa:b0:32:b4:f2: 6c:73:a4:b0:58:02:c5:f0:11:b5:5a:49:1b:95:7a: c7:7a:4c:f8:58:d7:d3:f2:09:b5:68:59:38:66:5c: f5:01:07:f5:04:6e:42:4a:ba:ff:7c:ad:87:a4:62: 3a:8c:1d:c7:7f:51:01:c9:bd:b9:bf:2f:7a:ae:3e: 44:72:1c:b3:94:86:f9:92:dd:5c:d3:01:e0:ce:55: 4f:ec:a0:d1:cd:5b:01:42:db:ac:ad:cf:41:79:68: 21:9f:1b:63:3b:43:03:79:f2:b3:10:c1:97:95:22: f2:5c:86:73:a7:81:3e:9f:42:79:13:2e:b1:73:0b: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:5A:91:19:D5:51:E7:86:89:30:C8:C3:FB:ED:59:0D:10:E0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:84:c9:b9:83:bd:de:74:02:93:56:9c:74:f6:5a:0f:65:63: 3a:a6:b9:ac:c4:0d:33:2b:90:d7:58:b5:bb:e4:c0:00:3b:ee: 32:2c:75:46:56:5a:80:d0:a4:57:c0:02:a0:7a:ce:25:ee:ca: e2:89:2b:10:0e:b3:e2:87:28:04:04:27:f6:18:ff:2e:de:49: ea:dc:da:70:fc:17:47:1a:1f:d1:e0:72:18:e2:f5:d1:bc:19: fe:68:7f:b9:e4:21:86:7f:9c:d7:75:e6:65:7d:ff:02:19:d8: e0:7b:da:19:5f:31:bc:0f:03:98:e6:c6:66:67:98:7b:a5:26: 36:ab:90:d6:da:d2:f1:0b:e5:33:7c:ad:13:68:a1:ad:63:c4: 60:d2:bd:95:23:73:62:ab:61:c5:ce:46:b7:9e:e1:22:9a:de: ad:ed:ca:92:a1:d3:4a:9b:72:54:8a:f5:27:f2:1b:94:40:bf: a9:21:12:55:66:0b:e9:81:33:c5:7e:df:d9:b1:8b:fe:25:a5: 65:6b:33:fb:da:1a:8c:3d:15:47:e7:77:03:61:54:5d:7e:5b: 48:3b:f6:69:9d:d3:e8:36:31:18:23:c3:59:54:d5:67:07:e0: f7:a2:a9:89:29:fc:06:30:70:69:d7:a7:dc:7e:71:c8:76:4a: 93:43:6c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1MK+mtTVHz03OcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YWQ5OGE0ZjUtNjQyOC00Y2I5LWE1YzctOTBkN2VhZTg5YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/olcKjd6ILsAYY3fU7fWJQnoEhjCieHd2wI yl/QFTrBRjhK4s83PuTRRjm0cDy7TF0wUu55HY3b7bUvEUGqd9XG9u1zp18cseU4 4qlQkH7PX/dDnLAtOtQWXQiX8EJd1t5YQTgExsTruDWtm0kIwEKG1IwayLXH7+fh u28KbtL3qrAytPJsc6SwWALF8BG1WkkblXrHekz4WNfT8gm1aFk4Zlz1AQf1BG5C Srr/fK2HpGI6jB3Hf1EByb25vy96rj5EchyzlIb5kt1c0wHgzlVP7KDRzVsBQtus rc9BeWghnxtjO0MDefKzEMGXlSLyXIZzp4E+n0J5Ey6xcwtGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ZWpEZ1VHnhokwyMP77VkNEOAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiEybmDvd50ApNWnHT2Wg9lYzqmuazEDTMrkNdYtbvkwAA77jIsdUZW WoDQpFfAAqB6ziXuyuKJKxAOs+KHKAQEJ/YY/y7eSerc2nD8F0caH9Hgchji9dG8 Gf5of7nkIYZ/nNd15mV9/wIZ2OB72hlfMbwPA5jmxmZnmHulJjarkNba0vEL5TN8 rRNooa1jxGDSvZUjc2KrYcXORree4SKa3q3typKh00qbclSK9SfyG5RAv6khElVm C+mBM8V+39mxi/4lpWVrM/vaGow9FUfndwNhVF1+W0g79mmd0+g2MRgjw1lU1WcH 4PeiqYkp/AYwcGnXp9x+cch2SpNDbKA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:28:16 2025 by rpki-client