$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: 6W0RQUYKMUy3YAqx7R3EntU/vCvZ5Qv+dve7pvWwMso= Subject key identifier: DA:AD:C2:53:2F:C6:96:DE:B0:6D:9B:3E:29:7A:03:A6:5F:4C:6B:5B Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584AA42B856256588CC1CE688B80 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:85:62:56:58:8c:c1:ce:68:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=3c3aa03a-beb3-496b-be02-8acf0fde72ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:34:f6:e5:0a:16:81:9b:f3:a4:39:03:2d: 85:ae:b6:ff:9e:c7:12:2d:6e:45:5b:bf:0e:2b:cc: 17:eb:03:6d:4e:b2:e7:30:1f:ac:54:57:b2:61:df: 3f:25:a1:23:a8:61:c3:99:02:80:52:f8:e7:63:5e: f9:aa:e4:bd:6a:41:f3:ce:0b:5a:20:bc:5e:9c:df: 76:9d:57:f3:b8:36:ae:44:1c:18:37:5e:1b:5e:9d: 7f:18:e8:e1:67:38:21:f4:8a:0b:87:1f:a1:fb:0c: bc:5d:33:3b:53:04:d8:67:86:5a:ff:5c:96:cb:4b: 8f:25:28:0d:93:95:96:ca:c5:30:5a:44:0a:2f:49: 2e:e8:5b:26:f6:8d:92:f2:18:33:b5:bd:7b:83:c9: ab:42:f0:cd:23:16:42:a8:6f:cf:ec:69:54:82:3b: 5b:c9:c4:2c:2b:1b:4d:ed:0a:a8:c9:19:ee:f3:37: ee:4d:82:8f:00:00:2e:3f:a7:21:5f:b9:4e:ba:9c: 49:8f:ff:16:b7:56:7b:d3:e3:1d:3f:0f:ce:0a:c6: e0:22:3f:04:b4:67:d3:6d:d6:5b:31:28:c0:b6:06: 20:f9:f4:17:a9:91:e1:30:22:d0:09:8d:cc:40:83: eb:c0:bf:a0:47:6f:17:9f:ef:7a:89:2e:b4:cb:d0: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:C2:53:2F:C6:96:DE:B0:6D:9B:3E:29:7A:03:A6:5F:4C:6B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:46:0a:2d:c3:6f:93:99:0f:0e:8d:3e:4b:e7:00:fd:a4: df:81:90:ce:6f:2c:8f:9a:8e:ea:11:dd:b7:99:f7:a1:95:b8: 82:a4:6f:25:bd:8a:42:00:d7:07:05:62:99:35:85:c5:f7:d1: 82:a7:6c:52:d1:4d:24:28:c0:f4:bc:13:ce:dd:87:39:1d:d7: b6:4d:f6:fc:b9:3c:c1:08:7c:44:56:71:44:78:b8:74:1d:c4: 70:01:c7:39:f8:95:ff:ab:a4:5c:80:56:9b:bd:18:db:3b:02: fe:3a:16:10:62:88:5e:00:7b:82:85:60:73:df:89:83:8a:87: 31:d7:c5:2a:b1:80:a9:0c:53:44:dc:fb:5c:c5:89:d8:7b:43: c8:31:b7:06:a5:a2:82:ee:60:65:3f:2e:a4:2d:d2:86:71:31: 90:bd:d6:ae:b9:43:ef:78:fe:c2:b2:a8:df:71:b6:8d:20:a5: f5:03:05:da:18:b7:84:a5:9c:6c:6b:51:bd:a4:15:4c:17:e7: 5b:9d:e1:49:11:6b:3f:ab:dc:b4:4f:40:c1:d2:de:92:cb:d5: d1:90:b7:44:96:04:86:8d:6e:0f:23:50:de:63:71:42:63:54: a2:e5:e7:e5:75:77:0a:23:66:51:02:29:d9:4d:c7:bf:50:09: 97:7a:59:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4ViVliMwc5oi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk M2MzYWEwM2EtYmViMy00OTZiLWJlMDItOGFjZjBmZGU3MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ms09uUKFoGb86Q5Ay2Frrb/nscSLW5FW78O K8wX6wNtTrLnMB+sVFeyYd8/JaEjqGHDmQKAUvjnY175quS9akHzzgtaILxenN92 nVfzuDauRBwYN14bXp1/GOjhZzgh9IoLhx+h+wy8XTM7UwTYZ4Za/1yWy0uPJSgN k5WWysUwWkQKL0ku6Fsm9o2S8hgztb17g8mrQvDNIxZCqG/P7GlUgjtbycQsKxtN 7QqoyRnu8zfuTYKPAAAuP6chX7lOupxJj/8Wt1Z70+MdPw/OCsbgIj8EtGfTbdZb MSjAtgYg+fQXqZHhMCLQCY3MQIPrwL+gR28Xn+96iS60y9CTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqtwlMvxpbesG2bPil6A6ZfTGtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoCRgotw2+TmQ8OjT5L5wD9pN+BkM5vLI+ajuoR3beZ96GVuIKkbyW9 ikIA1wcFYpk1hcX30YKnbFLRTSQowPS8E87dhzkd17ZN9vy5PMEIfERWcUR4uHQd xHABxzn4lf+rpFyAVpu9GNs7Av46FhBiiF4Ae4KFYHPfiYOKhzHXxSqxgKkMU0Tc +1zFidh7Q8gxtwalooLuYGU/LqQt0oZxMZC91q65Q+94/sKyqN9xto0gpfUDBdoY t4SlnGxrUb2kFUwX51ud4UkRaz+r3LRPQMHS3pLL1dGQt0SWBIaNbg8jUN5jcUJj VKLl5+V1dwojZlECKdlNx79QCZd6WU8= -----END CERTIFICATE-----Generated at Tue Aug 5 20:15:01 2025 by rpki-client