$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa File: de8c254d-a582-3b01-9da5-fc1d49739f37.roa (raw, json) Hash identifier: oLGCTOO8N0Atn2oUxJ8k4BDCZ5XzOT9kUhF8jli64vk= Subject key identifier: 04:94:6D:16:0C:CA:E3:27:7A:9F:16:CC:29:6F:D1:87:54:D2:F0:CF Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Certificate serial: 010D0C9F43285849E4EFB474F73AAB9E75E55D80 Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 394625 IP address blocks: 199.38.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:b4:74:f7:3a:ab:9e:75:e5:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=50894b91-b61a-43a9-a3e9-2d9fd360d59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:ee:5b:98:65:db:50:81:3a:09:2d:47:3d: 62:ae:5c:72:f7:8a:ab:f2:20:1f:0e:17:ba:a1:1f: 86:3b:4c:d0:7a:28:b5:6e:5c:e6:dd:5a:47:e6:b2: 2c:53:8d:71:cc:b1:53:9e:58:aa:cf:b1:14:8a:04: 9b:5e:c3:e9:ad:60:39:05:34:ce:9a:7d:b0:7b:97: e6:57:86:d4:a0:d4:cf:fe:a9:4a:8c:ae:f0:b4:17: db:ca:01:04:73:db:3d:89:8f:ab:e0:7a:71:4b:5b: 63:6d:e0:09:b0:23:25:91:58:f2:57:ca:00:a6:7f: b6:dd:be:ea:42:7f:6f:ed:eb:12:38:66:9b:3f:ce: 20:4e:34:dd:1d:23:cf:b6:ba:ce:bb:05:c9:f6:eb: e0:41:19:62:dd:f1:05:32:8e:96:e7:bb:81:78:28: 25:e5:e5:78:95:84:e6:c6:0f:62:5b:e4:ad:43:3b: bf:74:31:88:4f:b6:17:db:e2:2a:67:b9:11:de:9e: 32:48:7e:87:30:45:18:34:ba:f4:d0:1c:ad:5e:4d: ac:6c:ae:31:e7:41:12:12:14:d5:25:20:28:5c:87: ec:5c:94:cb:1a:67:5b:93:bd:f3:4b:c6:ad:d9:50: 93:5b:74:81:c1:e0:0e:69:3a:bf:e2:4b:14:8b:a6: c1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:6D:16:0C:CA:E3:27:7A:9F:16:CC:29:6F:D1:87:54:D2:F0:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/de8c254d-a582-3b01-9da5-fc1d49739f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl X509v3 Authority Key Identifier: keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cf:b8:9d:4d:8d:4e:8e:17:3b:7b:83:e0:e6:a5:cf:c3:70: 29:c3:67:79:f2:1e:bd:63:22:45:4d:93:83:fc:c9:6e:56:de: ab:92:ff:ba:5e:43:8f:1b:49:a9:f9:04:b8:96:84:bd:03:f4: 42:c6:b5:2e:7b:7a:14:e2:e2:cd:92:09:49:12:26:06:2f:e7: 18:66:e9:d1:5e:05:2b:b9:98:41:e1:57:73:c2:55:15:06:59: 6a:b6:24:c1:41:21:60:8e:55:f2:a5:a8:86:78:cf:f2:d9:b2: 5a:ea:dc:7f:25:da:77:9a:de:04:f3:88:2a:fa:dd:3d:f3:fe: f4:d8:7f:aa:9b:59:82:4e:29:58:fd:b8:31:da:15:b5:6a:f7: 75:f7:ed:4e:3a:b5:a3:90:11:50:a0:79:f5:b6:98:1f:5c:4e: c2:a5:a7:36:9f:72:0f:31:16:fe:53:f3:31:eb:cc:15:8d:25: 01:dd:b2:91:b5:06:00:d5:07:a2:8f:b2:9b:69:4a:01:d0:00: 93:7e:6a:f0:12:8c:85:38:07:cc:0e:9d:5b:45:20:66:90:a3: 16:df:3b:b0:19:30:9f:f8:33:18:96:c3:71:ab:3a:bb:4e:e0: 1f:a9:3e:b8:e6:62:1f:0e:1c:26:d7:28:98:b0:78:9a:a4:5d: e4:4c:1a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77R09zqrnnXlXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyYzUzMzUtMDIyYS00YTFkLTkxMWQtNDYxMmRjNmU4 NmQ3MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NTA4OTRiOTEtYjYxYS00M2E5LWEzZTktMmQ5ZmQzNjBkNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD3uW5hl21CBOgktRz1irlxy94qr8iAfDhe6 oR+GO0zQeii1blzm3VpH5rIsU41xzLFTnliqz7EUigSbXsPprWA5BTTOmn2we5fm V4bUoNTP/qlKjK7wtBfbygEEc9s9iY+r4HpxS1tjbeAJsCMlkVjyV8oApn+23b7q Qn9v7esSOGabP84gTjTdHSPPtrrOuwXJ9uvgQRli3fEFMo6W57uBeCgl5eV4lYTm xg9iW+StQzu/dDGIT7YX2+IqZ7kR3p4ySH6HMEUYNLr00BytXk2sbK4x50ESEhTV JSAoXIfsXJTLGmdbk73zS8at2VCTW3SBweAOaTq/4ksUi6bBywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASUbRYMyuMnep8WzClv0YdU0vDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJj NTMzNS0wMjJhLTRhMWQtOTExZC00NjEyZGM2ZTg2ZDcvZGU4YzI1NGQtYTU4Mi0z YjAxLTlkYTUtZmMxZDQ5NzM5ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTUyYzUzMzUtMDIyYS00YTFkLTkx MWQtNDYxMmRjNmU4NmQ3LzU1MmM1MzM1LTAyMmEtNGExZC05MTFkLTQ2MTJkYzZl ODZkNy5jcmwwHwYDVR0jBBgwFoAUjAwiI9ovy4eQJBPUvKf3GVyiWtwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81NTJjNTMzNS0wMjJhLTRhMWQtOTExZC00NjEy ZGM2ZTg2ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxybyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfPuJ1NjU6OFzt7g+Dmpc/DcCnDZ3nyHr1jIkVNk4P8yW5W3quS/7pe Q48bSan5BLiWhL0D9ELGtS57ehTi4s2SCUkSJgYv5xhm6dFeBSu5mEHhV3PCVRUG WWq2JMFBIWCOVfKlqIZ4z/LZslrq3H8l2nea3gTziCr63T3z/vTYf6qbWYJOKVj9 uDHaFbVq93X37U46taOQEVCgefW2mB9cTsKlpzafcg8xFv5T8zHrzBWNJQHdspG1 BgDVB6KPsptpSgHQAJN+avASjIU4B8wOnVtFIGaQoxbfO7AZMJ/4MxiWw3GrOrtO 4B+pPrjmYh8OHCbXKJiweJqkXeRMGjw= -----END CERTIFICATE-----Generated at Mon Jun 16 13:09:53 2025 by rpki-client