$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: pN+zdFG0Eqo/A/ys3CboXir3jA52DTsgok3zVmAVSa0= Subject key identifier: 77:86:C1:67:A8:EA:0D:5C:FE:3D:4E:97:A1:1D:43:9D:59:FB:E7:D4 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584A146573EFC770058ECCE20740 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:73:ef:c7:70:05:8e:cc:e2:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b2f3ab8e-b2c7-44f4-9179-31352e149cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3f:49:32:1f:22:b9:97:74:3d:1d:cb:eb:78: 95:2d:b3:06:6e:09:81:ba:cf:fd:d5:9d:6f:1b:46: a5:11:ec:92:19:b4:5a:b0:08:30:34:0f:9b:33:7f: 40:d3:6c:61:c6:68:5f:f4:ba:d8:80:f9:9e:f0:dc: 33:17:bf:20:d3:e2:2a:e0:b8:15:d4:d4:f6:be:5a: 91:86:1c:da:1a:d7:75:c6:2a:44:d8:fc:fd:34:08: 49:4a:90:a5:15:3f:d7:35:a2:53:a1:68:55:95:29: ab:2a:94:d6:c1:91:be:c6:bc:a3:f6:8b:d1:86:c0: c7:d3:e6:46:85:45:02:37:76:92:db:6a:9a:01:f5: 5c:0e:3a:01:9d:74:74:35:e5:96:e9:10:41:85:80: 4b:89:0f:b1:39:72:5d:14:1d:63:20:cf:09:4f:9c: 0f:11:5d:3a:e2:55:07:cd:1f:40:41:27:03:b9:4b: c0:4b:86:b2:48:8c:b0:fb:35:60:89:eb:0d:7c:4d: bd:72:fb:1c:29:b8:ea:c6:06:f1:58:0b:25:90:a9: 8f:7a:23:69:ea:69:06:11:14:7c:e0:c4:42:2e:c9: 02:c5:76:d9:b9:57:36:8b:a9:78:ee:db:dd:de:07: e7:97:76:57:ca:e5:48:83:a4:04:9e:ed:60:e4:01: 73:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:86:C1:67:A8:EA:0D:5C:FE:3D:4E:97:A1:1D:43:9D:59:FB:E7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:59:dd:a7:1a:00:14:55:11:96:0e:45:15:c5:73:6e:95:0b: 0d:cd:59:fb:75:18:4b:09:2e:e7:c7:ce:fd:32:8f:70:5d:28: 10:07:ec:d2:aa:14:34:1f:c2:12:73:4e:6e:f6:3f:76:d6:e0: 6c:69:a3:91:66:97:82:22:a6:dc:2f:74:56:10:33:d7:cf:e5: 47:11:03:d6:b8:49:e0:dd:c5:2c:95:56:7f:43:30:1c:eb:9d: 7c:c5:80:3a:2d:a9:81:54:5d:ea:0f:fc:68:18:d2:21:20:54: 4e:9a:0e:43:00:8c:6f:d0:ab:ed:fc:bb:7a:46:91:4a:4d:fd: 99:23:7f:a0:1b:f0:6f:76:38:f6:0e:1a:5f:c6:a2:a6:da:5a: 8a:0b:3c:f9:c2:c6:e7:99:0c:4f:5d:74:84:b2:f7:c4:77:d7: 51:c7:c2:a4:25:cd:8d:0b:72:39:68:12:f9:86:bc:d8:5f:26: f8:f7:06:8c:12:2d:c7:a3:aa:4c:3e:57:54:07:77:eb:86:6c: 5a:90:8b:47:41:29:c6:b9:d2:b1:55:be:ed:e6:de:02:db:3e: c8:02:a4:3c:b4:75:14:08:b3:90:f1:61:8d:12:79:47:df:58: 16:46:03:e2:2e:5b:ee:a7:f5:f3:5d:5e:bb:ef:e3:9d:14:ed: 2e:7c:7b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXPvx3AFjsziB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjJmM2FiOGUtYjJjNy00NGY0LTkxNzktMzEzNTJlMTQ5Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz9JMh8iuZd0PR3L63iVLbMGbgmBus/91Z1v G0alEeySGbRasAgwNA+bM39A02xhxmhf9LrYgPme8NwzF78g0+Iq4LgV1NT2vlqR hhzaGtd1xipE2Pz9NAhJSpClFT/XNaJToWhVlSmrKpTWwZG+xryj9ovRhsDH0+ZG hUUCN3aS22qaAfVcDjoBnXR0NeWW6RBBhYBLiQ+xOXJdFB1jIM8JT5wPEV064lUH zR9AQScDuUvAS4aySIyw+zVgiesNfE29cvscKbjqxgbxWAslkKmPeiNp6mkGERR8 4MRCLskCxXbZuVc2i6l47tvd3gfnl3ZXyuVIg6QEnu1g5AFzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeGwWeo6g1c/j1Ol6EdQ51Z++fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtZ3acaABRVEZYORRXFc26VCw3NWft1GEsJLufHzv0yj3BdKBAH7NKq FDQfwhJzTm72P3bW4Gxpo5Fml4IiptwvdFYQM9fP5UcRA9a4SeDdxSyVVn9DMBzr nXzFgDotqYFUXeoP/GgY0iEgVE6aDkMAjG/Qq+38u3pGkUpN/Zkjf6Ab8G92OPYO Gl/GoqbaWooLPPnCxueZDE9ddISy98R311HHwqQlzY0LcjloEvmGvNhfJvj3BowS Lcejqkw+V1QHd+uGbFqQi0dBKca50rFVvu3m3gLbPsgCpDy0dRQIs5DxYY0SeUff WBZGA+IuW+6n9fNdXrvv450U7S58e9w= -----END CERTIFICATE-----Generated at Mon Jun 16 02:24:16 2025 by rpki-client