$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: d4w0t9og2XvW00PexDGkJQXn60Llzk9KSQh1siPlgHw= Subject key identifier: F0:58:31:19:A1:F3:3E:46:24:0B:A4:08:2C:53:41:9B:37:77:9C:E5 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F43285849350E9A088DF2DDB4EEC3DE00 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9a:08:8d:f2:dd:b4:ee:c3:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=ae6dea00-eb1d-4c1b-b41f-f5b35a274c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:4d:59:6a:4e:96:d7:b9:34:43:62:0e:04: 95:f7:99:23:0d:95:a1:9f:13:e4:8e:b3:e7:8e:c0: 3b:7f:73:34:21:1b:34:0f:ff:11:8a:aa:04:f0:0d: e1:c9:80:dc:f4:47:ed:23:a6:d8:b4:02:1c:92:5c: ec:2e:ca:c6:44:ed:81:9e:f9:19:47:3d:08:66:f6: 7d:9b:bb:58:27:73:f1:ec:3c:b6:0a:ed:ad:d4:0e: 78:bd:d8:65:bd:de:8b:59:93:d9:be:51:0e:68:68: aa:d8:97:d0:d4:32:0c:4d:a6:b0:1f:e9:29:bf:88: a4:46:aa:5b:2d:a4:d2:9c:58:16:04:f3:fb:16:b9: b6:8a:69:d2:b1:67:41:e0:b6:61:ca:bc:5d:7b:ad: a8:e3:00:bd:1f:0f:f3:07:81:6f:b8:2a:d2:02:6b: 7d:5b:93:ab:18:06:6d:01:c5:c7:1a:e6:8e:b4:c5: 96:e4:a9:ab:fb:51:00:16:9c:84:ff:33:73:ab:c7: f6:12:7d:0f:51:6d:df:55:a1:be:fc:2d:6e:61:45: f4:c6:94:51:90:2d:c3:90:19:2a:bf:0d:e2:50:83: 2d:c7:99:02:46:62:14:7e:f1:1e:7b:db:c1:19:33: d3:f5:83:bc:71:f1:06:ff:8b:fd:b0:94:af:18:d2: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:31:19:A1:F3:3E:46:24:0B:A4:08:2C:53:41:9B:37:77:9C:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1e:da:75:4c:90:9c:ff:8e:72:8f:b7:e2:18:6f:03:95:10: 38:38:ac:02:76:70:e3:dd:37:d7:5d:b6:12:f9:05:d1:8a:22: 83:b3:93:d8:dd:96:0c:37:f5:8c:9e:74:50:0c:93:3d:48:26: 93:e1:c9:eb:cd:d5:4b:d8:80:a1:a0:d6:08:db:5a:12:7e:1c: ae:b6:5a:8b:44:09:bb:e8:34:4a:ff:ab:cd:47:5f:c0:b2:6e: 5c:8d:e4:bb:97:38:e5:60:ed:29:eb:c1:fb:c2:75:ff:f6:f8: 66:d9:8f:24:56:ff:df:b1:6f:28:db:06:51:89:ac:7b:2c:48: 46:43:eb:9a:4f:24:05:13:2d:60:be:8e:18:4b:b1:75:7c:40: f9:cb:86:3d:7c:ae:95:ed:f7:8d:36:f8:fc:a4:37:63:5a:24: 4b:d3:47:f7:3a:64:e4:37:a0:7d:42:92:da:26:a5:a2:14:eb: d5:11:45:e9:1c:9b:1b:2e:e5:7c:74:50:93:61:44:83:0a:55: 7e:e2:2b:c1:b7:66:d6:d0:a7:dd:f9:c7:79:59:a0:23:32:f5: 6e:4a:69:95:a5:93:43:56:d7:66:2b:08:80:dc:6f:5a:af:d0: ce:53:8d:b5:a6:94:86:49:11:b3:9d:87:f4:68:c1:f0:84:e9: ce:3d:4f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpoIjfLdtO7D3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YWU2ZGVhMDAtZWIxZC00YzFiLWI0MWYtZjViMzVhMjc0YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJtNWWpOlte5NENiDgSV95kjDZWhnxPkjrPn jsA7f3M0IRs0D/8RiqoE8A3hyYDc9EftI6bYtAIcklzsLsrGRO2BnvkZRz0IZvZ9 m7tYJ3Px7Dy2Cu2t1A54vdhlvd6LWZPZvlEOaGiq2JfQ1DIMTaawH+kpv4ikRqpb LaTSnFgWBPP7Frm2imnSsWdB4LZhyrxde62o4wC9Hw/zB4FvuCrSAmt9W5OrGAZt AcXHGuaOtMWW5Kmr+1EAFpyE/zNzq8f2En0PUW3fVaG+/C1uYUX0xpRRkC3DkBkq vw3iUIMtx5kCRmIUfvEee9vBGTPT9YO8cfEG/4v9sJSvGNJxzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBYMRmh8z5GJAukCCxTQZs3d5zlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8e2nVMkJz/jnKPt+IYbwOVEDg4rAJ2cOPdN9ddthL5BdGKIoOzk9jd lgw39YyedFAMkz1IJpPhyevN1UvYgKGg1gjbWhJ+HK62WotECbvoNEr/q81HX8Cy blyN5LuXOOVg7SnrwfvCdf/2+GbZjyRW/9+xbyjbBlGJrHssSEZD65pPJAUTLWC+ jhhLsXV8QPnLhj18rpXt9402+PykN2NaJEvTR/c6ZOQ3oH1CktompaIU69URRekc mxsu5Xx0UJNhRIMKVX7iK8G3ZtbQp935x3lZoCMy9W5KaZWlk0NW12YrCIDcb1qv 0M5TjbWmlIZJEbOdh/RowfCE6c49T4I= -----END CERTIFICATE-----Generated at Sat Apr 26 18:02:47 2025 by rpki-client