$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa File: c4cf259e-e700-3217-b9f2-8c833c86c901.roa (raw, json) Hash identifier: F+0+SJTIIlbu1XA42wqkIqYqJf5ntxTI3rR6qv8DCbo= Subject key identifier: 02:7D:18:3E:28:B3:92:1D:FA:91:2D:BF:47:C6:E5:8E:34:F5:C8:55 Certificate issuer: /CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c Certificate serial: 010D0C9F43285849EA851F6F96A8F799FAFF8600 Authority key identifier: 09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa Signing time: Tue 20 May 2025 13:01:05 +0000 ROA not before: Tue 20 May 2025 13:01:05 +0000 ROA not after: Mon 18 Aug 2025 13:01:05 +0000 asID: 8075 IP address blocks: 199.38.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:85:1f:6f:96:a8:f7:99:fa:ff:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff91cfb-8c05-4ee8-9006-f7a1e162f92c Validity Not Before: May 20 13:01:05 2025 GMT Not After : Aug 18 13:01:05 2025 GMT Subject: CN=e381e988-be09-4770-bb9b-5ea8be5b2226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:8c:ab:d3:26:3a:73:8b:83:dd:83:d1:4c: 9b:da:c7:d1:ee:f6:23:29:af:6c:ac:9a:2d:6a:cc: 78:88:92:07:f7:54:65:6c:54:b6:08:27:7b:cc:b8: be:6b:eb:9e:7c:75:77:ac:8e:e4:14:29:8f:5c:84: d3:d6:a1:c4:9f:d5:71:93:0f:8d:33:a2:71:b9:1a: 66:22:54:73:e7:45:8b:4b:9c:e9:1f:85:ce:c9:e9: b4:f2:61:53:d9:03:72:59:40:1f:2a:6a:52:c6:16: d9:58:8e:2f:1a:e2:bb:2f:c1:d6:8c:f3:10:6a:da: 73:49:d7:c5:8d:6c:40:18:df:4f:20:0d:8f:48:be: ff:2b:e0:92:8f:3d:c2:2c:56:f2:d5:d4:5f:3f:37: 12:7f:db:dd:6c:f9:bd:8e:f9:7c:70:49:5c:56:02: 25:75:7d:d6:db:66:a1:bb:44:7c:17:fb:31:4d:c2: ab:18:b9:c1:d9:b3:f7:32:42:eb:3f:6b:b5:fc:1b: 8f:5e:08:15:c1:79:b3:37:ea:15:0c:be:b1:ff:96: 94:42:ce:1b:83:e2:39:17:de:f2:26:70:e0:84:57: 85:5c:59:1e:04:5c:c5:3f:09:dd:af:7e:f0:0b:25: ef:af:f6:21:b7:46:8c:2f:0b:47:18:41:66:31:45: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7D:18:3E:28:B3:92:1D:FA:91:2D:BF:47:C6:E5:8E:34:F5:C8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/c4cf259e-e700-3217-b9f2-8c833c86c901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.crl X509v3 Authority Key Identifier: keyid:09:F4:11:37:AC:74:7E:B2:59:25:BC:46:14:9E:F9:6E:C9:B7:8A:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9ff91cfb-8c05-4ee8-9006-f7a1e162f92c.cer sbgp-ipAddrBlock: critical IPv4: 199.38.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:dc:26:b8:2d:06:23:32:e3:5a:ed:91:e3:f6:7d:24:b2:d8: ce:4e:0d:a8:c8:d2:62:b0:e3:58:36:e1:2a:ad:26:37:eb:f9: e3:23:b3:33:f2:6e:dd:e6:85:ef:f0:9e:52:cb:ba:c9:db:ac: 85:d8:1e:c7:b2:78:8b:95:a3:fb:00:cb:13:df:3e:d3:02:e8: 49:3e:1a:77:47:6b:d4:36:b1:18:f3:d0:fc:6d:b6:79:40:19: e6:15:bf:5e:70:36:45:dc:51:88:5d:69:39:86:b5:94:88:e1: 66:1e:75:7a:c5:ef:9c:5b:65:df:3e:cc:8f:c8:01:2f:f5:cd: 4e:32:51:48:44:90:61:b5:5d:c2:db:34:97:01:ca:75:98:5d: ff:b3:bb:1f:38:cd:c1:a1:96:0d:d8:bb:2d:c1:97:16:61:00: c2:12:00:b8:47:a5:43:48:d2:f7:e3:f1:0e:d6:ef:f5:63:b6: d9:2c:87:98:f3:93:13:f1:1e:f6:f7:64:06:39:05:9a:d5:43: cd:51:2d:6d:de:4d:c6:2e:85:96:91:5d:7e:5c:79:65:c7:f4: 0b:2f:b0:fc:25:dd:b1:02:d9:a6:0b:eb:69:37:95:f2:50:b1: 92:78:85:b3:ad:0c:09:a5:02:58:f4:c0:5b:55:2e:d8:70:0c: 18:9b:8b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhR9vlqj3mfr/hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmOTFjZmItOGMwNS00ZWU4LTkwMDYtZjdhMWUxNjJm OTJjMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk ZTM4MWU5ODgtYmUwOS00NzcwLWJiOWItNWVhOGJlNWIyMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmmMq9MmOnOLg92D0Uyb2sfR7vYjKa9srJot asx4iJIH91RlbFS2CCd7zLi+a+uefHV3rI7kFCmPXITT1qHEn9Vxkw+NM6JxuRpm IlRz50WLS5zpH4XOyem08mFT2QNyWUAfKmpSxhbZWI4vGuK7L8HWjPMQatpzSdfF jWxAGN9PIA2PSL7/K+CSjz3CLFby1dRfPzcSf9vdbPm9jvl8cElcVgIldX3W22ah u0R8F/sxTcKrGLnB2bP3MkLrP2u1/BuPXggVwXmzN+oVDL6x/5aUQs4bg+I5F97y JnDghFeFXFkeBFzFPwndr37wCyXvr/Yht0aMLwtHGEFmMUXwtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJ9GD4os5Id+pEtv0fG5Y409chVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5 MWNmYi04YzA1LTRlZTgtOTAwNi1mN2ExZTE2MmY5MmMvYzRjZjI1OWUtZTcwMC0z MjE3LWI5ZjItOGM4MzNjODZjOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWZmOTFjZmItOGMwNS00ZWU4LTkw MDYtZjdhMWUxNjJmOTJjLzlmZjkxY2ZiLThjMDUtNGVlOC05MDA2LWY3YTFlMTYy ZjkyYy5jcmwwHwYDVR0jBBgwFoAUCfQRN6x0frJZJbxGFJ75bsm3ikUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZmY5MWNmYi04YzA1LTRlZTgtOTAwNi1mN2Ex ZTE2MmY5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyavMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzcJrgtBiMy41rtkeP2fSSy2M5ODajI0mKw41g24SqtJjfr+eMjszPy bt3mhe/wnlLLusnbrIXYHseyeIuVo/sAyxPfPtMC6Ek+GndHa9Q2sRjz0PxttnlA GeYVv15wNkXcUYhdaTmGtZSI4WYedXrF75xbZd8+zI/IAS/1zU4yUUhEkGG1XcLb NJcBynWYXf+zux84zcGhlg3Yuy3BlxZhAMISALhHpUNI0vfj8Q7W7/Vjttksh5jz kxPxHvb3ZAY5BZrVQ81RLW3eTcYuhZaRXX5ceWXH9AsvsPwl3bEC2aYL62k3lfJQ sZJ4hbOtDAmlAlj0wFtVLthwDBibi/g= -----END CERTIFICATE-----Generated at Sun Jun 15 12:25:47 2025 by rpki-client