$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa File: dee7e624-d51f-3ae3-a3f9-2a8354988969.roa (raw, json) Hash identifier: DmILyhyGEHN6p7zTyd2GDvFd9g1IDR4/fgFmJbhyZgc= Subject key identifier: 22:E2:D4:94:EF:68:B7:69:FA:96:78:CF:EF:F3:FC:3C:7B:D3:23:B2 Certificate issuer: /CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Certificate serial: 010D0C9F4328584A0D6A85DB95BC9CC52213EC80 Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 3549 IP address blocks: 75.78.212.0/22 maxlen: 24 75.78.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:85:db:95:bc:9c:c5:22:13:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=a57d111b-6d48-439a-9d74-d30950744d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:61:e6:7f:79:9a:6e:4c:37:5a:f7:b5:47: fd:7a:71:32:ac:a7:ad:81:b1:22:b0:5d:3a:f2:3e: 1e:88:af:80:46:05:15:02:0f:d3:54:60:60:a8:ea: 96:e0:af:fe:b4:5f:4a:0b:0a:a4:49:a9:74:a5:7c: 28:60:80:fa:20:c0:2a:95:0d:c8:0a:e2:38:55:76: 85:4a:5a:7e:5d:b4:e2:82:11:db:cf:2c:00:74:4e: e9:49:22:7a:24:60:91:b6:3d:fe:fc:52:f1:d9:23: 20:f4:a4:2f:fb:96:01:83:3b:9f:8e:0c:2d:bb:9b: 0c:e0:58:ce:42:f2:e9:e0:fa:81:ac:81:b8:35:ca: c4:dd:9d:cd:24:83:2d:49:43:f9:e6:f6:1b:87:fe: 1d:9f:e9:b0:9d:52:74:0b:77:1c:4e:74:5e:79:bb: cb:84:a4:90:7e:f9:4d:68:3c:dd:cf:60:e9:b1:72: 05:1f:f2:8a:43:37:37:27:bc:e4:85:31:0d:0c:f3: da:32:1c:11:99:93:b3:15:21:2a:18:4d:e2:95:05: 81:07:13:28:6a:c5:f1:cb:7f:80:13:46:a8:07:62: 3e:0c:1d:8b:91:14:4a:24:7f:65:2b:f0:fc:2d:5a: 19:8f:da:7f:d0:7b:68:5a:93:74:97:bd:79:cd:64: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:D4:94:EF:68:B7:69:FA:96:78:CF:EF:F3:FC:3C:7B:D3:23:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/dee7e624-d51f-3ae3-a3f9-2a8354988969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl X509v3 Authority Key Identifier: keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer sbgp-ipAddrBlock: critical IPv4: 75.78.212.0-75.78.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:cc:a9:af:cd:69:f1:d5:26:f1:95:ae:fb:c8:5e:b2:3d:b4: 94:ff:2f:a6:f4:77:77:86:59:13:a4:9c:b7:a3:02:aa:51:a5: c9:c6:ea:99:e8:44:34:84:7f:9b:8a:3a:ed:ee:32:2a:fb:ac: 36:36:6c:91:34:39:ec:8f:e4:2f:58:df:7a:20:44:1a:92:39: 06:17:98:5b:43:9b:f9:44:42:9d:26:5f:97:06:15:0f:3a:55: 55:c3:86:62:f9:b8:a5:cc:4e:e5:38:5c:12:49:f5:1b:60:08: ca:22:aa:ce:96:3f:5e:0b:d5:4d:e6:41:3b:cc:76:9b:97:a7: c3:cf:19:91:a1:f0:f4:2e:24:a7:0e:cd:b3:a4:a7:f1:b1:18: 2e:50:b9:82:0d:2f:d0:07:80:e3:d4:d9:6e:77:84:78:78:fb: cc:17:f8:03:f0:e2:6b:0d:85:be:c3:d8:ff:2d:1b:97:7c:f3: 6f:ca:85:cc:73:38:0e:97:b7:ae:f7:f4:be:b2:ed:dd:2c:9c: c1:cc:f2:d7:e3:3e:2b:ad:1c:20:fc:67:ff:dc:dd:aa:13:e0: 5f:e0:a5:81:c5:16:df:a3:84:e2:8f:9d:36:32:5d:50:3c:bf: d6:48:eb:17:fd:8f:2a:28:02:24:12:80:a1:3c:3d:ba:7e:c4: 75:3f:15:d7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoNaoXblbycxSIT7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk NjkwMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk YTU3ZDExMWItNmQ0OC00MzlhLTlkNzQtZDMwOTUwNzQ0ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d9h5n95mm5MN1r3tUf9enEyrKetgbEisF06 8j4eiK+ARgUVAg/TVGBgqOqW4K/+tF9KCwqkSal0pXwoYID6IMAqlQ3ICuI4VXaF Slp+XbTighHbzywAdE7pSSJ6JGCRtj3+/FLx2SMg9KQv+5YBgzufjgwtu5sM4FjO QvLp4PqBrIG4NcrE3Z3NJIMtSUP55vYbh/4dn+mwnVJ0C3ccTnReebvLhKSQfvlN aDzdz2DpsXIFH/KKQzc3J7zkhTENDPPaMhwRmZOzFSEqGE3ilQWBBxMoasXxy3+A E0aoB2I+DB2LkRRKJH9lK/D8LVoZj9p/0HtoWpN0l715zWSJrwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCLi1JTvaLdp+pZ4z+/z/Dx70yOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1 MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvZGVlN2U2MjQtZDUxZi0z YWUzLWEzZjktMmE4MzU0OTg4OTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy NmVlMWQ2OTAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJLTtQD BAVLTsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAtcypr81p8dUm8ZWu+8hesj20lP8vpvR3d4ZZE6Sct6MC qlGlycbqmehENIR/m4o67e4yKvusNjZskTQ57I/kL1jfeiBEGpI5BheYW0Ob+URC nSZflwYVDzpVVcOGYvm4pcxO5ThcEkn1G2AIyiKqzpY/XgvVTeZBO8x2m5enw88Z kaHw9C4kpw7Ns6Sn8bEYLlC5gg0v0AeA49TZbneEeHj7zBf4A/Diaw2FvsPY/y0b l3zzb8qFzHM4Dpe3rvf0vrLt3Sycwczy1+M+K60cIPxn/9zdqhPgX+ClgcUW36OE 4o+dNjJdUDy/1kjrF/2PKigCJBKAoTw9un7EdT8V1w== -----END CERTIFICATE-----Generated at Sun Jun 15 11:55:58 2025 by rpki-client