$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa File: 31448255-a906-338e-b992-b054a6d0f6c2.roa (raw, json) Hash identifier: 2DUYfYZhQL4UX/7GLuf2oCmV7RU9GXCcor42xQOO5rc= Subject key identifier: B3:A6:61:21:F1:24:5D:49:C9:27:2D:85:9F:44:B1:40:7C:F4:8C:09 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285848E9CBE18DC942659FDE54D490 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 62548 IP address blocks: 199.241.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:e1:8d:c9:42:65:9f:de:54:d4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=75ac8ff1-05f8-4a47-adc2-2b9661c9ab75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:9c:82:89:ef:6e:5e:92:8b:f1:52:df:d9: 96:d9:f4:6a:70:d8:53:34:ba:5d:2b:e9:05:62:1c: 6f:8e:59:4b:95:34:75:61:bb:d7:ed:42:cd:7e:bb: 92:42:d0:eb:fb:7d:4c:1b:46:34:43:cd:bc:fa:b6: 3f:81:49:f1:25:34:f9:f3:0d:b7:ce:f5:ba:81:a8: 7f:5e:7a:a6:12:29:be:8e:1c:9e:02:30:8e:cd:7f: 06:eb:cf:6c:91:21:c4:7e:7a:4d:c5:a7:d6:d3:a9: 3b:29:09:d5:bd:fa:95:cd:37:f9:de:e7:60:21:80: a3:2c:25:6c:f7:30:6b:b0:17:3b:6e:0c:b0:86:5f: fe:f9:a4:2b:61:60:e8:91:44:34:d2:10:c4:3d:18: a5:35:cf:8e:d8:a4:50:19:06:39:67:f9:a7:5c:e1: 40:da:96:7a:b8:20:ef:7f:4e:6d:0b:5e:9f:a0:06: 91:c4:9c:20:10:97:2d:bc:d9:12:49:fa:07:8b:fb: 4f:e8:bf:6e:b4:fc:b6:d7:38:96:4a:8a:b5:46:8b: b0:fd:90:07:2f:59:ea:b7:25:06:4a:64:fb:c4:66: ce:d2:0e:47:00:82:77:a8:ce:59:9d:86:2f:c9:fa: ba:c6:74:0e:ba:3d:3c:cb:c8:e0:44:26:68:3e:90: e4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:61:21:F1:24:5D:49:C9:27:2D:85:9F:44:B1:40:7C:F4:8C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/31448255-a906-338e-b992-b054a6d0f6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 199.241.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:ea:26:0b:d6:2a:be:0c:4f:ca:d9:49:7b:78:e1:48:49: cf:0b:ea:6d:e9:a2:20:a7:9b:ee:28:05:86:01:9a:8a:4b:9c: 61:3c:04:5e:cd:e6:1b:a2:90:32:b2:b3:6e:d4:e0:07:a7:05: 75:4d:09:24:a1:e4:51:ed:db:34:ee:a7:0c:4c:5d:ab:50:77: b6:43:4a:94:f9:6a:57:d9:a2:91:6b:e3:34:65:41:51:2d:22: 25:b3:33:bf:25:e4:2d:a6:36:68:d4:ea:f4:77:36:26:7d:56: 69:db:da:a9:6c:89:23:56:4f:f9:97:82:e0:ad:81:fd:af:5d: 73:ef:72:bb:c7:07:e2:1d:d9:51:c4:6a:07:32:4a:e3:27:83: 88:48:fb:fd:c4:3f:cc:25:5a:2d:39:62:92:75:87:79:26:75: 48:38:6b:c2:c7:06:3c:53:09:1e:9a:14:96:b6:f0:98:e2:59: 77:38:da:d8:b0:8c:4b:98:d4:bf:38:dc:3e:98:cf:47:67:75: f2:62:d6:c5:54:20:51:52:e3:1b:46:62:c8:6b:88:04:9f:21: b4:81:67:9f:48:b3:3f:03:43:82:41:aa:b6:77:d7:2c:ab:27: 31:6e:80:2a:ab:65:0a:13:7b:22:1b:f7:df:10:b2:65:f8:6f: 4f:ce:ff:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+GNyUJln95U1JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NzVhYzhmZjEtMDVmOC00YTQ3LWFkYzItMmI5NjYxYzlhYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv32cgonvbl6Si/FS39mW2fRqcNhTNLpdK+kF YhxvjllLlTR1YbvX7ULNfruSQtDr+31MG0Y0Q828+rY/gUnxJTT58w23zvW6gah/ XnqmEim+jhyeAjCOzX8G689skSHEfnpNxafW06k7KQnVvfqVzTf53udgIYCjLCVs 9zBrsBc7bgywhl/++aQrYWDokUQ00hDEPRilNc+O2KRQGQY5Z/mnXOFA2pZ6uCDv f05tC16foAaRxJwgEJctvNkSSfoHi/tP6L9utPy21ziWSoq1Rouw/ZAHL1nqtyUG SmT7xGbO0g5HAIJ3qM5ZnYYvyfq6xnQOuj08y8jgRCZoPpDkQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOmYSHxJF1JyScthZ9EsUB89IwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvMzE0NDgyNTUtYTkwNi0z MzhlLWI5OTItYjA1NGE2ZDBmNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB26iYL1iq+DE/K2Ul7eOFISc8L6m3poiCnm+4oBYYBmopLnGE8BF7N 5huikDKys27U4AenBXVNCSSh5FHt2zTupwxMXatQd7ZDSpT5alfZopFr4zRlQVEt IiWzM78l5C2mNmjU6vR3NiZ9Vmnb2qlsiSNWT/mXguCtgf2vXXPvcrvHB+Id2VHE agcySuMng4hI+/3EP8wlWi05YpJ1h3kmdUg4a8LHBjxTCR6aFJa28JjiWXc42tiw jEuY1L843D6Yz0dndfJi1sVUIFFS4xtGYshriASfIbSBZ59Isz8DQ4JBqrZ31yyr JzFugCqrZQoTeyIb998QsmX4b0/O/7w= -----END CERTIFICATE-----Generated at Sun Apr 27 23:09:40 2025 by rpki-client