$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180353cd-d412-3e6b-bd7e-825a7425dcdf.roa File: 180353cd-d412-3e6b-bd7e-825a7425dcdf.roa (raw, json) Hash identifier: OJe9UudUaO7w4BUWeFRnb+y9r2BKCOLvOXDeUeP89fA= Subject key identifier: B0:9C:D1:C2:B1:F7:0D:BD:6F:78:4D:3D:5A:FA:9A:27:10:E0:62:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0FD99783B79C6C3C910 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180353cd-d412-3e6b-bd7e-825a7425dcdf.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 396554 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:fd:99:78:3b:79:c6:c3:c9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=50447afd-7040-4928-8a89-45d4d4d4bfa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:26:9e:0e:bc:8e:c4:89:68:36:73:ec:0b:d5: 84:0d:6b:9e:8d:58:ae:36:0b:c9:13:29:05:57:e5: f5:65:90:fe:97:fc:c9:9c:45:4f:61:76:9c:03:0b: 05:f6:58:5a:50:e4:45:c9:ec:bf:e6:c8:07:ca:e4: af:6f:92:e2:48:c0:d2:17:fb:6d:62:62:3a:8a:4b: bf:08:b3:cc:96:15:9a:a9:30:f4:90:e9:33:a1:96: ec:c2:fd:fb:fc:41:42:55:dd:db:10:4e:8b:de:23: d8:eb:d4:da:a3:55:4b:c9:03:18:58:8e:53:07:b6: 8d:c3:59:ff:6c:f9:63:7c:34:b9:0b:63:48:56:dc: 51:a7:b8:11:4d:a7:af:f1:aa:48:cf:fe:26:c2:5e: 7d:82:c8:84:89:57:07:09:9e:68:ac:3c:53:1e:45: 13:3c:01:88:15:e0:f9:79:6c:79:26:0e:db:3a:2d: b0:a1:b9:41:ce:13:53:19:81:0a:27:14:5b:08:65: a0:dd:20:b1:72:1d:9a:84:b7:a1:0d:3e:60:51:2d: 77:60:6c:82:04:9a:3b:04:c8:fb:e8:d4:d6:07:c3: fb:1b:f0:75:df:81:07:89:02:d6:c9:96:76:c1:7a: 99:8b:2e:22:cc:81:cb:06:5f:f9:3a:38:8e:32:51: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:D1:C2:B1:F7:0D:BD:6F:78:4D:3D:5A:FA:9A:27:10:E0:62:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/180353cd-d412-3e6b-bd7e-825a7425dcdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:49:f0:5f:13:bf:8a:d0:1c:da:60:51:39:27:4d:ab:7a: d8:ab:34:f2:30:9b:d6:92:45:93:91:a3:c7:19:d5:6d:03:92: 8d:80:7d:a2:4c:83:2f:35:77:06:63:a5:80:61:d7:d4:59:12: 74:7d:c2:45:6f:49:23:ac:47:79:cd:c9:69:72:6b:1c:bb:5c: 56:3e:02:dd:11:47:e7:74:14:73:46:a4:40:30:04:2b:0c:3c: ce:f7:78:44:87:6b:24:30:4b:81:e4:dd:61:7b:d3:2f:1a:50: 95:8a:74:2e:14:55:0f:83:a8:38:1e:08:f6:8d:b2:6b:a9:fc: ef:20:f2:2f:a6:0d:77:83:5c:c7:89:89:86:2f:89:82:e9:18: 6a:3d:6f:26:50:10:84:84:e9:18:64:77:ce:cc:70:8e:36:bf: d8:3d:d9:5b:8a:18:3f:1d:53:dc:05:69:88:9e:27:f0:67:09: a0:1f:ce:6b:cf:48:b4:66:70:3d:69:3b:0d:5b:54:7e:57:e6: 6e:0d:91:b8:00:eb:9b:8a:04:4b:d0:8c:3c:83:61:99:e2:2f: b9:52:ca:49:45:23:bf:ab:08:ee:d2:c0:6c:a3:aa:53:16:f3: da:3c:b8:76:8b:cf:d1:14:d3:37:93:44:22:0c:c0:4c:1a:d7: ef:21:fe:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43ND9mXg7ecbDyRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk NTA0NDdhZmQtNzA0MC00OTI4LThhODktNDVkNGQ0ZDRiZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSaeDryOxIloNnPsC9WEDWuejViuNgvJEykF V+X1ZZD+l/zJnEVPYXacAwsF9lhaUORFyey/5sgHyuSvb5LiSMDSF/ttYmI6iku/ CLPMlhWaqTD0kOkzoZbswv37/EFCVd3bEE6L3iPY69Tao1VLyQMYWI5TB7aNw1n/ bPljfDS5C2NIVtxRp7gRTaev8apIz/4mwl59gsiEiVcHCZ5orDxTHkUTPAGIFeD5 eWx5Jg7bOi2woblBzhNTGYEKJxRbCGWg3SCxch2ahLehDT5gUS13YGyCBJo7BMj7 6NTWB8P7G/B134EHiQLWyZZ2wXqZiy4izIHLBl/5OjiOMlEfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCc0cKx9w29b3hNPVr6micQ4GKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgwMzUzY2QtZDQxMi0z ZTZiLWJkN2UtODI1YTc0MjVkY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR6SfBfE7+K0BzaYFE5J02retirNPIwm9aSRZORo8cZ1W0Dko2AfaJM gy81dwZjpYBh19RZEnR9wkVvSSOsR3nNyWlyaxy7XFY+At0RR+d0FHNGpEAwBCsM PM73eESHayQwS4Hk3WF70y8aUJWKdC4UVQ+DqDgeCPaNsmup/O8g8i+mDXeDXMeJ iYYviYLpGGo9byZQEISE6Rhkd87McI42v9g92VuKGD8dU9wFaYieJ/BnCaAfzmvP SLRmcD1pOw1bVH5X5m4NkbgA65uKBEvQjDyDYZniL7lSyklFI7+rCO7SwGyjqlMW 89o8uHaLz9EU0zeTRCIMwEwa1+8h/ok= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:40 2025 by rpki-client