$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: UgGOTRK1cdwz+dgKg3pe0ucPE+20DBzf6tzq2Pjk8L8= Subject key identifier: 77:63:27:B8:31:8F:02:A5:D1:CB:19:27:5F:02:72:EC:A8:90:C4:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD006708CC790E01AAD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:06:70:8c:c7:90:e0:1a:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=8939079d-6307-42e7-ba2f-ddccdd9773c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:3b:f1:42:c3:11:87:75:b8:0c:94:f5:9a: d1:16:5e:3e:2d:b1:68:af:ee:14:55:ad:61:02:ee: a7:f5:19:fb:45:32:9c:32:85:4a:3b:ff:17:86:67: c5:77:a0:1a:5b:75:55:22:f1:2e:bf:39:03:21:cb: 71:e0:f9:0e:ad:68:54:ac:46:46:58:b5:78:87:a3: 50:f3:c7:9b:1b:46:07:54:eb:d6:7b:40:be:f7:0a: 38:4f:d1:11:b5:08:69:1a:ee:ed:dd:1e:98:5d:c2: d4:c1:8e:cf:90:3a:fe:6b:9d:38:f2:20:85:ef:2f: 0b:91:e3:26:4c:18:fc:4a:23:4c:e8:8a:41:c7:da: 36:ce:db:42:bd:be:cc:36:c3:86:dc:01:2a:2e:d2: 26:0d:6c:64:a5:6f:29:8b:31:a7:23:c3:9d:f4:9b: e3:e1:74:75:e8:8f:48:21:38:f4:07:82:19:a1:24: 5d:1d:f2:83:0d:f9:b6:5b:04:1a:f5:1a:db:0d:a8: 10:fa:ba:cb:63:b7:98:b1:f4:05:0e:ea:2a:da:81: 75:93:84:1a:11:be:a3:67:27:18:69:2c:f1:84:81: f2:a2:08:82:1f:1f:18:0b:f2:1b:b8:f8:09:8d:77: f2:07:5e:28:a1:ac:16:e4:d2:d9:fb:5e:0d:15:da: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:27:B8:31:8F:02:A5:D1:CB:19:27:5F:02:72:EC:A8:90:C4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:85:91:c1:a6:92:44:75:26:44:8c:8e:fb:3b:5d:7c:78:98: 02:42:db:2b:c6:98:73:7c:a3:15:e9:89:53:bf:fb:eb:1b:a7: 55:ed:ce:10:f4:b6:4f:d7:5c:82:c6:c1:1e:e8:e6:71:38:b7: db:c1:72:65:0a:2f:30:10:cf:f9:60:d2:0f:cf:ce:49:23:b4: f4:e5:b2:4c:fe:e2:da:08:b8:18:9c:63:e2:2f:dc:f8:84:7b: ce:ef:7c:dc:32:d4:08:d7:fe:36:a1:73:8b:06:d5:c8:44:79: f4:ff:c1:38:76:1e:c5:29:e7:72:29:9b:79:82:ee:bf:8e:cf: e0:2e:9c:e1:0e:a2:9e:7f:33:e2:61:52:54:06:79:65:4b:17: c3:78:ce:dd:a2:dc:0e:14:90:3d:0c:8c:02:80:38:dd:9d:a2: 73:69:0e:c0:73:af:20:7f:6f:0f:c3:7c:7d:24:c5:41:d0:a1: c5:0d:5a:35:e0:c2:f6:e2:8a:c4:ec:02:60:a5:a9:16:a4:b9: c2:b8:d0:af:27:90:d9:99:64:db:e4:df:84:26:1b:e1:52:61: 4c:2e:9e:80:c3:01:b2:20:1e:9e:5d:28:9d:94:83:41:34:4b: b5:84:05:bb:66:3a:51:a4:8c:9b:cd:8f:c4:24:82:0c:95:73: a4:5c:28:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NAGcIzHkOAarYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk ODkzOTA3OWQtNjMwNy00MmU3LWJhMmYtZGRjY2RkOTc3M2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/M78ULDEYd1uAyU9ZrRFl4+LbFor+4UVa1h Au6n9Rn7RTKcMoVKO/8XhmfFd6AaW3VVIvEuvzkDIctx4PkOrWhUrEZGWLV4h6NQ 88ebG0YHVOvWe0C+9wo4T9ERtQhpGu7t3R6YXcLUwY7PkDr+a5048iCF7y8LkeMm TBj8SiNM6IpBx9o2zttCvb7MNsOG3AEqLtImDWxkpW8pizGnI8Od9Jvj4XR16I9I ITj0B4IZoSRdHfKDDfm2WwQa9RrbDagQ+rrLY7eYsfQFDuoq2oF1k4QaEb6jZycY aSzxhIHyogiCHx8YC/IbuPgJjXfyB14ooawW5NLZ+14NFdroBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdjJ7gxjwKl0csZJ18CcuyokMQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6FkcGmkkR1JkSMjvs7XXx4mAJC2yvGmHN8oxXpiVO/++sbp1XtzhD0 tk/XXILGwR7o5nE4t9vBcmUKLzAQz/lg0g/PzkkjtPTlskz+4toIuBicY+Iv3PiE e87vfNwy1AjX/jahc4sG1chEefT/wTh2HsUp53Ipm3mC7r+Oz+AunOEOop5/M+Jh UlQGeWVLF8N4zt2i3A4UkD0MjAKAON2donNpDsBzryB/bw/DfH0kxUHQocUNWjXg wvbiisTsAmClqRakucK40K8nkNmZZNvk34QmG+FSYUwunoDDAbIgHp5dKJ2Ug0E0 S7WEBbtmOlGkjJvNj8QkggyVc6RcKLw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:35:16 2025 by rpki-client