$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa File: 3096e349-4454-38f3-b7ed-c55015678503.roa (raw, json) Hash identifier: XxoKVPlmb/xhTrTbrAyraXROCY7pYgetKHqCcYNApxM= Subject key identifier: 6A:A1:8C:D6:16:E9:96:BF:FA:F7:4D:E6:2A:F7:DA:60:C2:B1:78:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD73334884C95EC27E5C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 36616 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:73:33:48:84:c9:5e:c2:7e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=66f9a6dc-f5ac-4f08-8179-8b6dde7c3c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:92:b4:85:9c:65:11:0e:67:b2:93:58:99: 2d:69:29:a3:a2:75:a3:3d:94:f7:1d:bf:bc:d9:64: 17:a2:e2:2a:e8:7d:86:7c:a8:e4:27:60:b0:6e:26: e9:2c:6b:7a:4b:18:f1:3f:52:7d:48:2a:1e:4d:85: b7:7d:30:97:3d:a7:68:53:fb:2b:76:05:88:1a:73: 68:83:d8:59:56:93:15:80:c4:9a:eb:83:69:f0:cb: 83:86:44:43:5c:7b:2d:64:1b:12:e6:52:ab:d4:8c: cc:8a:9d:1c:22:4d:28:42:e9:08:81:9b:07:8f:8c: c3:7e:f1:2f:4d:77:5b:c4:d5:ca:d9:8f:99:ec:72: 4b:22:a4:68:f4:c8:98:0e:1a:6c:c9:b9:48:bc:ab: d8:f2:a1:19:59:a9:99:07:97:c5:96:b4:fb:a2:11: f5:d4:57:90:15:c6:25:9b:fe:47:00:fb:ab:9d:18: 17:2e:76:f3:54:1e:f4:16:5d:29:47:ca:c3:5b:dc: ce:8e:38:b7:6b:cf:d3:83:d7:0b:19:23:0e:01:43: 87:df:39:8a:db:a2:dc:b7:c0:a2:6b:85:b6:7a:e3: b5:a0:86:d1:72:94:6c:af:69:34:e2:7b:41:fd:71: 82:91:5f:36:58:41:23:63:29:de:3c:68:34:d4:12: a9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A1:8C:D6:16:E9:96:BF:FA:F7:4D:E6:2A:F7:DA:60:C2:B1:78:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e6:99:3a:4a:d1:eb:bb:56:d7:16:0a:cb:9d:82:bd:d0:a5: 72:0e:19:eb:8e:38:5c:49:33:b7:1f:88:fb:8a:c3:18:f2:78: 74:de:33:4d:cc:b6:dc:79:cb:b1:c1:fd:98:bf:0c:9f:81:4d: b4:cc:0a:d8:74:4c:d8:05:9c:8e:9d:47:85:9f:ac:3e:7c:d8: 16:78:bf:cc:2f:f1:d8:93:6d:96:eb:67:f0:64:16:88:69:ab: 71:20:88:d8:3b:a8:d5:86:6a:73:95:83:59:26:83:82:d5:1c: c5:73:0d:b7:d5:f2:4e:93:b2:dd:48:12:2c:5f:e8:f6:4e:cb: 2d:12:d1:d0:d2:ef:e6:cf:19:37:65:b6:d5:cc:eb:6c:4d:03: 37:88:3b:c1:b2:a6:b4:d1:23:35:05:64:14:ba:16:48:a6:48: d7:40:64:26:ed:fc:3b:cc:ae:5e:b7:60:ee:c8:e2:7a:2b:c3: bc:db:20:e4:fb:0f:a8:81:77:b3:ea:0c:37:3f:25:b0:34:be: 97:20:7e:ab:51:17:2e:b4:7d:81:95:9e:2f:09:68:6f:9a:50: 70:e2:0a:87:52:67:85:3f:0a:4a:f5:aa:27:86:77:12:53:21: c7:1c:17:08:0a:5a:87:6d:15:67:1a:5a:ac:57:73:59:dc:83: 6e:5f:0b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M1zM0iEyV7CflwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NjZmOWE2ZGMtZjVhYy00ZjA4LTgxNzktOGI2ZGRlN2MzYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWStIWcZREOZ7KTWJktaSmjonWjPZT3Hb+8 2WQXouIq6H2GfKjkJ2CwbibpLGt6SxjxP1J9SCoeTYW3fTCXPadoU/srdgWIGnNo g9hZVpMVgMSa64Np8MuDhkRDXHstZBsS5lKr1IzMip0cIk0oQukIgZsHj4zDfvEv TXdbxNXK2Y+Z7HJLIqRo9MiYDhpsyblIvKvY8qEZWamZB5fFlrT7ohH11FeQFcYl m/5HAPurnRgXLnbzVB70Fl0pR8rDW9zOjji3a8/Tg9cLGSMOAUOH3zmK26Lct8Ci a4W2euO1oIbRcpRsr2k04ntB/XGCkV82WEEjYynePGg01BKpsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqhjNYW6Za/+vdN5ir32mDCsXhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA5NmUzNDktNDQ1NC0z OGYzLWI3ZWQtYzU1MDE1Njc4NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXmmTpK0eu7VtcWCsudgr3QpXIOGeuOOFxJM7cfiPuKwxjyeHTeM03M ttx5y7HB/Zi/DJ+BTbTMCth0TNgFnI6dR4WfrD582BZ4v8wv8diTbZbrZ/BkFohp q3EgiNg7qNWGanOVg1kmg4LVHMVzDbfV8k6Tst1IEixf6PZOyy0S0dDS7+bPGTdl ttXM62xNAzeIO8GyprTRIzUFZBS6FkimSNdAZCbt/DvMrl63YO7I4norw7zbIOT7 D6iBd7PqDDc/JbA0vpcgfqtRFy60fYGVni8JaG+aUHDiCodSZ4U/Ckr1qieGdxJT IcccFwgKWodtFWcaWqxXc1ncg25fC1Y= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:11 2025 by rpki-client