$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa File: 32c53d16-72c4-33dc-9880-0c5e25f17660.roa (raw, json) Hash identifier: 5GJ7HRTvaags6OZNCwEEFJ07eQxQD20Blj04ZH2q47A= Subject key identifier: C4:91:03:80:51:A0:27:FF:F9:AA:D8:EE:F2:D1:CD:F7:C3:24:21:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCDD0767242DA5460ACC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 397212 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:d0:76:72:42:da:54:60:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=672f1f36-de24-40d7-8478-e984052cf09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:c8:ef:f0:c2:64:e0:16:21:0b:e4:6c:eb: c5:b6:49:c0:1b:8a:de:13:df:f4:f6:62:7c:be:39: 78:37:d5:e4:12:69:8b:ed:1c:9f:60:32:7b:c2:5e: 30:46:39:f1:09:35:ab:41:6a:81:8b:51:91:8b:b4: 4e:6c:a2:c0:ca:2d:96:16:85:28:9e:77:80:44:49: 40:c6:71:5e:c9:75:40:12:cd:22:8f:1e:aa:bf:66: 0d:c9:c0:7e:fd:8d:5e:38:4a:d1:25:26:9b:65:42: e3:ef:20:7c:71:c6:5f:ec:b0:98:51:9c:61:a9:f1: ce:65:1d:6a:0b:65:1d:5d:32:54:af:7f:f6:71:23: a5:c7:66:e6:5d:6e:19:83:1d:6a:a6:1f:37:49:12: 4d:f1:c5:76:0b:27:14:9a:8e:4c:51:3a:a2:07:7b: 65:b5:ea:c8:32:98:4e:23:4e:ab:31:ee:05:0b:40: 98:57:c7:35:e1:96:f2:db:19:76:e5:ab:3e:55:7d: 1c:1b:88:35:2d:28:42:ab:82:c0:1d:25:bb:11:d0: 23:e4:54:29:ff:81:00:fb:3b:12:a6:2d:ac:a3:35: d7:fc:96:37:b7:ab:40:2a:eb:f1:e1:c2:0a:e1:06: df:89:ff:bb:15:5f:6d:6c:13:03:58:08:f6:e9:ab: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:03:80:51:A0:27:FF:F9:AA:D8:EE:F2:D1:CD:F7:C3:24:21:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:91:9b:83:1a:95:67:96:73:49:55:d8:b2:1c:fd:75:b8:4d: cf:52:a9:78:77:38:53:46:e2:00:dc:8e:6f:2d:f5:4f:32:29: 33:9d:b1:06:96:ad:95:e1:05:66:57:17:f4:45:95:af:9a:83: 6d:5f:f4:c5:22:56:72:51:1d:12:77:b8:e6:a9:e9:df:b2:73: 20:d0:80:a0:1c:13:71:28:04:02:85:af:f2:f8:f8:0b:2c:e9: 93:4f:82:38:b2:98:ed:0d:61:68:5f:f6:d3:eb:1c:d5:4e:40: 4b:02:b2:a7:66:c8:cf:70:bf:11:23:39:40:cf:57:fd:40:44: 13:fb:41:21:7d:88:93:c6:e0:50:c5:76:27:9d:b1:b8:3a:8c: 26:e8:ad:e0:10:11:2e:6f:dc:06:49:a7:57:bd:f4:7a:12:22: c3:23:6d:26:53:0d:19:13:d0:4a:1a:d7:10:8c:47:1d:5a:ce: 5b:22:50:09:59:34:6f:98:4c:88:cf:81:3b:8d:ca:05:2e:4d: 2a:41:81:1c:11:e7:dd:8d:f3:24:8a:f4:30:a5:c3:f0:72:69: 7a:14:b5:0c:e8:64:6b:74:63:f4:d6:56:55:35:06:a8:db:78: 9d:9a:9e:06:4e:81:dc:b4:dc:84:8b:9d:f8:77:37:f0:ab:84: 75:be:64:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M3QdnJC2lRgrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NjcyZjFmMzYtZGUyNC00MGQ3LTg0NzgtZTk4NDA1MmNmMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb7I7/DCZOAWIQvkbOvFtknAG4reE9/09mJ8 vjl4N9XkEmmL7RyfYDJ7wl4wRjnxCTWrQWqBi1GRi7RObKLAyi2WFoUonneARElA xnFeyXVAEs0ijx6qv2YNycB+/Y1eOErRJSabZULj7yB8ccZf7LCYUZxhqfHOZR1q C2UdXTJUr3/2cSOlx2bmXW4Zgx1qph83SRJN8cV2CycUmo5MUTqiB3tlterIMphO I06rMe4FC0CYV8c14Zby2xl25as+VX0cG4g1LShCq4LAHSW7EdAj5FQp/4EA+zsS pi2sozXX/JY3t6tAKuvx4cIK4Qbfif+7FV9tbBMDWAj26atgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSRA4BRoCf/+arY7vLRzffDJCFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJjNTNkMTYtNzJjNC0z M2RjLTk4ODAtMGM1ZTI1ZjE3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiRm4MalWeWc0lV2LIc/XW4Tc9SqXh3OFNG4gDcjm8t9U8yKTOdsQaW rZXhBWZXF/RFla+ag21f9MUiVnJRHRJ3uOap6d+ycyDQgKAcE3EoBAKFr/L4+Ass 6ZNPgjiymO0NYWhf9tPrHNVOQEsCsqdmyM9wvxEjOUDPV/1ARBP7QSF9iJPG4FDF diedsbg6jCboreAQES5v3AZJp1e99HoSIsMjbSZTDRkT0Eoa1xCMRx1azlsiUAlZ NG+YTIjPgTuNygUuTSpBgRwR592N8ySK9DClw/ByaXoUtQzoZGt0Y/TWVlU1Bqjb eJ2angZOgdy03ISLnfh3N/CrhHW+ZO0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:43 2025 by rpki-client