$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa File: 4a010b08-bb23-3e72-9dae-7202b24c1df9.roa (raw, json) Hash identifier: p29mW8LtEixXQCOeK5UYaGMwq0P6LgOreGzvUqhgKbE= Subject key identifier: 33:35:E8:26:35:98:EC:CD:E6:8C:79:A2:DA:1F:26:A0:B9:64:45:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCFD14E426C4427AAF700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396613 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:d1:4e:42:6c:44:27:aa:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=23ba2cf6-bdb5-4bc0-a922-a28b5c4ba316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:aa:59:19:f8:64:e4:08:25:c5:85:eb:b2: 52:0e:f1:06:6f:dd:b8:5f:11:a9:87:00:4a:90:01: 80:23:bd:c4:f5:b1:f9:e5:99:20:9d:57:f7:df:c1: b3:19:c0:d1:fe:1b:b8:8b:c8:72:c0:5b:89:82:11: 51:2d:70:bd:85:b1:65:a9:62:ac:39:96:8b:d2:7f: f6:d8:40:4d:13:30:4c:4d:7b:46:05:e4:4e:75:9c: 41:c1:02:ae:20:99:a1:e1:9c:8c:86:74:91:82:b5: 03:cc:9d:f2:13:6b:6c:4e:e2:73:16:b3:22:6b:21: 0f:9c:6b:0e:47:a3:e7:4e:f1:56:88:a7:97:3b:b3: 30:7f:f3:18:43:7e:9f:cf:95:0d:8f:2d:62:84:b7: 09:bf:62:c7:39:e5:99:9b:60:4c:56:a5:e1:e0:06: f1:7d:13:a3:ab:29:8e:f0:d2:9b:3a:1d:de:68:a3: ee:bc:a6:c6:58:fc:a7:58:87:0a:46:23:2b:a7:cc: b2:63:96:5c:79:80:f8:5e:db:c1:45:81:6d:e3:cf: 98:0b:10:dc:6f:8a:64:39:ac:78:18:e7:49:0c:70: 3c:39:ad:b8:e1:8c:e1:42:c4:36:ef:1e:4d:85:91: 8e:77:d3:b3:49:7a:16:30:dc:56:d3:69:de:79:fe: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:E8:26:35:98:EC:CD:E6:8C:79:A2:DA:1F:26:A0:B9:64:45:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a7:e0:17:c4:4d:89:dd:19:2f:57:eb:8f:23:5d:8b:4c:fa: 03:fd:bf:df:76:ed:1c:77:ca:df:72:9e:e1:d6:ee:74:d6:cb: 14:ab:e6:f6:61:98:64:ff:e9:f9:9f:ae:a9:ea:a3:2c:72:95: be:f0:20:ea:c6:5c:49:02:1f:fa:4a:c1:59:2c:e0:06:19:bb: b3:38:f5:c8:12:38:ce:b0:75:d8:5f:f1:76:75:9f:7b:43:7e: 90:a7:f8:aa:b3:b0:b0:f4:85:f5:8e:d3:1f:4e:3c:e5:db:ee: 7b:6d:6b:37:f3:97:c2:d2:02:ec:02:ed:01:6f:fc:8e:e8:c2: 36:bc:ef:ea:8a:cc:2d:93:c0:7c:25:08:90:fc:b7:d7:21:6c: d6:5b:ff:4c:97:7b:08:56:33:53:1e:e4:54:5d:3d:78:6e:79: ad:f9:f6:30:ea:dc:5c:82:ed:7f:4d:b2:b4:2b:a5:22:b9:08: 7b:4f:e5:ad:bf:55:22:2c:bc:a5:b9:73:31:2b:de:00:e5:e3: a2:1a:cb:ef:ec:7e:27:69:06:53:26:c0:57:5b:95:ec:85:b1: c6:f6:65:c9:2a:ab:f4:d0:34:64:65:cd:db:0e:36:e6:73:5d: 74:b2:af:b7:d7:da:16:16:09:58:1c:55:77:37:56:ff:a3:b3: 3f:0f:29:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M/RTkJsRCeq9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk MjNiYTJjZjYtYmRiNS00YmMwLWE5MjItYTI4YjVjNGJhMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyyqWRn4ZOQIJcWF67JSDvEGb924XxGphwBK kAGAI73E9bH55ZkgnVf338GzGcDR/hu4i8hywFuJghFRLXC9hbFlqWKsOZaL0n/2 2EBNEzBMTXtGBeROdZxBwQKuIJmh4ZyMhnSRgrUDzJ3yE2tsTuJzFrMiayEPnGsO R6PnTvFWiKeXO7Mwf/MYQ36fz5UNjy1ihLcJv2LHOeWZm2BMVqXh4AbxfROjqymO 8NKbOh3eaKPuvKbGWPynWIcKRiMrp8yyY5ZceYD4XtvBRYFt48+YCxDcb4pkOax4 GOdJDHA8Oa244YzhQsQ27x5NhZGOd9OzSXoWMNxW02neef7NuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM16CY1mOzN5ox5otofJqC5ZEXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGEwMTBiMDgtYmIyMy0z ZTcyLTlkYWUtNzIwMmIyNGMxZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6n4BfETYndGS9X648jXYtM+gP9v9927Rx3yt9ynuHW7nTWyxSr5vZh mGT/6fmfrqnqoyxylb7wIOrGXEkCH/pKwVks4AYZu7M49cgSOM6wddhf8XZ1n3tD fpCn+KqzsLD0hfWO0x9OPOXb7nttazfzl8LSAuwC7QFv/I7owja87+qKzC2TwHwl CJD8t9chbNZb/0yXewhWM1Me5FRdPXhuea359jDq3FyC7X9NsrQrpSK5CHtP5a2/ VSIsvKW5czEr3gDl46Iay+/sfidpBlMmwFdbleyFscb2Zckqq/TQNGRlzdsONuZz XXSyr7fX2hYWCVgcVXc3Vv+jsz8PKaM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:53 2025 by rpki-client