$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b96050-9842-3330-b685-edcfa7520a2a.roa File: 63b96050-9842-3330-b685-edcfa7520a2a.roa (raw, json) Hash identifier: Cv0dCLQBryVszW9yJFyfh1IcvjKqCWXkIATYBv4mIE8= Subject key identifier: 89:11:93:34:51:85:51:BD:26:9A:FA:2D:52:2B:19:41:B0:BB:C4:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE189105B01BD0295DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b96050-9842-3330-b685-edcfa7520a2a.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396612 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:18:91:05:b0:1b:d0:29:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=d7e235ff-0506-4c72-9353-25b932dda17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:45:e5:74:e6:84:47:c0:f1:97:18:90:d2: d5:dc:a6:b0:0e:33:aa:cc:0d:ea:98:ec:49:d7:e2: 87:06:2f:c2:0a:61:af:88:76:aa:e7:32:69:18:68: b2:2c:07:33:3d:ab:31:ad:9d:5b:ce:e3:26:22:3d: 36:1c:1b:e9:61:32:4e:39:c1:a8:87:6e:bb:dc:47: 37:a1:9d:89:66:98:93:41:a9:fb:4b:f5:35:1c:b3: c2:19:67:f8:2c:c1:d8:a2:90:3b:d1:95:a5:49:1c: 48:f0:a0:f9:54:d0:11:4a:8f:09:f0:67:aa:a8:90: db:fc:94:72:03:7a:d0:af:e1:32:56:a4:c0:d2:e0: e9:74:9c:42:1b:90:cb:d0:2d:9b:cd:c6:01:08:86: 18:bc:ba:cc:f0:c6:7d:60:db:17:b0:39:27:d4:19: c6:7f:71:a4:48:a4:4c:f8:9f:be:74:1c:9e:cb:d1: f9:1c:95:0d:9d:3c:a7:8c:fb:43:5d:04:32:bd:d1: b5:ea:e0:99:c7:a0:0f:0f:23:3f:ba:0a:c3:0d:e6: 57:6d:c2:be:b3:06:0d:61:f9:3c:d3:b2:34:3b:6f: ec:1d:87:7f:12:0f:f0:fb:fd:0e:ce:0a:f9:22:6d: 10:c9:f3:b3:72:53:21:a1:60:0c:c6:35:8a:5e:c8: 89:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:11:93:34:51:85:51:BD:26:9A:FA:2D:52:2B:19:41:B0:BB:C4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/63b96050-9842-3330-b685-edcfa7520a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fe:3c:2c:e1:9b:41:6e:66:e2:e5:77:dc:f7:7f:f8:75:9a: 9a:83:87:8d:e6:40:c0:25:30:73:da:30:4f:02:3d:b2:8f:be: f7:df:26:47:56:e3:13:53:91:a0:a5:31:58:43:a7:80:87:77: f1:25:8d:3a:54:73:29:00:70:fd:fc:95:97:08:41:29:85:b5: 64:09:05:e2:3a:6f:83:dd:d8:ba:a3:b0:45:09:de:74:6a:73: 8a:a0:3c:ef:9c:0d:90:22:88:c9:db:cc:47:2e:e5:9e:a9:16: 28:fe:44:13:77:6c:72:49:8d:1a:88:2c:1d:cc:7c:88:29:8f: b0:68:b3:ff:9e:a4:6e:b4:74:82:2c:ce:42:cd:76:4b:9f:f2: e2:a9:41:11:3c:ff:5b:45:6b:b7:48:e6:1f:23:59:28:6d:d5: e9:1d:e1:37:9a:23:b0:a1:11:5b:22:d9:4c:6b:80:dc:e0:6e: ed:a4:63:a1:5a:14:42:46:98:a3:1d:8e:8c:a9:93:7d:26:26: dc:e2:9b:11:a7:6c:6f:67:df:d1:57:ff:02:aa:93:69:af:1a: af:f9:2e:15:e4:84:d5:22:55:2d:05:31:4e:ee:cc:a9:21:c8: ce:af:19:13:3a:a0:a2:9e:62:c6:6a:cb:f8:08:d3:30:1f:66: 2f:2e:52:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M4YkQWwG9ApXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk ZDdlMjM1ZmYtMDUwNi00YzcyLTkzNTMtMjViOTMyZGRhMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG1F5XTmhEfA8ZcYkNLV3KawDjOqzA3qmOxJ 1+KHBi/CCmGviHaq5zJpGGiyLAczPasxrZ1bzuMmIj02HBvpYTJOOcGoh2673Ec3 oZ2JZpiTQan7S/U1HLPCGWf4LMHYopA70ZWlSRxI8KD5VNARSo8J8GeqqJDb/JRy A3rQr+EyVqTA0uDpdJxCG5DL0C2bzcYBCIYYvLrM8MZ9YNsXsDkn1BnGf3GkSKRM +J++dByey9H5HJUNnTynjPtDXQQyvdG16uCZx6APDyM/ugrDDeZXbcK+swYNYfk8 07I0O2/sHYd/Eg/w+/0Ozgr5Im0QyfOzclMhoWAMxjWKXsiJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkRkzRRhVG9Jpr6LVIrGUGwu8TUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjNiOTYwNTAtOTg0Mi0z MzMwLWI2ODUtZWRjZmE3NTIwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz+PCzhm0FuZuLld9z3f/h1mpqDh43mQMAlMHPaME8CPbKPvvffJkdW 4xNTkaClMVhDp4CHd/EljTpUcykAcP38lZcIQSmFtWQJBeI6b4Pd2LqjsEUJ3nRq c4qgPO+cDZAiiMnbzEcu5Z6pFij+RBN3bHJJjRqILB3MfIgpj7Bos/+epG60dIIs zkLNdkuf8uKpQRE8/1tFa7dI5h8jWSht1ekd4TeaI7ChEVsi2UxrgNzgbu2kY6Fa FEJGmKMdjoypk30mJtzimxGnbG9n39FX/wKqk2mvGq/5LhXkhNUiVS0FMU7uzKkh yM6vGRM6oKKeYsZqy/gI0zAfZi8uUvg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:34 2025 by rpki-client