$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa File: 8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa (raw, json) Hash identifier: A409goXZjLKfAN71uv+PyJ3UDq5t7Db7whh1FIzeOLo= Subject key identifier: 17:63:87:21:0A:22:41:10:C2:E5:4D:E4:1B:28:1B:EE:5E:1D:70:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCAB8FF707DE68F1A9380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396603 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ca:b8:ff:70:7d:e6:8f:1a:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=c83138e8-6def-4802-947b-adbd548ecff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fa:5a:57:71:50:0e:e2:06:8f:c2:fe:f9:7b: 31:9f:3e:8f:0d:ad:13:7a:5d:f1:b9:2a:ef:64:af: 00:d0:91:62:eb:1b:27:7d:5d:75:1c:f5:43:29:d6: f9:03:09:63:09:1e:b6:6c:dc:6b:9b:58:f0:b4:ba: 60:10:5a:ad:66:5e:0e:1d:d0:b8:86:fc:54:6c:5a: 10:e0:94:59:2b:7b:0c:41:66:6c:41:b7:18:4a:bf: 7e:5d:a2:2c:ef:72:90:dd:e1:59:87:c9:4d:7b:c0: 3f:ec:07:34:c2:17:73:01:8a:ba:b6:4d:d4:20:7c: 26:2f:3e:08:b2:31:f0:ac:5c:3d:f2:82:b9:be:6a: 67:c0:7d:f2:69:d7:60:6d:b4:6e:ca:80:7c:7f:86: d5:20:a9:f6:9a:d7:8f:47:3f:fb:c2:fd:41:4d:3c: f8:4d:ac:fa:e7:ef:32:8a:d1:2e:35:d4:d3:6d:dd: 83:24:f4:0a:47:b1:c0:02:0d:ae:03:4a:85:ae:4f: 8e:ec:91:25:a9:f6:6a:18:19:fd:6f:83:48:21:61: 76:5b:9c:ed:6f:a4:64:d3:26:64:d0:7f:ee:5a:79: 75:b7:39:be:a3:7c:d3:a5:17:61:dc:90:f7:f3:e0: f1:fe:2f:15:47:19:3e:51:96:75:ee:9b:51:e8:6d: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:63:87:21:0A:22:41:10:C2:E5:4D:E4:1B:28:1B:EE:5E:1D:70:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5d:ba:83:dc:60:f1:b8:09:e1:4f:be:75:be:32:86:91:87: 81:d4:b5:ce:53:96:71:38:6f:04:d3:50:d2:91:81:6b:6b:24: 10:90:f5:89:2e:84:65:eb:29:d7:86:1c:d3:ac:72:f3:12:bf: 88:34:c1:b2:a6:96:39:f2:6c:c3:63:a1:90:6e:9d:9d:a7:bb: 02:63:65:7e:2f:7a:fa:48:1a:3e:1f:b3:be:77:9f:fb:4c:90: 74:b0:5f:56:60:0a:6b:04:57:43:cb:4e:a7:76:93:64:d9:77: 4d:9f:21:71:dd:8c:cf:db:4b:f7:aa:29:b0:ed:d0:b2:c3:04: b6:d2:93:84:37:4b:2d:dd:d7:da:ba:47:e1:2a:2c:d2:60:87: 32:1f:d6:46:b6:e5:a0:3f:e8:fa:38:73:ec:86:1d:fc:66:02: 9a:fe:cb:41:16:75:7d:43:22:b6:8b:fa:bf:5f:43:c0:0a:59: 3a:91:31:a6:a9:29:f5:73:35:6e:f0:35:b5:35:d1:49:8e:a3: 8b:58:ef:7d:48:36:7c:b5:e8:f2:92:56:5a:3c:59:13:28:4f: 96:4c:97:8a:85:01:2b:df:c0:9a:39:ab:48:c5:58:8d:4a:c3: 92:dc:24:c6:b2:73:e6:ec:a6:09:08:5d:61:ce:b2:f8:02:c4: 50:64:23:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mq4/3B95o8ak4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk YzgzMTM4ZTgtNmRlZi00ODAyLTk0N2ItYWRiZDU0OGVjZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vpaV3FQDuIGj8L++Xsxnz6PDa0Tel3xuSrv ZK8A0JFi6xsnfV11HPVDKdb5AwljCR62bNxrm1jwtLpgEFqtZl4OHdC4hvxUbFoQ 4JRZK3sMQWZsQbcYSr9+XaIs73KQ3eFZh8lNe8A/7Ac0whdzAYq6tk3UIHwmLz4I sjHwrFw98oK5vmpnwH3yaddgbbRuyoB8f4bVIKn2mtePRz/7wv1BTTz4Taz65+8y itEuNdTTbd2DJPQKR7HAAg2uA0qFrk+O7JElqfZqGBn9b4NIIWF2W5ztb6Rk0yZk 0H/uWnl1tzm+o3zTpRdh3JD38+Dx/i8VRxk+UZZ17ptR6G1wkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdjhyEKIkEQwuVN5BsoG+5eHXDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUxMTM4YTEtYmQxMC0z MzkzLTg1ZjMtOWZmY2QxYWU1YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVduoPcYPG4CeFPvnW+MoaRh4HUtc5TlnE4bwTTUNKRgWtrJBCQ9Yku hGXrKdeGHNOscvMSv4g0wbKmljnybMNjoZBunZ2nuwJjZX4vevpIGj4fs753n/tM kHSwX1ZgCmsEV0PLTqd2k2TZd02fIXHdjM/bS/eqKbDt0LLDBLbSk4Q3Sy3d19q6 R+EqLNJghzIf1ka25aA/6Po4c+yGHfxmApr+y0EWdX1DIraL+r9fQ8AKWTqRMaap KfVzNW7wNbU10UmOo4tY731INny16PKSVlo8WRMoT5ZMl4qFASvfwJo5q0jFWI1K w5LcJMayc+bspgkIXWHOsvgCxFBkI5o= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:07 2025 by rpki-client