$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa File: 9af53576-fb1d-3bd4-a681-12fe3df74d39.roa (raw, json) Hash identifier: rN/4vuoaA+44Yhiw/VNaXYEZu6Zuh1JwBH3GD8Ez7A4= Subject key identifier: 57:2B:BF:61:CF:75:B4:D2:E3:E5:B6:46:B6:4A:44:D8:C5:21:13:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCCFA5886105FD25E2E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396544 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:fa:58:86:10:5f:d2:5e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=9f5297c0-b5fc-4259-b7cd-ab4a7d2be22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:16:f4:13:68:4a:ad:73:46:d9:45:fd:4b: 48:a7:31:62:c5:5d:6f:8e:cb:e9:8d:f0:30:95:12: 65:8f:c6:d1:8a:83:17:03:51:ac:99:38:48:08:87: cf:8d:ac:d5:4b:1b:0a:52:cc:bd:9e:94:fb:23:8f: 48:67:95:69:eb:10:de:2d:03:8c:fb:56:d3:1e:7c: 56:37:b7:9e:64:75:12:8e:8c:5e:27:3c:fd:60:f1: 88:d4:56:7c:85:df:dc:a4:89:2d:e4:55:4e:a0:16: a0:38:6f:47:3b:6c:b5:37:34:b3:ca:77:40:3f:41: 16:57:65:1a:c9:22:ea:ce:fc:3e:eb:8f:b8:50:97: ae:cf:34:6a:0f:02:92:21:8a:8d:6b:e9:f6:81:24: 90:2e:25:40:95:f6:0d:61:b4:5e:c4:5f:bb:5c:2f: ef:b6:24:40:16:9e:6a:40:0d:0a:cf:59:0b:a2:8f: 05:b9:e3:a2:30:1e:bc:1e:91:32:c5:a0:f6:a6:1a: 20:52:2c:30:fc:33:a3:cc:35:94:2c:b4:de:64:e3: 41:f3:8d:04:d5:99:81:49:1f:93:05:f4:41:ea:fa: 86:5d:e7:70:1d:ed:b7:a3:50:82:99:56:84:0e:52: 33:0c:81:2b:8e:9b:cd:56:7e:8a:35:67:3d:bd:d4: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:BF:61:CF:75:B4:D2:E3:E5:B6:46:B6:4A:44:D8:C5:21:13:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:08:2f:1a:6c:3b:72:e9:0f:0f:16:a8:eb:15:5c:03:d1:a1: 6d:90:b8:2a:1d:ab:38:05:a7:3b:0e:0a:aa:9a:1d:d2:68:ec: cf:01:f8:ba:0f:05:21:74:51:e0:9c:47:64:74:a8:8d:b5:68: 94:2d:c8:f6:25:e6:d1:62:62:85:6c:38:69:90:92:cc:c4:b9: 12:64:8e:c6:0d:24:95:ab:e0:a0:de:ef:3a:b1:40:11:51:b7: 9a:db:4f:16:60:4d:fa:c8:6d:7d:95:db:ba:9f:e6:22:41:35: 58:4d:af:6f:94:a4:bf:64:fd:e0:18:8c:50:c7:9a:7c:11:f4: ac:c6:cf:44:74:1c:df:33:2d:d8:33:ca:3c:87:61:26:0f:fd: 33:a8:1d:ad:88:fa:d8:03:41:dd:34:a7:e8:b5:61:16:98:53: 68:64:6e:c1:39:a8:ce:89:e3:88:3a:97:93:99:34:d1:f8:2d: ca:d6:07:74:29:6f:b0:fd:60:0e:d9:be:80:5f:a3:f1:11:9a: 32:c7:e9:6f:3b:f0:87:6c:4e:00:ae:20:44:1d:6a:fc:41:1d: 3c:33:e1:bc:ac:98:06:08:42:75:f3:fb:06:82:48:de:d8:8c: b8:a7:b8:25:05:ef:d4:81:ee:15:45:5d:4e:af:2d:7a:c7:f5: 77:16:7a:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mz6WIYQX9JeLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk OWY1Mjk3YzAtYjVmYy00MjU5LWI3Y2QtYWI0YTdkMmJlMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jsW9BNoSq1zRtlF/UtIpzFixV1vjsvpjfAw lRJlj8bRioMXA1GsmThICIfPjazVSxsKUsy9npT7I49IZ5Vp6xDeLQOM+1bTHnxW N7eeZHUSjoxeJzz9YPGI1FZ8hd/cpIkt5FVOoBagOG9HO2y1NzSzyndAP0EWV2Ua ySLqzvw+64+4UJeuzzRqDwKSIYqNa+n2gSSQLiVAlfYNYbRexF+7XC/vtiRAFp5q QA0Kz1kLoo8FueOiMB68HpEyxaD2phogUiww/DOjzDWULLTeZONB840E1ZmBSR+T BfRB6vqGXedwHe23o1CCmVaEDlIzDIErjpvNVn6KNWc9vdTUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcrv2HPdbTS4+W2RrZKRNjFIRM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFmNTM1NzYtZmIxZC0z YmQ0LWE2ODEtMTJmZTNkZjc0ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEILxpsO3LpDw8WqOsVXAPRoW2QuCodqzgFpzsOCqqaHdJo7M8B+LoP BSF0UeCcR2R0qI21aJQtyPYl5tFiYoVsOGmQkszEuRJkjsYNJJWr4KDe7zqxQBFR t5rbTxZgTfrIbX2V27qf5iJBNVhNr2+UpL9k/eAYjFDHmnwR9KzGz0R0HN8zLdgz yjyHYSYP/TOoHa2I+tgDQd00p+i1YRaYU2hkbsE5qM6J44g6l5OZNNH4LcrWB3Qp b7D9YA7ZvoBfo/ERmjLH6W878IdsTgCuIEQdavxBHTwz4bysmAYIQnXz+waCSN7Y jLinuCUF79SB7hVFXU6vLXrH9XcWelg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:09 2025 by rpki-client