$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa File: 9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa (raw, json) Hash identifier: 0VZP8nKDbNBmFXPLe8juGcID1vHADGgy0rhcx+fiX6c= Subject key identifier: 7F:50:2C:D2:54:62:ED:1B:44:99:51:46:81:01:10:AA:95:CB:25:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCDC0363ACE2518AB1E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 36622 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:c0:36:3a:ce:25:18:ab:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=23ff812a-bfc7-47d9-9ec7-29c170470454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:55:6d:37:31:06:73:0c:a4:63:df:ec:7a: b6:fc:c3:9d:d3:ca:10:94:69:dd:2d:71:0a:6b:3e: b0:c2:62:83:f4:5a:a8:a0:53:6f:a4:09:b9:8f:71: 68:85:61:56:a9:cf:40:b3:ee:ee:27:81:b0:3a:f2: 78:9f:80:06:a6:d4:b8:b8:6c:46:14:e4:fb:2e:11: ed:2e:b1:1d:13:9b:fb:ae:8f:6b:29:03:03:93:4d: 6d:34:9e:35:2c:b1:78:3d:ef:aa:58:97:c6:be:04: df:b7:5e:89:0f:eb:92:88:c9:ef:86:a4:d6:9b:ea: d9:7d:f1:c6:24:ca:08:7c:06:ab:57:8c:a7:d5:1b: 7c:ee:6c:a3:69:18:62:cf:44:2e:26:32:4e:c9:ce: 22:60:95:91:c9:ae:44:af:68:c1:e5:f5:52:c9:d6: aa:64:a9:5b:82:12:2d:c1:b7:8a:61:e6:eb:20:63: ff:dc:56:29:2f:66:cb:ab:4f:3d:3e:3e:bd:c4:69: 79:6d:c0:59:1c:eb:10:53:9b:79:83:5d:2d:be:6d: 62:6e:de:83:4a:4a:4f:a3:da:72:2c:b3:42:31:38: 9e:78:7a:56:83:88:e2:6a:fc:bb:6a:2d:aa:40:ed: 1f:14:12:1f:83:bc:76:7d:b3:e1:87:1b:46:81:18: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:2C:D2:54:62:ED:1B:44:99:51:46:81:01:10:AA:95:CB:25:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d4a8c4b-a05d-332c-a66a-b08bf799e456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1c:f1:0e:84:71:b0:6a:0d:89:d7:2b:48:e8:da:df:44:3f: 6c:f8:33:bb:98:f4:4f:ec:f1:97:b5:f6:eb:10:b5:5b:a1:1d: a0:ca:fb:9e:6c:80:39:b0:7b:22:ef:49:b7:66:6c:5e:64:77: d9:f5:29:81:17:11:28:ba:76:f8:c0:7f:7e:35:20:ee:a8:cd: 2f:e6:9d:c5:14:25:ac:63:18:e8:b3:55:84:60:e6:de:d3:09: f7:07:51:af:73:02:c0:e1:33:3f:28:60:6c:84:02:48:e2:70: 17:c3:a4:f0:5c:11:e1:52:83:58:5d:15:b1:d3:c3:6e:8c:24: 8c:a4:fe:09:6e:5d:96:c9:34:f7:bf:0e:38:2b:6d:1f:a8:f0: 7c:54:79:05:4e:d5:ad:ab:6f:d2:ff:9c:d0:5c:a2:0b:08:fd: b4:f8:1d:f3:95:5f:18:9a:a6:b3:4c:ff:c5:65:86:bb:7e:b8: 2b:1a:a7:27:f7:e6:fc:73:77:f7:75:39:e4:d9:d0:cd:e4:ab: 00:89:41:39:27:55:72:36:8b:fc:ec:8e:5b:79:c3:59:0a:09: 1b:46:bd:e0:79:dd:74:ba:23:2b:49:e7:be:d1:c7:5f:9e:bd: a8:1c:db:99:ea:fe:ff:4c:80:37:5c:5a:e3:09:e8:cd:75:c9: fc:57:4b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M3ANjrOJRirHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk MjNmZjgxMmEtYmZjNy00N2Q5LTllYzctMjljMTcwNDcwNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FtVbTcxBnMMpGPf7Hq2/MOd08oQlGndLXEK az6wwmKD9FqooFNvpAm5j3FohWFWqc9As+7uJ4GwOvJ4n4AGptS4uGxGFOT7LhHt LrEdE5v7ro9rKQMDk01tNJ41LLF4Pe+qWJfGvgTft16JD+uSiMnvhqTWm+rZffHG JMoIfAarV4yn1Rt87myjaRhiz0QuJjJOyc4iYJWRya5Er2jB5fVSydaqZKlbghIt wbeKYebrIGP/3FYpL2bLq089Pj69xGl5bcBZHOsQU5t5g10tvm1ibt6DSkpPo9py LLNCMTieeHpWg4jiavy7ai2qQO0fFBIfg7x2fbPhhxtGgRiwBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9QLNJUYu0bRJlRRoEBEKqVyyVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ0YThjNGItYTA1ZC0z MzJjLWE2NmEtYjA4YmY3OTllNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4c8Q6EcbBqDYnXK0jo2t9EP2z4M7uY9E/s8Ze19usQtVuhHaDK+55s gDmweyLvSbdmbF5kd9n1KYEXESi6dvjAf341IO6ozS/mncUUJaxjGOizVYRg5t7T CfcHUa9zAsDhMz8oYGyEAkjicBfDpPBcEeFSg1hdFbHTw26MJIyk/gluXZbJNPe/ DjgrbR+o8HxUeQVO1a2rb9L/nNBcogsI/bT4HfOVXxiaprNM/8Vlhrt+uCsapyf3 5vxzd/d1OeTZ0M3kqwCJQTknVXI2i/zsjlt5w1kKCRtGveB53XS6IytJ577Rx1+e vagc25nq/v9MgDdcWuMJ6M11yfxXS1k= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:19 2025 by rpki-client