$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa File: a531be19-5d60-38e3-b64b-c39e645315b7.roa (raw, json) Hash identifier: mCnBbXrFgQ+rPK+z+kQrTMFlPhZFh4+WJW95OzTPZw4= Subject key identifier: D9:02:68:DC:87:6B:12:78:71:A3:BB:DD:9C:22:8E:CA:52:6A:CC:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD024CD4ABCC6247CD080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 396547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:24:cd:4a:bc:c6:24:7c:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=e5565dc1-632d-41e4-b529-254127e887cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5a:6d:09:63:56:78:15:1f:bc:58:a3:ad:5e: 5c:21:7d:a0:a7:37:ed:d5:30:7b:b4:4d:25:1d:f2: 2f:8d:e3:13:c3:08:2a:20:df:b1:1b:0f:a7:68:d7: a4:25:3b:35:45:08:2b:03:a2:81:97:97:c7:70:11: 38:23:c9:5b:c5:2a:78:ba:60:d2:3d:68:57:2f:f4: ac:27:68:92:54:c1:64:f9:d9:f2:b9:96:19:eb:c3: c5:0a:48:20:44:63:5e:09:d8:6f:2a:b8:98:46:fe: 59:d9:cd:e1:57:8b:34:71:ce:73:b6:e5:74:18:29: 9d:a7:cc:de:a2:4f:06:2a:33:97:d9:ec:81:3b:c3: 5a:71:77:c9:d5:20:3c:0c:08:98:e8:6b:4b:25:94: 55:58:91:d2:11:82:ae:23:fb:6e:1a:b4:04:04:24: 48:a9:cf:2f:43:b3:76:55:2f:50:29:89:cb:58:4c: 98:5c:7b:1b:c7:2d:c3:a7:df:b0:2c:17:c3:b1:76: bb:75:8a:9f:01:49:6d:1a:22:9f:c6:cc:72:83:35: cf:e8:0c:ef:e3:8c:10:84:e3:fd:b2:aa:05:da:18: 31:3e:0b:26:90:3c:9b:b0:b2:f7:a3:bc:af:01:a3: 9c:88:8e:5c:94:4f:a0:1a:b0:fd:f8:34:1b:5c:19: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:68:DC:87:6B:12:78:71:A3:BB:DD:9C:22:8E:CA:52:6A:CC:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c7:ce:e3:cd:2c:79:e9:ab:73:f8:c6:f1:61:5d:31:8e:e8: 30:d8:e2:cc:da:4b:ce:d8:85:eb:a0:e7:51:f1:04:0e:92:78: 73:e9:ce:7b:f5:35:df:5d:ce:60:d5:e1:1e:f3:ea:33:56:b1: 6a:a6:46:9f:96:7f:f4:42:07:0c:98:0a:8e:a2:f2:91:36:00: 6b:32:3b:7a:0b:1d:6e:26:2a:b6:91:7f:b9:d1:2d:d0:71:fc: a0:47:e6:4c:ce:77:7c:e2:32:88:56:50:f0:b9:f4:91:4e:46: d0:7a:c0:11:cf:d4:0a:69:8e:0b:94:cd:59:92:d8:0f:55:d4: 7b:ad:3a:8e:f7:5b:49:44:e3:fc:0e:68:ac:bc:dd:55:52:e6: 74:f7:27:f8:dd:3c:2f:a1:e8:90:b3:ce:46:85:21:94:bf:c3: 3a:ac:e4:1e:25:28:50:b5:f7:fc:48:b3:de:61:d0:75:09:c8: 56:b3:69:71:25:4e:07:fb:f8:d4:f5:fe:cf:0a:92:e3:ab:1b: c3:0e:91:fa:f1:8e:ad:da:9e:b9:99:cf:8f:03:f3:b2:a3:98: 49:59:63:ec:96:23:3e:0c:15:d8:3d:2f:90:6d:94:5d:f0:ff: e1:a8:f0:77:34:23:23:12:e6:88:9f:21:de:cb:9b:0e:4a:4c: f8:d2:92:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NAkzUq8xiR80IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk ZTU1NjVkYzEtNjMyZC00MWU0LWI1MjktMjU0MTI3ZTg4N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VptCWNWeBUfvFijrV5cIX2gpzft1TB7tE0l HfIvjeMTwwgqIN+xGw+naNekJTs1RQgrA6KBl5fHcBE4I8lbxSp4umDSPWhXL/Ss J2iSVMFk+dnyuZYZ68PFCkggRGNeCdhvKriYRv5Z2c3hV4s0cc5ztuV0GCmdp8ze ok8GKjOX2eyBO8NacXfJ1SA8DAiY6GtLJZRVWJHSEYKuI/tuGrQEBCRIqc8vQ7N2 VS9QKYnLWEyYXHsbxy3Dp9+wLBfDsXa7dYqfAUltGiKfxsxygzXP6Azv44wQhOP9 sqoF2hgxPgsmkDybsLL3o7yvAaOciI5clE+gGrD9+DQbXBnDeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkCaNyHaxJ4caO73ZwijspSasx+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWJlMTktNWQ2MC0z OGUzLWI2NGItYzM5ZTY0NTMxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXHzuPNLHnpq3P4xvFhXTGO6DDY4szaS87Yheug51HxBA6SeHPpznv1 Nd9dzmDV4R7z6jNWsWqmRp+Wf/RCBwyYCo6i8pE2AGsyO3oLHW4mKraRf7nRLdBx /KBH5kzOd3ziMohWUPC59JFORtB6wBHP1AppjguUzVmS2A9V1HutOo73W0lE4/wO aKy83VVS5nT3J/jdPC+h6JCzzkaFIZS/wzqs5B4lKFC19/xIs95h0HUJyFazaXEl Tgf7+NT1/s8KkuOrG8MOkfrxjq3anrmZz48D87KjmElZY+yWIz4MFdg9L5BtlF3w /+Go8Hc0IyMS5oifId7Lmw5KTPjSkhQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:12 2025 by rpki-client