$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa File: b942e58f-d211-36ad-886c-6c16451f8f09.roa (raw, json) Hash identifier: Eyo9cwSZXs4mMGBEhnE+jWrY7yZduTkmPQtBZqTBUqQ= Subject key identifier: 78:DA:CC:11:DE:B3:A2:F5:2B:AF:A8:C2:9F:BE:C8:85:64:0C:AB:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCCCEFAE3B440AE7B4980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 397210 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:ce:fa:e3:b4:40:ae:7b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=3031d43c-8bd9-4cbb-b1c5-51153bd7081d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:a4:af:f4:0e:cb:f4:6b:64:9c:5c:bf:1a: 8f:f0:fb:1b:48:a4:f9:2d:8a:f7:cb:c8:c0:35:b1: bc:9a:0e:ff:5d:da:b0:f6:50:e7:2f:f9:c6:60:84: 89:e9:4c:f8:cb:46:f2:4c:48:62:5f:5e:e7:4c:93: d9:b5:ea:94:55:6a:37:08:fd:fe:a7:4f:00:a9:fb: 18:6a:c2:24:e6:a7:e4:27:1f:e5:af:b9:18:2c:f1: 32:f0:21:93:d7:4b:1b:7f:85:4f:57:9c:bf:72:00: 68:71:ea:8d:3a:a2:be:4a:7e:fb:d1:0d:3d:e2:91: bf:1b:85:8d:50:b1:f6:8a:30:cc:16:6f:bb:eb:09: bd:b1:91:ca:30:81:cf:87:5d:27:18:f6:af:cf:1a: 56:75:75:53:b1:47:d8:16:78:51:2c:fc:a4:41:12: 62:7b:93:f8:2f:f3:06:b8:21:df:a9:6a:c2:6e:08: 4c:a4:ea:28:1c:b9:68:de:a0:2b:7c:79:48:b1:2e: 82:0c:25:9f:22:93:89:52:1a:18:fb:95:b1:03:a5: 42:ff:22:52:e4:93:07:7f:59:15:ad:86:2b:70:4a: f2:9a:11:57:43:07:c3:02:9c:ec:f9:0c:74:7f:27: 6d:65:94:3a:40:e9:15:3a:81:98:33:62:cb:bf:85: df:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DA:CC:11:DE:B3:A2:F5:2B:AF:A8:C2:9F:BE:C8:85:64:0C:AB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:37:d8:bc:e4:4c:de:35:ea:7f:dd:f1:b7:3f:3b:18:6e:b3: 67:d3:94:0e:df:b8:93:2e:cd:62:e0:3f:80:d5:9d:12:18:76: 3d:83:bd:b1:00:4e:d8:9b:bb:14:bb:c2:3f:cb:c0:eb:1f:49: 1a:94:25:83:12:74:a5:b0:e8:57:4c:f5:74:be:0f:6e:ba:f5: b6:25:00:94:c0:a4:23:8e:c1:1e:5c:9d:b1:07:0b:d4:4f:53: 45:3f:07:71:82:59:d6:6d:f6:eb:11:b0:3d:49:96:94:04:0a: 3e:6a:2f:3f:39:35:26:6e:d4:d2:a0:3f:68:32:3f:70:77:56: f0:c9:07:94:5b:17:45:00:48:08:ca:7c:0d:aa:4a:b5:10:60: 7b:5f:76:0e:af:a3:00:ca:ef:ec:e8:38:7c:4b:d4:ef:6a:c4: 52:c6:21:c9:ec:d1:6b:9f:05:66:e9:a7:69:4c:60:c0:b5:d2: 1f:7e:fa:90:00:9a:6c:f6:a0:3f:8b:3f:28:60:15:63:f2:2c: fa:ca:fa:f6:52:b9:f8:bc:bb:45:7c:ec:07:6b:9a:9a:13:b9: c8:33:d7:6d:f4:15:21:c3:d0:cd:e9:20:cb:d8:94:7a:20:6e: 3a:9f:d5:a9:7b:04:b0:56:a8:85:07:ec:8c:65:25:fb:99:c8: 90:2b:f7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MzO+uO0QK57SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk MzAzMWQ0M2MtOGJkOS00Y2JiLWIxYzUtNTExNTNiZDcwODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDekr/QOy/RrZJxcvxqP8PsbSKT5LYr3y8jA NbG8mg7/Xdqw9lDnL/nGYISJ6Uz4y0byTEhiX17nTJPZteqUVWo3CP3+p08AqfsY asIk5qfkJx/lr7kYLPEy8CGT10sbf4VPV5y/cgBoceqNOqK+Sn770Q094pG/G4WN ULH2ijDMFm+76wm9sZHKMIHPh10nGPavzxpWdXVTsUfYFnhRLPykQRJie5P4L/MG uCHfqWrCbghMpOooHLlo3qArfHlIsS6CDCWfIpOJUhoY+5WxA6VC/yJS5JMHf1kV rYYrcErymhFXQwfDApzs+Qx0fydtZZQ6QOkVOoGYM2LLv4XfNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjazBHes6L1K6+owp++yIVkDKv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk0MmU1OGYtZDIxMS0z NmFkLTg4NmMtNmMxNjQ1MWY4ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc32LzkTN416n/d8bc/Oxhus2fTlA7fuJMuzWLgP4DVnRIYdj2DvbEA TtibuxS7wj/LwOsfSRqUJYMSdKWw6FdM9XS+D2669bYlAJTApCOOwR5cnbEHC9RP U0U/B3GCWdZt9usRsD1JlpQECj5qLz85NSZu1NKgP2gyP3B3VvDJB5RbF0UASAjK fA2qSrUQYHtfdg6vowDK7+zoOHxL1O9qxFLGIcns0WufBWbpp2lMYMC10h9++pAA mmz2oD+LPyhgFWPyLPrK+vZSufi8u0V87AdrmpoTucgz1230FSHD0M3pIMvYlHog bjqf1al7BLBWqIUH7IxlJfuZyJAr9w8= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:48 2025 by rpki-client