$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa File: c8b3dff7-8897-3692-893d-51a768f982fa.roa (raw, json) Hash identifier: 4eO5OteJrmkFGnF064sBa0wZ/mDe1TcKO5RnytsUaCk= Subject key identifier: 6A:6E:E3:68:29:4E:72:E2:52:85:3C:5B:FF:E6:B7:3A:42:68:A0:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD061781215533E18D028 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 36620 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:61:78:12:15:53:3e:18:d0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=5592d8bf-6575-41bb-a8aa-5347450947fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:93:22:50:11:c1:df:4b:cb:76:f1:87:8a: 4b:ed:3b:0e:ea:7c:68:7b:49:45:4c:28:65:87:00: e3:c3:7f:48:8d:9f:33:8b:a6:1d:8f:73:1f:2b:75: c5:5c:9b:b3:6b:b6:a3:4f:f9:8a:7c:34:04:2e:76: 45:c8:76:0d:56:ff:2a:2d:39:9e:1c:d1:eb:cc:77: 20:23:22:bb:ce:dc:5f:94:27:ee:ec:79:73:01:78: 8e:7c:17:5f:61:6d:2d:7b:31:a2:60:48:b3:7f:b9: 0b:1c:82:74:78:e4:b0:e5:3a:9e:c9:f7:f2:40:61: 11:83:4f:f3:f2:5f:6f:ce:cb:8f:90:29:7f:98:93: 16:81:56:9a:f1:d6:f6:d5:f5:a4:a5:2d:b1:6d:91: 03:9f:1c:d8:2c:33:e0:6a:2a:fd:1b:04:f1:c3:57: 4d:2d:10:99:7f:a3:bf:ef:19:9a:92:ee:b0:8e:18: bf:08:6c:58:9d:0a:b9:fe:c1:39:97:59:9e:38:52: fa:1b:70:f7:14:e7:a2:49:00:33:fd:a3:0e:88:78: 24:08:00:26:a9:d6:50:36:f3:40:f8:97:9f:9e:4e: b5:ac:cf:31:ad:4a:2e:22:a6:89:44:bf:e5:a7:75: 60:3a:f7:11:d4:0f:15:6a:c0:65:4d:76:ad:0c:d8: c9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6E:E3:68:29:4E:72:E2:52:85:3C:5B:FF:E6:B7:3A:42:68:A0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7b:dc:ac:15:55:c9:0e:eb:32:b6:01:58:e4:d8:24:d5:cf: 82:74:9e:87:41:4f:17:85:aa:27:46:6c:53:4c:d9:39:e5:58: cc:2c:fe:88:48:ad:e1:67:bb:01:79:ee:5b:f4:73:14:7c:53: 6a:36:af:f8:6e:2a:ae:26:8e:27:95:76:16:eb:c4:17:7a:7b: 45:71:20:71:89:11:b7:79:c9:ed:04:d2:de:d6:3d:74:0a:b8: 54:31:e4:d1:92:1a:05:25:44:29:c9:f9:31:45:0b:b3:42:90: fa:eb:af:05:62:d3:7f:f6:fc:37:43:d4:ac:dd:4f:80:03:c4: 34:95:cc:5a:05:a1:e7:cf:c3:f6:92:71:1d:dc:14:93:58:ca: 30:e6:32:17:19:22:a0:df:59:c1:62:19:2d:ff:cd:15:f3:b8: d9:55:f6:56:c3:c2:c8:88:58:2e:cf:23:d3:20:53:8b:e8:31: 64:bc:2d:c8:7c:9b:53:94:a2:f1:c1:70:09:8f:2c:ce:3e:55: 9d:90:42:f9:ea:5e:ad:72:0a:73:be:9d:0e:45:57:e1:fc:f5: e5:ad:bf:d9:a6:d8:57:2d:4c:8f:32:b7:36:87:95:68:05:12: 0f:e2:82:af:a7:95:ee:d4:63:f9:2d:16:12:40:58:5e:ab:dd: 1b:b1:31:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NBheBIVUz4Y0CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk NTU5MmQ4YmYtNjU3NS00MWJiLWE4YWEtNTM0NzQ1MDk0N2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoqTIlARwd9Ly3bxh4pL7TsO6nxoe0lFTChl hwDjw39IjZ8zi6Ydj3MfK3XFXJuza7ajT/mKfDQELnZFyHYNVv8qLTmeHNHrzHcg IyK7ztxflCfu7HlzAXiOfBdfYW0tezGiYEizf7kLHIJ0eOSw5TqeyffyQGERg0/z 8l9vzsuPkCl/mJMWgVaa8db21fWkpS2xbZEDnxzYLDPgair9GwTxw1dNLRCZf6O/ 7xmaku6wjhi/CGxYnQq5/sE5l1meOFL6G3D3FOeiSQAz/aMOiHgkCAAmqdZQNvNA +Jefnk61rM8xrUouIqaJRL/lp3VgOvcR1A8VasBlTXatDNjJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpu42gpTnLiUoU8W//mtzpCaKBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhiM2RmZjctODg5Ny0z NjkyLTg5M2QtNTFhNzY4Zjk4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB973KwVVckO6zK2AVjk2CTVz4J0nodBTxeFqidGbFNM2TnlWMws/ohI reFnuwF57lv0cxR8U2o2r/huKq4mjieVdhbrxBd6e0VxIHGJEbd5ye0E0t7WPXQK uFQx5NGSGgUlRCnJ+TFFC7NCkPrrrwVi03/2/DdD1KzdT4ADxDSVzFoFoefPw/aS cR3cFJNYyjDmMhcZIqDfWcFiGS3/zRXzuNlV9lbDwsiIWC7PI9MgU4voMWS8Lch8 m1OUovHBcAmPLM4+VZ2QQvnqXq1yCnO+nQ5FV+H89eWtv9mm2FctTI8ytzaHlWgF Eg/igq+nle7UY/ktFhJAWF6r3RuxMcM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:41 2025 by rpki-client