$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa File: d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa (raw, json) Hash identifier: DXHNLJrGwyopvO2rPzGTquU0XF3FULmlc72fW6qLX+Y= Subject key identifier: 8E:AC:76:25:31:17:32:C7:78:C9:C4:CD:69:C1:14:32:D0:62:91:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB4D02A081C886ED0680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396575 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:4d:02:a0:81:c8:86:ed:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=c3b8a18d-61e6-490e-a2e2-f9fcc6023895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:b0:5e:d9:fe:81:06:b3:7e:53:93:87:3d: da:c6:fd:78:3b:b3:7e:7f:b7:1b:69:d1:c1:f8:82: d8:27:1f:fa:77:69:9e:f4:0c:af:5e:9e:87:24:f1: 38:af:45:63:fa:47:b7:f4:d5:ee:ea:23:2d:79:ba: 97:8e:66:58:be:cb:d4:5d:d9:b6:e6:50:fd:18:b6: 79:55:70:15:2e:6c:85:7f:7b:2c:bf:0c:0d:8c:49: 30:7a:d4:f1:e6:f9:1c:e0:3c:a0:df:c4:4c:0e:e0: e5:64:b1:c8:16:8d:08:17:11:6a:82:97:db:4d:d4: bc:60:f0:82:e8:f8:3b:60:a8:4c:86:e3:3e:54:58: 29:64:ac:97:2d:c6:57:d2:0a:1f:32:b7:c2:69:c5: d4:37:c4:ac:78:2e:ef:ee:f2:15:87:48:30:6d:17: 88:e9:89:b3:5f:9b:b1:ad:64:57:9c:de:92:d7:55: ef:65:40:1c:85:58:36:e6:3a:15:87:2e:52:f7:31: c2:81:34:f2:02:2e:64:66:dc:85:4a:77:be:db:5b: e2:26:ea:d4:71:f0:ad:72:71:78:e4:f9:4c:87:c4: 0c:d0:ac:76:81:ed:a0:c0:97:b8:b4:bf:09:4e:45: f6:b7:10:b0:7d:d7:6e:9a:65:ac:6b:75:9f:67:99: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:76:25:31:17:32:C7:78:C9:C4:CD:69:C1:14:32:D0:62:91:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8791ba6-a4aa-3c99-946f-e5bfe2ae836a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:99:4f:f7:a5:45:f7:a9:e7:1f:d8:b0:cc:11:42:3e:11:b9: f3:ea:d8:e4:d9:df:82:9e:b1:eb:a4:b8:e1:3e:69:99:39:e0: c6:0d:5f:cf:3a:69:a1:da:f7:e3:87:01:82:1e:8e:90:d5:eb: 82:d3:34:87:81:89:58:07:1b:cb:71:65:72:cf:7a:ac:71:7d: fc:5d:7d:9c:b1:c4:83:8c:fb:dc:1e:2f:7c:d9:a3:7b:d2:f5: d4:11:04:73:62:28:d2:0e:c2:70:a9:15:59:11:bb:15:11:43: 5f:d7:42:77:f3:ae:ce:43:96:59:7b:d1:29:7d:7b:af:a1:fe: 09:e1:3f:d1:d0:04:52:61:03:71:0a:8e:a2:6b:19:c2:6c:2e: 33:b5:a3:e2:1e:cd:63:44:05:32:63:a7:4f:c6:96:8c:29:b7: 29:0c:4d:22:ef:b0:3c:c1:18:de:45:cf:7e:1d:73:c5:5a:b5: 19:94:c5:81:bf:8e:b4:a5:f8:27:ed:17:8f:8c:a4:a0:52:18: 4e:97:c0:da:2b:72:3f:e4:85:1d:e0:fc:04:22:81:9c:e9:75: 79:b0:0f:a8:71:c0:4c:5f:2b:8a:1f:22:4f:a9:15:27:26:af: fa:42:d1:78:41:4c:27:13:04:28:6a:9e:98:2c:44:da:22:9e: 9e:a9:d4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MtNAqCByIbtBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk YzNiOGExOGQtNjFlNi00OTBlLWEyZTItZjlmY2M2MDIzODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ2wXtn+gQazflOThz3axv14O7N+f7cbadHB +ILYJx/6d2me9AyvXp6HJPE4r0Vj+ke39NXu6iMtebqXjmZYvsvUXdm25lD9GLZ5 VXAVLmyFf3ssvwwNjEkwetTx5vkc4Dyg38RMDuDlZLHIFo0IFxFqgpfbTdS8YPCC 6Pg7YKhMhuM+VFgpZKyXLcZX0gofMrfCacXUN8SseC7v7vIVh0gwbReI6YmzX5ux rWRXnN6S11XvZUAchVg25joVhy5S9zHCgTTyAi5kZtyFSne+21viJurUcfCtcnF4 5PlMh8QM0Kx2ge2gwJe4tL8JTkX2txCwfddummWsa3WfZ5luZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6sdiUxFzLHeMnEzWnBFDLQYpFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDg3OTFiYTYtYTRhYS0z Yzk5LTk0NmYtZTViZmUyYWU4MzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyZT/elRfep5x/YsMwRQj4RufPq2OTZ34KeseukuOE+aZk54MYNX886 aaHa9+OHAYIejpDV64LTNIeBiVgHG8txZXLPeqxxffxdfZyxxIOM+9weL3zZo3vS 9dQRBHNiKNIOwnCpFVkRuxURQ1/XQnfzrs5Dlll70Sl9e6+h/gnhP9HQBFJhA3EK jqJrGcJsLjO1o+IezWNEBTJjp0/GlowptykMTSLvsDzBGN5Fz34dc8VatRmUxYG/ jrSl+CftF4+MpKBSGE6XwNorcj/khR3g/AQigZzpdXmwD6hxwExfK4ofIk+pFScm r/pC0XhBTCcTBChqnpgsRNoinp6p1J4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:14 2025 by rpki-client