$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa File: 4b0406a0-d232-31f1-bb38-282832e4317a.roa (raw, json) Hash identifier: BgsaO/ZN1zr34WxOl/yc0SAClEe2GXmpr+YiTQd04J8= Subject key identifier: AB:DB:77:B9:7E:42:EA:92:6D:5A:5B:93:EE:47:19:8F:68:9A:7A:94 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A6DBB48610D8FAE3648933A40 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 137443 IP address blocks: 198.44.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:48:61:0d:8f:ae:36:48:93:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=07f9b736-136b-483d-bc96-61d5abfecc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:45:fa:35:15:5b:00:dd:88:3a:24:72:0c: c4:c4:ba:06:d7:cb:51:6e:3e:a5:4b:23:f4:3e:d7: b7:bd:22:88:92:b7:58:b1:cd:ba:1f:7c:52:89:5c: 9d:d3:8d:9b:2f:1e:16:1c:b0:df:c3:35:a4:ac:e6: c1:ef:d0:04:a7:73:6c:06:57:de:aa:11:f1:34:ab: a6:e3:52:da:82:d9:a0:68:40:c1:5b:5f:ec:ea:22: ef:93:b5:7a:5e:bf:60:14:6d:db:f2:f3:c7:bb:f4: e3:bc:68:a6:75:43:1d:8a:7a:ac:47:87:c3:e5:b1: a8:83:bb:24:e4:e3:55:47:4d:19:10:36:f7:f1:0d: 2f:4d:a8:d3:2b:c1:0a:33:32:12:c5:42:3d:eb:34: ae:e6:b4:65:51:75:da:a3:57:2c:c6:91:5c:c8:21: e6:7e:3c:3d:b4:6f:ab:23:d1:72:89:30:c3:cd:52: 22:e5:de:b2:d7:1a:29:6a:19:33:94:02:0c:b4:1c: 13:38:a1:be:c9:7a:e0:7c:3e:a9:00:46:be:b4:a5: 9e:12:41:27:a3:e6:a5:a2:d7:c3:72:c6:d4:9a:47: 48:6e:7f:0f:ef:0a:5f:43:96:88:01:2b:be:7d:44: b5:38:2e:60:73:c8:81:71:cc:f6:57:f5:98:d1:5a: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DB:77:B9:7E:42:EA:92:6D:5A:5B:93:EE:47:19:8F:68:9A:7A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c1:bc:d6:8f:f1:5c:59:61:cc:d2:ed:38:57:0a:34:45:69: 78:83:de:99:45:21:e4:87:17:03:97:04:2c:3e:6d:5f:14:27: 3c:0b:8c:a6:31:ae:ea:d7:39:9b:a0:f1:d0:c1:86:30:f4:7b: 95:ee:6e:63:6b:58:78:2b:5a:a7:b9:63:75:42:1a:d3:1a:1e: ff:96:04:7d:43:a3:ea:8e:29:e5:15:24:6d:8f:13:95:23:14: 63:19:f9:05:3d:3c:3d:f5:bb:40:ed:b3:66:35:e4:4a:bd:8b: 37:7d:1a:90:76:0c:7f:bc:bd:85:4a:d8:1f:70:0d:b4:41:39: 62:85:90:c3:8a:8c:34:0a:ac:09:1a:c1:d8:0f:e8:13:32:ca: 62:ee:aa:85:85:35:ed:5a:1d:81:84:cc:2b:1c:d3:d0:a8:14: 69:d0:d6:29:d1:5e:0f:92:c0:b5:34:fa:41:3f:c3:d4:b1:a2: f6:01:cb:81:29:b8:a9:64:41:52:18:92:79:74:2a:9e:7a:ec: 65:c5:f2:3f:4c:d3:42:98:75:89:a5:66:5b:10:2d:0b:90:eb: 02:e6:02:16:75:73:b5:4f:d3:b0:ac:cb:bc:89:0f:16:82:d6: f5:bb:4d:b1:35:c1:75:8f:b1:6f:b9:73:b5:40:31:33:6a:83: 41:3a:52:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0hhDY+uNkiTOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MDdmOWI3MzYtMTM2Yi00ODNkLWJjOTYtNjFkNWFiZmVjYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmZF+jUVWwDdiDokcgzExLoG18tRbj6lSyP0 Pte3vSKIkrdYsc26H3xSiVyd042bLx4WHLDfwzWkrObB79AEp3NsBlfeqhHxNKum 41LagtmgaEDBW1/s6iLvk7V6Xr9gFG3b8vPHu/TjvGimdUMdinqsR4fD5bGog7sk 5ONVR00ZEDb38Q0vTajTK8EKMzISxUI96zSu5rRlUXXao1csxpFcyCHmfjw9tG+r I9FyiTDDzVIi5d6y1xopahkzlAIMtBwTOKG+yXrgfD6pAEa+tKWeEkEno+alotfD csbUmkdIbn8P7wpfQ5aIASu+fUS1OC5gc8iBccz2V/WY0VqDVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvbd7l+QuqSbVpbk+5HGY9omnqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGIwNDA2YTAtZDIzMi0z MWYxLWJiMzgtMjgyODMyZTQzMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7BvNaP8VxZYczS7ThXCjRFaXiD3plFIeSHFwOXBCw+bV8UJzwLjKYx rurXOZug8dDBhjD0e5XubmNrWHgrWqe5Y3VCGtMaHv+WBH1Do+qOKeUVJG2PE5Uj FGMZ+QU9PD31u0Dts2Y15Eq9izd9GpB2DH+8vYVK2B9wDbRBOWKFkMOKjDQKrAka wdgP6BMyymLuqoWFNe1aHYGEzCsc09CoFGnQ1inRXg+SwLU0+kE/w9SxovYBy4Ep uKlkQVIYknl0Kp567GXF8j9M00KYdYmlZlsQLQuQ6wLmAhZ1c7VP07Csy7yJDxaC 1vW7TbE1wXWPsW+5c7VAMTNqg0E6UtA= -----END CERTIFICATE-----Generated at Sun Jul 20 14:19:25 2025 by rpki-client