$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa File: d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json) Hash identifier: vN+7ZIqeBulK/GT7rwc/I5MmMGZYles11jdHEjUWJIo= Subject key identifier: 02:3F:35:D3:08:68:89:37:0D:44:B8:35:DF:2F:94:22:28:C6:4C:80 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584A7BB0B570B5DA729FC8EB9B00 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 152705 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:b5:70:b5:da:72:9f:c8:eb:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=38426f4a-734e-4007-9201-492c8d223a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:c4:ab:c8:31:7c:c6:f5:63:45:b7:f3:42: 09:78:a0:42:83:0b:bb:9a:a8:b6:5f:b7:04:86:cf: 21:6e:c9:a2:d3:d3:e0:25:07:bb:e5:b9:ff:96:50: 50:93:c3:ed:4a:27:80:b7:11:6a:21:e6:e0:c3:2e: 3b:08:61:2e:4c:62:3f:ff:df:a5:98:7b:c9:22:b0: 46:be:f4:0a:10:64:44:97:d3:96:12:7a:fe:5d:22: 62:0f:3e:97:28:77:0d:83:e8:f0:b8:f1:d7:6f:1f: a0:95:e0:21:13:a3:a3:02:62:a1:2e:28:00:34:52: 88:c5:01:74:fc:01:71:27:0a:17:37:54:73:48:8f: dd:d6:44:f2:86:60:41:c4:3d:aa:cc:a0:34:d5:7b: 6b:f5:a6:5d:b8:60:b8:01:08:f9:fa:bc:52:75:9c: 9b:23:20:57:42:2c:79:ee:76:3f:61:f9:87:ac:ef: f5:e7:e8:dd:cf:14:9a:7f:f3:fc:8c:eb:1e:bc:8d: cd:25:84:46:85:aa:91:bb:e5:d2:04:47:b5:ac:53: 96:e1:9a:dc:60:18:f2:e3:52:36:1f:db:5b:2a:78: ce:db:97:b5:f6:76:3f:6a:a5:d1:ee:ce:55:ef:4a: a4:d5:bb:ef:27:71:9c:d9:d9:17:fc:d8:d8:32:11: 78:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3F:35:D3:08:68:89:37:0D:44:B8:35:DF:2F:94:22:28:C6:4C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:93:0e:2e:a0:2a:69:76:15:e5:75:ff:96:0f:85:f2:16:0c: c7:5d:03:94:a9:62:2d:65:9a:4f:7b:c5:c6:a9:29:68:bd:f7: 9a:72:8c:14:1f:c3:92:b2:cb:2a:4a:bc:59:af:d0:d8:66:f3: 67:6d:d9:36:9b:dd:a5:dc:eb:8b:d5:ed:91:1c:49:21:b3:65: 0f:56:93:26:ef:77:1d:0a:b3:2a:6e:6f:62:25:9c:6c:fe:2d: 3c:53:28:c7:c8:1b:3e:63:69:0f:f0:c7:c4:81:be:46:76:66: a5:e7:8f:0b:71:b3:93:68:e9:52:37:80:33:53:19:26:4a:3d: 62:d8:ce:5e:9b:64:63:a0:0c:d6:60:27:46:d2:46:47:41:2a: 39:24:5f:65:aa:cf:c8:02:5a:7e:1d:a4:f6:c1:f8:4f:c1:47: 2e:c2:2f:30:6a:97:d6:02:a0:d8:72:0f:62:7b:68:51:f8:f8: 2c:c3:f9:f2:01:b6:dd:59:a5:5b:3c:a3:b5:45:8c:20:7c:27: 14:c4:14:6d:39:15:b8:a9:b1:6b:73:94:4a:c5:c6:b0:2d:52: d3:f4:fb:b7:8c:1b:e8:6c:74:2a:17:94:49:d7:be:e9:f6:e0: 5d:d9:24:5b:20:b1:3a:c3:9e:6b:75:10:a9:a0:23:b4:99:66: bd:6c:a7:d5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp7sLVwtdpyn8jrmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk Mzg0MjZmNGEtNzM0ZS00MDA3LTkyMDEtNDkyYzhkMjIzYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyHEq8gxfMb1Y0W380IJeKBCgwu7mqi2X7cE hs8hbsmi09PgJQe75bn/llBQk8PtSieAtxFqIebgwy47CGEuTGI//9+lmHvJIrBG vvQKEGREl9OWEnr+XSJiDz6XKHcNg+jwuPHXbx+gleAhE6OjAmKhLigANFKIxQF0 /AFxJwoXN1RzSI/d1kTyhmBBxD2qzKA01Xtr9aZduGC4AQj5+rxSdZybIyBXQix5 7nY/YfmHrO/15+jdzxSaf/P8jOsevI3NJYRGhaqRu+XSBEe1rFOW4ZrcYBjy41I2 H9tbKnjO25e19nY/aqXR7s5V70qk1bvvJ3Gc2dkX/NjYMhF4lQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAI/NdMIaIk3DUS4Nd8vlCIoxkyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDVhZjg5MzgtZmU1NS0z NGNmLThhOTUtM2ZmOTI0N2U2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAICTDi6gKml2FeV1/5YPhfIWDMddA5SpYi1lmk97 xcapKWi995pyjBQfw5KyyypKvFmv0Nhm82dt2Tab3aXc64vV7ZEcSSGzZQ9Wkybv dx0Ksypub2IlnGz+LTxTKMfIGz5jaQ/wx8SBvkZ2ZqXnjwtxs5No6VI3gDNTGSZK PWLYzl6bZGOgDNZgJ0bSRkdBKjkkX2Wqz8gCWn4dpPbB+E/BRy7CLzBql9YCoNhy D2J7aFH4+CzD+fIBtt1ZpVs8o7VFjCB8JxTEFG05FbipsWtzlErFxrAtUtP0+7eM G+hsdCoXlEnXvun24F3ZJFsgsTrDnmt1EKmgI7SZZr1sp9U= -----END CERTIFICATE-----Generated at Sun Jul 20 14:41:09 2025 by rpki-client