$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa File: dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa (raw, json) Hash identifier: tBVRITEaxgzngMfmhOgzwcdxhFkjillExu5q/+w63jg= Subject key identifier: ED:11:35:82:5F:FB:9E:49:99:33:6E:0D:F9:BB:E2:2C:A9:A6:6A:F6 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584A66C06907B1AF54F8AF361340 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 1239 IP address blocks: 198.67.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:69:07:b1:af:54:f8:af:36:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=f6098873-d497-4075-9f88-c4fc122cc5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:fe:88:bb:8e:48:8b:d1:06:c2:60:18:90: 1d:7a:9b:04:d3:13:06:5e:03:63:f5:8c:cf:ea:26: ac:c3:ab:fb:85:68:b5:60:a2:4a:4a:50:c2:5a:66: 9b:e2:34:2c:26:a5:4e:ba:70:7f:ed:4f:24:ee:ce: ee:7d:f1:31:12:e0:90:f8:6d:ed:d0:59:fd:9a:b7: a8:07:4e:5e:e6:07:43:21:d2:48:63:2f:0d:ee:6b: 3e:20:b8:a4:f4:63:6f:4f:d9:c5:14:7b:86:a6:f8: e4:96:58:8f:40:ec:32:f9:16:c6:49:da:d4:96:bd: 02:db:2d:7f:d4:4c:51:52:1e:8d:68:ca:19:50:06: 6d:8e:8a:8b:24:81:a6:52:9c:58:ea:af:8c:11:36: 21:9c:6d:e6:ba:88:6f:65:cc:23:45:da:73:91:dc: f1:33:e4:60:77:5d:31:df:b2:be:ff:74:ad:3f:c4: cd:a8:c1:a3:db:55:a3:82:af:68:77:63:c8:11:fb: 1f:fa:18:1c:09:c7:e4:af:15:a5:3a:67:3c:00:4c: ad:fd:0a:c1:48:db:df:a2:84:c4:d3:7a:d4:92:9c: 27:5c:d3:15:18:4f:55:a8:32:1b:28:ec:7a:b1:28: 90:7d:84:21:6b:b2:0d:66:3a:3c:ed:ea:04:fa:3d: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:35:82:5F:FB:9E:49:99:33:6E:0D:F9:BB:E2:2C:A9:A6:6A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/dd40db55-eee3-3dfa-b796-7f59b5bdd108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 198.67.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:82:5d:1f:a0:5e:cc:ad:7f:d9:13:80:d0:0a:9a:bc:44:80: 7a:c2:20:8a:1b:e7:e8:1e:fb:ee:3b:b0:82:d1:e5:6f:62:fb: 60:27:91:c0:f4:53:69:49:46:bf:b5:7a:9f:ea:ab:5c:97:a5: 45:e1:8a:d1:4b:a7:77:4e:99:7f:06:39:7f:35:4c:36:f3:d2: 95:c4:58:96:e6:c9:ec:02:a8:f1:05:a4:b3:bd:9e:c3:15:63: 2e:97:7b:ba:95:8e:28:49:0b:f8:e3:5d:23:83:0d:69:c6:ca: 62:cd:fb:de:9e:10:21:a1:2d:ac:b9:84:49:18:39:b7:ae:07: 1f:3b:cb:14:04:44:95:55:2a:02:f2:ac:75:81:f1:31:a2:f9: 29:23:64:fe:47:eb:5b:28:50:71:20:e1:dc:e6:90:dd:19:72: e0:ec:33:76:0d:4a:09:26:c1:91:f0:16:af:5f:51:9e:84:bf: 63:a4:4b:f7:5a:55:e7:41:a6:7e:f4:48:61:10:84:07:cb:c0: 10:4c:a4:ff:4a:75:90:a3:6e:57:bc:b1:41:5c:aa:18:91:4e: 2f:29:db:5c:e6:4c:95:93:63:0e:3a:0c:7f:22:e7:94:8c:c0: be:62:1f:5c:0d:b5:af:2b:d0:25:6f:53:94:cc:bd:5c:94:d9: 6e:41:84:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGkHsa9U+K82E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk ZjYwOTg4NzMtZDQ5Ny00MDc1LTlmODgtYzRmYzEyMmNjNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHv+iLuOSIvRBsJgGJAdepsE0xMGXgNj9YzP 6iasw6v7hWi1YKJKSlDCWmab4jQsJqVOunB/7U8k7s7uffExEuCQ+G3t0Fn9mreo B05e5gdDIdJIYy8N7ms+ILik9GNvT9nFFHuGpvjklliPQOwy+RbGSdrUlr0C2y1/ 1ExRUh6NaMoZUAZtjoqLJIGmUpxY6q+METYhnG3muohvZcwjRdpzkdzxM+Rgd10x 37K+/3StP8TNqMGj21Wjgq9od2PIEfsf+hgcCcfkrxWlOmc8AEyt/QrBSNvfooTE 03rUkpwnXNMVGE9VqDIbKOx6sSiQfYQha7INZjo87eoE+j2ZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0RNYJf+55JmTNuDfm74iyppmr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZGQ0MGRiNTUtZWVlMy0z ZGZhLWI3OTYtN2Y1OWI1YmRkMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeCXR+gXsytf9kTgNAKmrxEgHrCIIob5+ge++47sILR5W9i+2AnkcD0 U2lJRr+1ep/qq1yXpUXhitFLp3dOmX8GOX81TDbz0pXEWJbmyewCqPEFpLO9nsMV Yy6Xe7qVjihJC/jjXSODDWnGymLN+96eECGhLay5hEkYObeuBx87yxQERJVVKgLy rHWB8TGi+SkjZP5H61soUHEg4dzmkN0ZcuDsM3YNSgkmwZHwFq9fUZ6Ev2OkS/da VedBpn70SGEQhAfLwBBMpP9KdZCjble8sUFcqhiRTi8p21zmTJWTYw46DH8i55SM wL5iH1wNta8r0CVvU5TMvVyU2W5BhOM= -----END CERTIFICATE-----Generated at Wed Jul 9 04:55:28 2025 by rpki-client