$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa File: 4b403672-80b4-3084-a82e-caf0c8c6e539.roa (raw, json) Hash identifier: XdgnSrMcNSolwRwSydwz3deRLFFia4yhvZaEW+Ze++Y= Subject key identifier: AF:A9:98:CA:59:E9:2F:69:A2:DD:E0:67:C9:5B:21:64:06:05:4A:98 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584A497056C41B54D2E18ADEE580 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 32913 IP address blocks: 198.135.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:56:c4:1b:54:d2:e1:8a:de:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=33cc6f3e-4636-484e-b0d4-f314c4a95949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:55:fe:52:bf:44:a5:b9:25:95:37:a3:92: c6:ce:04:d1:e7:71:df:11:9d:61:23:87:5e:84:dc: d0:83:37:fc:3c:bf:e9:28:f9:97:64:50:13:61:cf: 72:5a:95:52:13:93:27:39:1c:d9:a4:9c:f8:d3:89: 7a:47:a9:64:6f:55:73:4d:23:19:06:17:99:65:83: 11:2c:15:19:f5:9d:16:bd:a3:1e:0f:4c:f9:e1:13: 32:c1:c9:2e:22:22:93:8b:35:25:58:b4:08:f8:0b: 9c:97:f6:25:fb:08:c7:08:f6:ef:38:c7:54:ed:22: ad:54:51:6b:7a:12:48:0c:2f:78:7a:9a:3b:b1:f8: e9:2f:85:f4:ba:c6:3c:44:51:0a:bf:cc:e0:b2:87: 28:34:62:6f:0f:e2:4d:ba:e1:3d:a0:1b:6f:56:3e: 05:1c:5a:17:e4:03:0f:15:b8:7e:58:61:f3:30:82: ed:94:85:b8:a7:c6:5e:55:44:bd:5d:15:59:1c:87: fd:be:eb:05:5a:6f:75:3e:c2:6e:19:f2:bd:13:1d: 61:d4:78:aa:5d:95:6d:47:3f:64:6c:c3:f0:71:87: 3c:33:cd:4a:bf:ff:ac:ef:ae:47:60:b4:a7:bc:23: 28:b1:b4:af:b4:4d:72:0f:7a:47:e8:83:24:b6:8c: b3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:98:CA:59:E9:2F:69:A2:DD:E0:67:C9:5B:21:64:06:05:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4b403672-80b4-3084-a82e-caf0c8c6e539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 198.135.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a2:ab:66:fb:02:19:eb:70:72:47:05:e1:fb:b2:7e:33:bd: 04:53:9b:18:83:f5:19:f6:fd:d4:54:0e:12:c3:9c:91:10:11: 48:cc:9f:26:20:cc:ad:85:a3:11:95:52:71:54:20:9c:9c:8e: 8d:5d:92:a0:b4:d6:41:0c:03:84:a3:6c:b7:f8:2a:03:6e:71: 75:26:dc:d1:86:f3:d0:6f:22:af:9f:bd:71:1c:27:f9:df:aa: 6b:20:2f:19:d3:db:29:31:b8:e9:1b:7a:58:47:a1:d2:a0:3c: 6c:12:1f:c7:67:67:01:f5:46:65:87:08:38:3c:26:62:9f:5b: ba:b2:dd:b9:dd:ea:8b:94:1a:ba:2b:24:36:43:a7:3c:86:f9: 88:28:95:74:41:97:09:df:c1:1a:31:78:2c:72:13:10:e6:4e: 79:a1:49:4d:52:43:7f:fc:92:e9:c2:91:2e:c9:a2:0e:06:24: 82:a9:b8:31:22:f5:b3:50:4c:ca:7d:75:4a:7e:f4:9b:2c:be: ba:49:38:33:82:8c:9d:46:94:4b:47:94:bf:72:44:24:95:25: f9:1c:7d:36:28:ef:ee:43:f3:75:6a:2b:cc:ef:d3:d8:bd:d3: e0:47:fa:ec:27:9c:02:56:4d:5a:43:4d:09:bf:72:92:b3:3a: a0:a9:4e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcFbEG1TS4Yre5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MzNjYzZmM2UtNDYzNi00ODRlLWIwZDQtZjMxNGM0YTk1OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUJV/lK/RKW5JZU3o5LGzgTR53HfEZ1hI4de hNzQgzf8PL/pKPmXZFATYc9yWpVSE5MnORzZpJz404l6R6lkb1VzTSMZBheZZYMR LBUZ9Z0WvaMeD0z54RMywckuIiKTizUlWLQI+Aucl/Yl+wjHCPbvOMdU7SKtVFFr ehJIDC94epo7sfjpL4X0usY8RFEKv8zgsocoNGJvD+JNuuE9oBtvVj4FHFoX5AMP Fbh+WGHzMILtlIW4p8ZeVUS9XRVZHIf9vusFWm91PsJuGfK9Ex1h1HiqXZVtRz9k bMPwcYc8M81Kv/+s765HYLSnvCMosbSvtE1yD3pH6IMktoyzeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+pmMpZ6S9pot3gZ8lbIWQGBUqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvNGI0MDM2NzItODBiNC0z MDg0LWE4MmUtY2FmMGM4YzZlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoeyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICiq2b7AhnrcHJHBeH7sn4zvQRTmxiD9Rn2/dRUDhLDnJEQEUjMnyYg zK2FoxGVUnFUIJycjo1dkqC01kEMA4SjbLf4KgNucXUm3NGG89BvIq+fvXEcJ/nf qmsgLxnT2ykxuOkbelhHodKgPGwSH8dnZwH1RmWHCDg8JmKfW7qy3bnd6ouUGror JDZDpzyG+YgolXRBlwnfwRoxeCxyExDmTnmhSU1SQ3/8kunCkS7Jog4GJIKpuDEi 9bNQTMp9dUp+9JssvrpJODOCjJ1GlEtHlL9yRCSVJfkcfTYo7+5D83VqK8zv09i9 0+BH+uwnnAJWTVpDTQm/cpKzOqCpTiU= -----END CERTIFICATE-----Generated at Wed Jul 2 04:52:29 2025 by rpki-client