$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa File: 41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa (raw, json) Hash identifier: 9Cyx+XXzqdcDYH6Z+NRE712MqabMd4rTmn1k9BzkZFU= Subject key identifier: 8B:6B:74:BF:D0:33:0C:C3:E5:69:D5:25:F6:9A:49:93:A5:FC:11:89 Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584AA85BBA6F1C25BC8C4B2CBF80 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 40628 IP address blocks: 192.149.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:ba:6f:1c:25:bc:8c:4b:2c:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=ac9f04a5-6c33-4524-a3ae-8e6960117908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:78:c3:e3:fe:6a:7a:51:51:95:f9:cb:79: 6b:89:d0:3e:cf:ce:d4:13:48:08:2e:e2:9f:be:a4: d2:a8:7c:db:1c:ab:1a:ae:8b:c2:8e:37:ff:53:f6: ab:3b:16:18:86:a8:7c:79:23:1a:ae:29:7a:42:69: 50:6e:fc:9e:61:b2:34:1a:16:b9:94:d9:8d:e9:d1: 21:73:dd:e2:73:be:f7:da:29:2c:36:bc:21:97:80: b6:01:bf:2c:7f:7a:fc:00:f0:f5:12:48:59:58:7b: b9:e2:96:8f:f7:83:90:db:aa:60:ef:f8:ba:0a:df: d2:51:92:61:02:f5:9b:57:75:7c:89:b5:da:d8:70: 44:b5:12:fc:bc:4b:a6:e5:3c:11:2d:65:2b:71:46: 9e:03:ee:2f:a5:7a:94:18:33:12:a5:4b:0a:00:82: c4:4c:23:b0:66:84:bf:e6:bb:6a:14:90:9a:59:51: 99:8a:8d:d3:5b:13:cc:39:d5:e4:56:26:36:95:ee: 77:f9:80:86:e6:33:ad:94:8d:f7:0f:59:cc:12:d1: 00:39:02:6b:39:2f:5e:df:d1:27:9c:1e:f2:5d:f5: 1b:fe:d1:e4:e6:a4:d1:67:fc:bc:9c:3f:e9:cc:fd: d2:b7:48:4e:94:29:94:c3:cd:a3:62:38:73:e0:76: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6B:74:BF:D0:33:0C:C3:E5:69:D5:25:F6:9A:49:93:A5:FC:11:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/41b5e438-b014-3c69-b95f-0b9da7ce1eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 192.149.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f3:8d:80:8d:90:16:28:3f:4d:00:fd:4d:0a:6b:9c:5e:7a: 30:98:eb:31:2a:7d:74:f6:1b:cc:bd:a5:33:87:c9:57:5a:a9: 72:66:5b:4b:1c:5b:40:12:bc:b2:0b:a4:98:f9:f9:34:e9:7e: ed:50:00:f5:b3:c9:ba:7d:86:aa:9a:e0:d5:a0:72:4a:1c:3b: 85:bd:e2:3a:cd:67:ee:f2:6e:02:af:aa:c0:df:76:ae:03:eb: 14:f0:fb:ee:b4:45:b1:9a:bc:95:8e:e9:4c:33:e9:48:8b:22: be:70:3b:d7:ad:08:9e:db:9c:d6:6a:c0:4d:79:01:f7:15:06: a9:2e:a4:a2:6d:45:fd:ba:48:96:de:27:18:71:34:04:11:b3: c6:f5:3f:99:51:27:5c:a3:bc:d3:aa:96:0e:b4:ea:5b:59:d0: 1c:a9:69:e6:51:31:80:a5:b5:d0:3a:f5:2f:dd:66:23:c5:40: fc:bc:7d:c4:7e:cb:d1:1d:91:28:ee:27:bd:da:20:b6:23:4a: c3:7c:20:58:4d:2f:3b:e9:b2:3e:59:13:92:7c:17:b0:6b:39: 08:bf:a6:34:08:66:2d:fb:ed:a3:28:4f:e3:f8:af:75:29:cc: 8c:08:b4:34:5b:69:f1:79:d8:be:10:d0:3d:dd:3b:b6:5f:35: b0:01:28:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7pvHCW8jEssv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YWM5ZjA0YTUtNmMzMy00NTI0LWEzYWUtOGU2OTYwMTE3OTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WB4w+P+anpRUZX5y3lridA+z87UE0gILuKf vqTSqHzbHKsarovCjjf/U/arOxYYhqh8eSMaril6QmlQbvyeYbI0Gha5lNmN6dEh c93ic7732iksNrwhl4C2Ab8sf3r8APD1EkhZWHu54paP94OQ26pg7/i6Ct/SUZJh AvWbV3V8ibXa2HBEtRL8vEum5TwRLWUrcUaeA+4vpXqUGDMSpUsKAILETCOwZoS/ 5rtqFJCaWVGZio3TWxPMOdXkViY2le53+YCG5jOtlI33D1nMEtEAOQJrOS9e39En nB7yXfUb/tHk5qTRZ/y8nD/pzP3St0hOlCmUw82jYjhz4Hb+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItrdL/QMwzD5WnVJfaaSZOl/BGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNDFiNWU0MzgtYjAxNC0z YzY5LWI5NWYtMGI5ZGE3Y2UxZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTzjYCNkBYoP00A/U0Ka5xeejCY6zEqfXT2G8y9pTOHyVdaqXJmW0sc W0ASvLILpJj5+TTpfu1QAPWzybp9hqqa4NWgckocO4W94jrNZ+7ybgKvqsDfdq4D 6xTw++60RbGavJWO6Uwz6UiLIr5wO9etCJ7bnNZqwE15AfcVBqkupKJtRf26SJbe JxhxNAQRs8b1P5lRJ1yjvNOqlg606ltZ0BypaeZRMYCltdA69S/dZiPFQPy8fcR+ y9EdkSjuJ73aILYjSsN8IFhNLzvpsj5ZE5J8F7BrOQi/pjQIZi377aMoT+P4r3Up zIwItDRbafF52L4Q0D3dO7ZfNbABKEA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:32:27 2025 by rpki-client