$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa File: 309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json) Hash identifier: 4HVpj/sd6Fx+QJx/8CJ7oa6XWjZazhzS0ais95Eekqk= Subject key identifier: 68:FD:94:05:F2:09:BD:9F:8A:7B:5E:B1:24:57:0F:B2:76:4C:0B:B8 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584AB4EB7B1BD3297538248D9700 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 16509 IP address blocks: 198.44.180.0/24 maxlen: 24 198.44.181.0/24 maxlen: 24 198.44.182.0/24 maxlen: 24 198.44.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:7b:1b:d3:29:75:38:24:8d:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0d723561-308c-494e-bc06-2da38e8b46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:52:b9:c4:4d:39:e1:ab:0c:e3:ea:0e:9a: a1:47:2d:d4:33:7c:08:18:b3:a6:06:3a:63:75:9f: 66:93:7b:72:8e:78:61:1c:d5:f0:17:51:fb:f3:d2: 10:80:95:a9:eb:ed:ac:2a:1a:43:28:bb:6d:59:bd: 79:08:8e:a6:2f:53:5c:75:24:8a:97:f6:bb:29:a7: 0b:71:d9:d8:a1:13:77:27:bc:a4:65:6f:8b:b5:f7: ce:43:01:eb:56:9d:b3:2b:be:d8:71:7f:37:3c:ef: 9b:64:1d:b4:f1:aa:b0:97:dc:d9:81:0b:79:ad:87: 37:ae:0d:da:96:b2:f1:21:f7:6c:0b:a4:36:34:7b: a4:7c:34:21:53:fb:97:f1:60:dc:b3:55:89:04:4c: 54:80:a7:d5:ef:68:03:fe:05:4c:d9:fe:8d:a2:68: 10:b2:e8:86:4b:6d:d1:7f:00:31:27:a9:db:ea:1a: 4d:53:fe:25:c4:bf:a8:bd:97:10:ab:8b:36:ec:05: a2:09:c1:63:73:af:b3:cf:96:25:6b:ca:1c:1f:e4: 63:c0:b4:05:fa:5d:76:3b:b1:ab:6e:7d:0e:57:06: c5:15:cf:47:29:4a:fd:59:9f:c1:f6:ad:92:33:e9: 70:f8:a1:32:8b:1b:51:5e:02:11:75:4f:d5:1b:73: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:94:05:F2:09:BD:9F:8A:7B:5E:B1:24:57:0F:B2:76:4C:0B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:94:2b:1e:f0:66:d6:4c:d4:64:7c:89:f3:6c:35:b0:3c:9b: ed:63:4d:e3:d5:8d:1d:ea:d9:33:80:03:3f:4a:5c:d6:5f:74: 6c:39:f9:f8:95:cc:e2:7e:1e:78:68:8c:ce:85:04:83:08:5e: 8c:ff:95:4f:52:9d:70:7f:0f:a6:3d:d2:37:f0:90:31:23:ef: 3e:bd:4b:27:3b:1f:59:74:ed:ea:74:30:31:a2:9a:93:21:94: 8e:2c:4e:54:d2:9d:5a:48:ef:e2:c2:c6:f0:3a:74:08:72:2a: ca:36:de:40:09:3f:5c:28:27:ac:13:ca:d2:b3:50:b8:8b:fa: ba:a8:23:30:e5:6d:ab:1f:aa:01:39:31:91:26:e2:5b:b9:78: d2:2d:ee:22:2c:5d:d0:c1:65:e1:e7:c6:ed:95:e2:90:e1:5e: 8c:74:3c:3a:8c:49:09:7b:6a:dd:e9:c6:ab:58:eb:8c:22:e3: 39:ed:68:98:10:bd:cd:7b:b2:4c:87:2f:10:9d:88:6a:07:20: ac:2b:51:ac:d7:a9:86:65:cf:79:fc:b8:30:83:f1:84:9d:f4: 0f:d8:95:c6:ac:fa:0e:69:2b:7b:88:7d:9b:33:12:dd:6a:93: f5:0f:dc:08:00:e6:16:6c:12:80:fc:e5:ca:b7:a6:be:f3:5b: d8:c9:51:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063sb0yl1OCSNlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGQ3MjM1NjEtMzA4Yy00OTRlLWJjMDYtMmRhMzhlOGI0NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRSucRNOeGrDOPqDpqhRy3UM3wIGLOmBjpj dZ9mk3tyjnhhHNXwF1H789IQgJWp6+2sKhpDKLttWb15CI6mL1NcdSSKl/a7KacL cdnYoRN3J7ykZW+LtffOQwHrVp2zK77YcX83PO+bZB208aqwl9zZgQt5rYc3rg3a lrLxIfdsC6Q2NHukfDQhU/uX8WDcs1WJBExUgKfV72gD/gVM2f6NomgQsuiGS23R fwAxJ6nb6hpNU/4lxL+ovZcQq4s27AWiCcFjc6+zz5Yla8ocH+RjwLQF+l12O7Gr bn0OVwbFFc9HKUr9WZ/B9q2SM+lw+KEyixtRXgIRdU/VG3OlpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj9lAXyCb2fintesSRXD7J2TAu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA5YzRjZWUtNTE5Ny0z YTZmLWE2ZTctMjQ1MDRiMGE1Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACUKx7wZtZM1GR8ifNsNbA8m+1jTePVjR3q2TOAAz9KXNZfdGw5+fiV zOJ+HnhojM6FBIMIXoz/lU9SnXB/D6Y90jfwkDEj7z69Syc7H1l07ep0MDGimpMh lI4sTlTSnVpI7+LCxvA6dAhyKso23kAJP1woJ6wTytKzULiL+rqoIzDlbasfqgE5 MZEm4lu5eNIt7iIsXdDBZeHnxu2V4pDhXox0PDqMSQl7at3pxqtY64wi4zntaJgQ vc17skyHLxCdiGoHIKwrUazXqYZlz3n8uDCD8YSd9A/Ylcas+g5pK3uIfZszEt1q k/UP3AgA5hZsEoD85cq3pr7zW9jJUSg= -----END CERTIFICATE-----Generated at Fri Aug 8 00:12:23 2025 by rpki-client