$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa File: dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa (raw, json) Hash identifier: DP3JJJy0DsyJuum0AsTxacS2uTuJcoZiXiCOV/hTwqo= Subject key identifier: 42:D0:ED:16:23:B9:5F:F3:38:48:10:EA:BC:0C:D1:FD:D1:97:30:E0 Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F4328584AA2C64445ACAF9D1117F2A000 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 11032 IP address blocks: 198.168.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:44:45:ac:af:9d:11:17:f2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=34ca3f40-f3ef-4ef7-8892-e21fce059c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:c2:10:9a:8b:da:bc:1b:45:7d:cf:ec:50: f2:31:f9:0d:95:95:ed:4b:dd:a1:40:6d:96:3e:5e: c5:4c:3a:e8:f8:43:0c:45:94:d5:41:a4:66:a2:ac: ba:00:fd:4a:26:54:ec:0b:6d:fb:72:18:e0:7a:02: 23:fe:a1:ab:fb:21:e0:4c:92:51:2d:35:7e:86:bf: ae:10:e7:3c:fc:c1:d3:06:9d:a1:04:a0:ae:2c:d2: f0:f8:5f:25:fa:c3:8b:f2:98:73:d8:dd:de:62:55: ca:0c:1a:aa:f1:ba:32:ee:1c:cb:2e:b7:ea:7f:15: 62:20:cd:b8:ef:36:51:36:3f:79:85:c7:4b:73:55: ff:8f:ba:31:f2:39:15:9b:02:35:d7:26:1f:a7:0d: b6:44:cc:ba:a0:08:d5:9d:92:58:eb:93:38:a8:a7: 2f:de:66:58:65:e4:77:c8:4d:15:cf:cb:c1:c6:9f: 59:00:a1:cc:42:51:c3:f8:e7:f2:ec:85:4b:e1:d4: 0a:e3:ae:7a:ef:c0:e2:c0:52:98:97:84:19:10:88: ab:5c:63:dc:7b:da:38:68:4e:14:24:05:20:94:2e: bc:c7:23:0e:dc:6a:9d:7f:30:96:5a:31:d1:b3:60: c1:b6:a0:ec:10:ff:40:31:6a:07:6d:ac:31:b0:68: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D0:ED:16:23:B9:5F:F3:38:48:10:EA:BC:0C:D1:FD:D1:97:30:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 198.168.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ab:19:11:50:91:50:c4:ed:62:6c:53:63:65:5f:3b:56:a7: 5e:dd:1a:6b:eb:85:84:e2:d4:b5:aa:06:32:78:6f:79:bd:14: 2d:eb:58:49:b4:90:65:ae:e6:3f:6d:d2:58:c3:4e:bc:7b:d9: 03:35:b3:e1:48:47:cd:78:4e:c3:66:dc:5a:1d:d1:e3:7e:d8: 17:fa:71:2d:c4:d0:d5:12:65:31:e1:a8:dd:05:82:c0:b1:79: 51:d4:26:53:74:72:62:01:a2:04:b2:b5:8b:bc:39:ec:a8:88: d4:34:90:2a:14:ff:14:53:36:b2:60:14:ba:1d:16:49:4c:81: 5a:5c:8a:58:04:89:8a:cc:1b:fe:16:8d:28:f0:c7:70:9f:e4: 15:16:ae:18:54:b0:0c:8c:f2:be:07:a7:9c:c1:3e:dd:87:d2: b5:55:f4:78:2f:e2:8a:a9:ff:27:a7:df:40:22:4a:58:29:c6: 6b:24:6a:c0:2b:f4:02:d0:00:b0:32:0a:0d:53:93:a6:1f:81: 7a:1d:37:68:22:41:70:6e:4d:a8:c0:26:44:c4:75:f6:19:03: c4:e4:ea:31:93:e3:f0:a7:8e:f8:cd:80:e0:57:2d:77:68:b5: d2:d0:7e:ea:1f:5d:ff:6d:0c:1c:a0:22:52:20:54:77:4d:3f: e5:9b:15:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqixkRFrK+dERfyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzRjYTNmNDAtZjNlZi00ZWY3LTg4OTItZTIxZmNlMDU5YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu3CEJqL2rwbRX3P7FDyMfkNlZXtS92hQG2W Pl7FTDro+EMMRZTVQaRmoqy6AP1KJlTsC237chjgegIj/qGr+yHgTJJRLTV+hr+u EOc8/MHTBp2hBKCuLNLw+F8l+sOL8phz2N3eYlXKDBqq8boy7hzLLrfqfxViIM24 7zZRNj95hcdLc1X/j7ox8jkVmwI11yYfpw22RMy6oAjVnZJY65M4qKcv3mZYZeR3 yE0Vz8vBxp9ZAKHMQlHD+Ofy7IVL4dQK465678DiwFKYl4QZEIirXGPce9o4aE4U JAUglC68xyMO3GqdfzCWWjHRs2DBtqDsEP9AMWoHbawxsGiY7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELQ7RYjuV/zOEgQ6rwM0f3RlzDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvZGM0MmJmMzgtYTE4My0z M2JmLThmZmUtMDVkYTJjN2E4ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqgsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqrGRFQkVDE7WJsU2NlXztWp17dGmvrhYTi1LWqBjJ4b3m9FC3rWEm0 kGWu5j9t0ljDTrx72QM1s+FIR814TsNm3Fod0eN+2Bf6cS3E0NUSZTHhqN0FgsCx eVHUJlN0cmIBogSytYu8OeyoiNQ0kCoU/xRTNrJgFLodFklMgVpcilgEiYrMG/4W jSjwx3Cf5BUWrhhUsAyM8r4Hp5zBPt2H0rVV9Hgv4oqp/yen30AiSlgpxmskasAr 9ALQALAyCg1Tk6YfgXodN2giQXBuTajAJkTEdfYZA8Tk6jGT4/CnjvjNgOBXLXdo tdLQfuofXf9tDBygIlIgVHdNP+WbFYI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:44 2025 by rpki-client