$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa File: 0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa (raw, json) Hash identifier: 9T7Ed2dUxqZN7KYUEE1Q3FBzPSbCM6nZDltiWR2JU0o= Subject key identifier: 30:FB:C2:68:CE:E6:98:32:61:06:A9:F9:8A:90:7F:A8:27:01:10:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC5C06809C8799096400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 36624 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:5c:06:80:9c:87:99:09:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=4eb3eec9-1305-454c-8971-5418c37ec721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:c7:5f:a7:c9:6a:c3:4a:f4:ec:fb:73:1d: 0c:21:ef:bf:9a:33:60:7b:3d:c8:d9:91:55:a7:39: cc:e2:3e:e9:12:5d:b5:55:42:cf:5f:2c:05:30:9b: e9:90:c4:63:e3:4b:1c:79:4a:05:81:de:46:c6:9f: 1a:68:c3:7f:fc:62:60:22:7f:77:cc:76:cd:b5:d8: 5a:c5:e4:1d:ff:09:24:5a:25:b0:b6:b9:41:ac:50: 74:f6:00:a1:17:69:7e:b9:58:cd:a4:8e:0c:73:fa: 4a:f7:b6:2a:78:a9:e4:6b:fa:44:93:1d:e9:95:d2: df:d9:13:6b:01:29:31:e4:d8:1a:56:06:b3:64:aa: f7:c3:a5:91:c4:37:11:86:20:ac:ca:ef:48:05:0a: e0:dc:18:d8:37:ab:fc:34:bb:32:94:4b:88:e0:08: c9:f3:16:60:3e:4a:73:22:f9:00:1f:10:02:eb:8a: ec:41:a7:7b:be:f5:85:4c:3f:86:85:82:f4:3c:1f: 51:f1:e5:b0:a0:e1:e6:f5:5f:eb:1e:52:29:70:9f: bf:d7:27:50:1e:4d:c7:9a:88:5c:0a:6f:94:4f:29: f2:cb:3b:f7:10:45:6b:be:c9:fe:1c:26:2a:d2:83: a1:9e:b9:55:e4:39:53:83:56:00:26:ef:1d:b7:ef: 59:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:C2:68:CE:E6:98:32:61:06:A9:F9:8A:90:7F:A8:27:01:10:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b3:ef:7b:1b:d5:73:68:19:dd:21:ec:19:ea:d0:a5:bf:9f: fb:dd:a0:a2:2b:d2:38:be:37:bb:15:61:24:9e:ea:d0:80:55: 9c:e2:11:cf:e5:9c:0d:43:40:5e:9a:72:9c:b1:0c:8f:5e:0c: 89:8e:5c:c0:5b:f9:90:13:6c:01:77:b6:ad:71:93:f6:24:c9: d4:6f:1c:38:0c:a6:66:b9:1b:e2:d4:a4:c9:b7:ca:b4:9e:18: d5:14:86:55:c7:ed:39:55:bf:22:11:fc:5e:a7:ff:f2:1c:e4: 29:b5:03:e0:40:31:07:ce:02:cb:96:05:e9:2a:5c:6c:9a:a7: 55:ad:f0:59:24:63:82:a6:11:d1:3b:74:1f:9c:7f:a4:41:67: 37:36:5f:00:71:4a:ce:97:d1:7c:78:9a:cb:c2:a6:b9:2f:6a: ae:46:03:4c:b3:0b:1f:30:0b:77:09:61:ea:ec:67:df:ba:0f: 5c:79:68:6a:e4:ef:cc:72:43:d8:df:fc:17:62:2e:b3:a1:93: b2:6d:00:34:17:8e:3f:16:61:20:8a:de:60:7e:62:3f:83:c8: 8b:2f:da:70:75:f2:48:32:43:4f:12:c9:50:29:3c:fa:53:8b: 3c:9a:ff:f7:f4:8c:ee:a2:b4:85:21:d4:a6:c1:cf:32:62:4c: fa:e5:8b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MxcBoCch5kJZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NGViM2VlYzktMTMwNS00NTRjLTg5NzEtNTQxOGMzN2VjNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDzHX6fJasNK9Oz7cx0MIe+/mjNgez3I2ZFV pznM4j7pEl21VULPXywFMJvpkMRj40sceUoFgd5Gxp8aaMN//GJgIn93zHbNtdha xeQd/wkkWiWwtrlBrFB09gChF2l+uVjNpI4Mc/pK97YqeKnka/pEkx3pldLf2RNr ASkx5NgaVgazZKr3w6WRxDcRhiCsyu9IBQrg3BjYN6v8NLsylEuI4AjJ8xZgPkpz IvkAHxAC64rsQad7vvWFTD+GhYL0PB9R8eWwoOHm9V/rHlIpcJ+/1ydQHk3Hmohc Cm+UTynyyzv3EEVrvsn+HCYq0oOhnrlV5DlTg1YAJu8dt+9ZvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD7wmjO5pgyYQap+YqQf6gnARBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQ1NmRjZGUtODZjMC0z ZWYwLWE3MmYtNTlmZmNjNDUyZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqz73sb1XNoGd0h7Bnq0KW/n/vdoKIr0ji+N7sVYSSe6tCAVZziEc/l nA1DQF6acpyxDI9eDImOXMBb+ZATbAF3tq1xk/YkydRvHDgMpma5G+LUpMm3yrSe GNUUhlXH7TlVvyIR/F6n//Ic5Cm1A+BAMQfOAsuWBekqXGyap1Wt8FkkY4KmEdE7 dB+cf6RBZzc2XwBxSs6X0Xx4msvCprkvaq5GA0yzCx8wC3cJYersZ9+6D1x5aGrk 78xyQ9jf/BdiLrOhk7JtADQXjj8WYSCK3mB+Yj+DyIsv2nB18kgyQ08SyVApPPpT izya//f0jO6itIUh1KbBzzJiTPrli60= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:10 2025 by rpki-client