$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa File: 05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa (raw, json) Hash identifier: LaX+js1Dl0jzJB2u8hEMlGAylPsAuVX9wtCIUgC8Iew= Subject key identifier: 2C:F3:37:45:4C:86:A4:E3:20:FF:9A:EE:F0:33:73:8D:97:0F:C5:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB2119B0586F6FC5B380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 10515 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:21:19:b0:58:6f:6f:c5:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=0e43b77d-c68a-4956-ad62-e122ce51239b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:c4:9a:ec:90:e1:3a:a0:93:00:af:e5:7a: 21:bb:c0:0a:64:8d:a4:47:9e:ed:b1:4a:61:60:bf: 9f:56:c2:8e:5b:e0:2b:bd:63:71:2b:9f:7c:b6:73: 44:f8:4b:4c:a2:94:b5:9a:9d:7c:29:3c:37:c7:67: 8d:95:ec:cc:7f:70:26:ba:80:d5:d9:7d:b1:f8:bd: 36:5f:da:06:74:b8:fd:38:0f:56:08:70:47:79:26: e4:0d:48:14:52:d3:1d:73:a0:26:5b:82:c3:f0:20: bc:9b:04:d0:2c:e2:96:a5:78:8a:4e:04:c0:c0:15: 4a:0e:df:c7:5b:ba:c2:60:5a:4c:2f:7b:ea:b1:c3: 5b:2e:ef:8c:77:5a:c9:0f:7b:1e:29:2b:4f:20:6a: d8:b9:00:55:ba:80:28:64:56:23:4c:b2:6e:c0:72: 30:51:22:e0:1a:2a:f7:8b:26:66:0b:2b:22:27:13: 4c:97:cb:17:f1:ce:48:16:27:eb:88:b0:11:85:f9: d3:eb:9f:0b:70:5a:d4:22:e5:ce:f1:cf:ab:71:c3: 2b:31:ed:56:61:f1:1b:0f:5c:92:a8:d6:78:19:d9: bf:13:6c:de:81:c1:32:cf:44:d3:f3:0a:52:ee:d5: db:c8:b1:74:be:8c:db:31:cd:12:e4:fc:2d:bd:82: 72:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F3:37:45:4C:86:A4:E3:20:FF:9A:EE:F0:33:73:8D:97:0F:C5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:11:61:1c:41:ef:0a:a9:65:72:3f:61:08:64:92:db:f4:2f: 93:f1:ea:c6:95:17:32:23:d0:2e:5b:4f:bf:b3:27:47:84:35: 67:3d:85:5f:04:ef:d6:5c:6a:af:66:2e:de:c6:a9:32:a4:c7: 54:61:72:7d:46:bb:9f:15:8e:cf:83:4d:3e:3b:20:8c:af:eb: 45:ba:13:8e:ef:c2:2f:8f:ef:32:7c:57:d7:24:a8:2b:40:74: 1c:2e:cf:ba:05:c0:17:cd:46:41:00:35:4d:7a:5f:f4:b6:6f: 69:a7:c7:75:76:98:63:6e:33:bb:bf:ab:fe:52:34:76:3d:6a: e7:0c:20:e2:99:eb:1a:fe:85:4b:fb:8c:a5:9f:85:8f:6a:d7: e3:20:0e:a8:e2:87:35:df:50:89:cb:80:15:b3:10:c0:91:ed: 01:1a:1e:05:b9:4d:af:0c:11:da:da:f2:77:a3:a3:6a:58:bf: 8d:4d:d0:d7:ce:46:26:d9:5a:bc:7e:e9:46:d0:41:03:02:50: 35:cc:ed:a6:9b:f1:cf:83:02:9b:d8:6d:82:43:dc:a9:f3:9e: 6f:a7:b3:7d:63:01:be:e8:0c:75:ef:ce:6c:de:ef:5c:96:0b: af:75:4f:57:94:7a:71:2b:d4:1d:3f:7d:0b:03:0e:51:bc:43: 53:ce:db:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MshGbBYb2/Fs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk MGU0M2I3N2QtYzY4YS00OTU2LWFkNjItZTEyMmNlNTEyMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2XEmuyQ4TqgkwCv5Xohu8AKZI2kR57tsUph YL+fVsKOW+ArvWNxK598tnNE+EtMopS1mp18KTw3x2eNlezMf3AmuoDV2X2x+L02 X9oGdLj9OA9WCHBHeSbkDUgUUtMdc6AmW4LD8CC8mwTQLOKWpXiKTgTAwBVKDt/H W7rCYFpML3vqscNbLu+Md1rJD3seKStPIGrYuQBVuoAoZFYjTLJuwHIwUSLgGir3 iyZmCysiJxNMl8sX8c5IFifriLARhfnT658LcFrUIuXO8c+rccMrMe1WYfEbD1yS qNZ4Gdm/E2zegcEyz0TT8wpS7tXbyLF0vozbMc0S5PwtvYJyswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzzN0VMhqTjIP+a7vAzc42XD8UkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDVhMjBiMTEtNTkyNy0z YmJlLTg1MGEtYzZmYzQ5Y2Q0ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0RYRxB7wqpZXI/YQhkktv0L5Px6saVFzIj0C5bT7+zJ0eENWc9hV8E 79Zcaq9mLt7GqTKkx1Rhcn1Gu58Vjs+DTT47IIyv60W6E47vwi+P7zJ8V9ckqCtA dBwuz7oFwBfNRkEANU16X/S2b2mnx3V2mGNuM7u/q/5SNHY9aucMIOKZ6xr+hUv7 jKWfhY9q1+MgDqjihzXfUInLgBWzEMCR7QEaHgW5Ta8MEdra8nejo2pYv41N0NfO RibZWrx+6UbQQQMCUDXM7aab8c+DApvYbYJD3Knznm+ns31jAb7oDHXvzmze71yW C691T1eUenEr1B0/fQsDDlG8Q1PO29I= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:19 2025 by rpki-client