$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa File: 09447d8b-5279-3ff9-bc90-e46a1f94d759.roa (raw, json) Hash identifier: V0gp5SW0o70xBuRz8YyUSHVdeJRoOhLKfM8cDoUC+OU= Subject key identifier: 28:A5:ED:EA:60:CD:4C:18:83:DF:90:00:C0:18:97:7D:86:FB:70:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0947772D470D09C4900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 396611 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:94:77:72:d4:70:d0:9c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=5cf6659a-2a0d-4120-9e26-a1e294a0138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:56:88:11:c1:bf:a6:94:92:89:7a:a6:b0: fd:ff:89:1c:0e:a7:91:8c:5d:d0:d4:d0:f0:cb:98: 7c:6a:f8:3c:68:a2:dc:6c:f9:ae:a0:7b:29:5e:bc: cc:06:4d:ce:94:c0:4b:2f:7a:a5:e4:d4:74:1a:26: 79:04:b3:70:13:2c:5f:d7:06:77:83:cd:c1:22:aa: b7:8c:e7:0e:31:85:ec:24:04:27:36:43:8e:ca:f8: 75:e9:44:a5:9e:0d:c3:3d:1a:16:9c:0f:02:ae:a9: 72:cb:43:fb:c0:e2:5c:cd:6f:48:0e:b1:b1:5f:da: 41:8d:0d:15:c5:e5:7b:4c:c7:a4:fa:11:67:46:38: a7:80:f4:c4:ae:35:16:a4:90:d8:0d:d3:53:20:43: 3c:67:37:f9:77:22:15:b2:8f:ac:d8:5e:42:17:a7: ae:5f:11:06:dc:ff:4a:e2:3c:73:17:13:69:84:31: 1a:6c:ca:5d:e1:5b:dc:e0:54:0f:30:b5:18:8c:d1: c4:49:6d:71:f5:c1:b0:d7:e4:cf:28:66:d1:bf:29: a9:b7:3f:f8:0a:0f:eb:a6:14:a3:55:d7:53:57:21: 9d:54:ef:3d:ee:5a:00:2c:8b:c6:da:99:fa:f7:e8: cb:e0:35:d3:01:32:ff:a3:da:d7:b4:8e:ee:83:b7: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A5:ED:EA:60:CD:4C:18:83:DF:90:00:C0:18:97:7D:86:FB:70:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5c:d1:cb:01:3f:14:ff:2e:81:71:29:0b:76:b6:8e:ae:a3: 4a:09:ad:0e:80:52:f0:80:47:5d:ba:3c:85:35:88:8a:85:88: 55:6c:90:fe:6e:6b:5c:1a:a8:c0:21:83:c0:e3:7c:a5:7b:e1: 80:42:9b:c0:71:fc:68:6d:bf:13:8b:c5:88:ad:79:d7:c7:37: 58:94:26:c8:52:3b:49:08:1a:7d:d6:b1:6b:04:5f:35:c8:5f: da:d7:9e:f1:cc:11:0b:d9:7a:92:6a:1a:56:b6:f8:3d:5e:b7: c3:db:a0:f5:2c:26:0a:1f:19:5c:72:66:64:11:61:eb:7b:ad: 04:8c:ef:83:54:78:24:0f:c9:eb:9a:e5:1e:4a:8d:2e:43:30: c2:cc:b0:48:f4:6d:e9:c9:df:fd:73:fa:8f:24:8f:4d:a9:90: 08:61:0a:f7:8b:55:fe:4a:90:08:a4:82:13:a0:ea:3c:db:60: 74:d9:69:0f:1f:60:6e:28:88:ba:29:d9:d5:2e:4e:83:9c:8e: df:fb:d5:22:d5:ed:aa:10:71:6d:e4:fe:1c:f2:25:78:4f:c6: 75:15:a0:2f:ae:f7:65:53:a9:7f:f9:c2:f8:7f:ad:15:40:5b: a9:ac:e8:f0:bf:9a:d7:80:5c:33:bb:cb:7d:2e:d1:c0:7a:ec: d4:86:5b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NCUd3LUcNCcSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk NWNmNjY1OWEtMmEwZC00MTIwLTllMjYtYTFlMjk0YTAxMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBWiBHBv6aUkol6prD9/4kcDqeRjF3Q1NDw y5h8avg8aKLcbPmuoHspXrzMBk3OlMBLL3ql5NR0GiZ5BLNwEyxf1wZ3g83BIqq3 jOcOMYXsJAQnNkOOyvh16USlng3DPRoWnA8Crqlyy0P7wOJczW9IDrGxX9pBjQ0V xeV7TMek+hFnRjingPTErjUWpJDYDdNTIEM8Zzf5dyIVso+s2F5CF6euXxEG3P9K 4jxzFxNphDEabMpd4Vvc4FQPMLUYjNHESW1x9cGw1+TPKGbRvymptz/4Cg/rphSj VddTVyGdVO897loALIvG2pn69+jL4DXTATL/o9rXtI7ug7cQRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCil7epgzUwYg9+QAMAYl32G+3BdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk0NDdkOGItNTI3OS0z ZmY5LWJjOTAtZTQ2YTFmOTRkNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJc0csBPxT/LoFxKQt2to6uo0oJrQ6AUvCAR126PIU1iIqFiFVskP5u a1waqMAhg8DjfKV74YBCm8Bx/GhtvxOLxYitedfHN1iUJshSO0kIGn3WsWsEXzXI X9rXnvHMEQvZepJqGla2+D1et8PboPUsJgofGVxyZmQRYet7rQSM74NUeCQPyeua 5R5KjS5DMMLMsEj0benJ3/1z+o8kj02pkAhhCveLVf5KkAikghOg6jzbYHTZaQ8f YG4oiLop2dUuToOcjt/71SLV7aoQcW3k/hzyJXhPxnUVoC+u92VTqX/5wvh/rRVA W6ms6PC/mteAXDO7y30u0cB67NSGW7Y= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:50 2025 by rpki-client