$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa File: 2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa (raw, json) Hash identifier: CNbddw8wAf5LyxHf1i574zcCW3hPg4yGJaWvBrXtBo8= Subject key identifier: B9:27:87:D3:5D:95:55:C5:D8:22:FE:C8:C0:77:94:8D:84:CB:DD:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE261AEE6805BE64D700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 32651 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:26:1a:ee:68:05:be:64:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=bd8d99c2-7123-45fe-a5e5-0a481ab9e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:14:3a:e3:c6:f9:52:fe:99:6a:d5:de:5d: c1:af:dd:41:ca:bf:8f:fa:3b:08:1e:87:81:55:da: 70:5e:34:82:26:4c:50:52:df:f0:f3:da:50:34:8f: d7:2f:26:d2:37:be:b9:be:61:45:d3:d6:b8:d6:cb: 04:a1:03:ab:94:77:b0:27:02:36:2b:3d:4a:3c:1d: 1f:fa:d1:c5:a6:38:47:c4:3a:cc:9d:3e:ac:6a:32: 99:82:be:49:68:27:f1:30:e5:a8:33:6b:aa:b7:37: 5e:00:3a:31:97:ea:41:a1:a2:00:5b:32:18:09:d8: e8:c2:fb:99:4f:8a:10:a1:21:6d:cc:56:fb:da:b1: f5:74:a7:b7:63:ae:e4:f2:cd:21:5d:b8:ca:0e:4f: f9:f0:f1:54:92:0c:92:27:cb:d4:51:9e:c4:6d:ac: 8d:86:e2:e3:af:99:d9:64:13:fd:e5:ca:36:31:11: 70:0e:2b:08:f9:c0:df:a3:e4:a4:65:84:47:77:d3: f6:77:3f:cc:74:1a:1e:76:27:40:c0:84:fb:e3:cd: 60:b3:84:f5:18:f3:5e:7d:e7:89:6e:10:bd:b9:ce: 8e:d5:bf:ba:f4:40:aa:59:74:8c:e5:cd:27:d9:9f: 29:8f:c2:b1:d7:67:10:4f:71:72:d2:dc:9c:66:da: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:87:D3:5D:95:55:C5:D8:22:FE:C8:C0:77:94:8D:84:CB:DD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a9:46:7f:63:7a:76:38:ee:d3:7a:88:98:fb:a2:5c:5e:7c: 8f:ca:8d:81:5f:bf:8c:6e:dd:e5:cd:aa:af:91:08:66:e7:5f: a2:dc:fa:59:78:db:69:d3:7f:8d:d1:34:1a:17:0d:31:c7:ca: 30:2f:e2:23:5c:7d:0d:5e:a5:e1:59:0a:46:51:74:3f:d0:9b: ce:24:8e:08:e8:58:90:8f:61:5e:e6:97:3c:3a:9a:af:df:38: ef:da:5f:ff:4a:c0:2e:01:b6:47:53:15:3c:7f:9d:fc:32:8a: 13:07:53:b7:67:94:a5:03:a1:d7:c5:4a:11:34:ea:7b:17:fc: 63:aa:e1:86:f4:17:1a:d5:6b:c8:00:29:53:41:b5:26:6d:37: b0:d0:46:dd:9e:d3:a0:de:5b:c3:bf:94:7d:33:fc:7c:e4:4a: 05:43:d5:09:00:b6:e3:96:a8:75:a8:ec:2e:a9:40:66:e2:a0: 39:d8:39:19:b4:e5:c1:07:87:dd:df:bb:55:41:11:13:ea:52: 5e:48:79:73:a9:ff:46:cf:cf:01:e8:15:83:c1:e8:46:00:87: 07:ef:14:be:4b:c7:30:94:45:dd:22:f8:7e:75:a9:0c:63:ce: be:b2:19:47:18:6e:c2:38:7c:b0:2a:44:bb:4d:ed:cb:7b:4c: 73:06:60:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M4mGu5oBb5k1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YmQ4ZDk5YzItNzEyMy00NWZlLWE1ZTUtMGE0ODFhYjllNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rIUOuPG+VL+mWrV3l3Br91Byr+P+jsIHoeB VdpwXjSCJkxQUt/w89pQNI/XLybSN765vmFF09a41ssEoQOrlHewJwI2Kz1KPB0f +tHFpjhHxDrMnT6sajKZgr5JaCfxMOWoM2uqtzdeADoxl+pBoaIAWzIYCdjowvuZ T4oQoSFtzFb72rH1dKe3Y67k8s0hXbjKDk/58PFUkgySJ8vUUZ7EbayNhuLjr5nZ ZBP95co2MRFwDisI+cDfo+SkZYRHd9P2dz/MdBoedidAwIT7481gs4T1GPNefeeJ bhC9uc6O1b+69ECqWXSM5c0n2Z8pj8Kx12cQT3Fy0tycZtomCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLknh9NdlVXF2CL+yMB3lI2Ey90MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJiNjg5ZTAtZTZjNi0z NDBhLTg3ZWMtNjgxZTYxMjBmNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSpRn9jenY47tN6iJj7olxefI/KjYFfv4xu3eXNqq+RCGbnX6Lc+ll4 22nTf43RNBoXDTHHyjAv4iNcfQ1epeFZCkZRdD/Qm84kjgjoWJCPYV7mlzw6mq/f OO/aX/9KwC4BtkdTFTx/nfwyihMHU7dnlKUDodfFShE06nsX/GOq4Yb0FxrVa8gA KVNBtSZtN7DQRt2e06DeW8O/lH0z/HzkSgVD1QkAtuOWqHWo7C6pQGbioDnYORm0 5cEHh93fu1VBERPqUl5IeXOp/0bPzwHoFYPB6EYAhwfvFL5LxzCURd0i+H51qQxj zr6yGUcYbsI4fLAqRLtN7ct7THMGYHo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:28 2025 by rpki-client