$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa File: 3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa (raw, json) Hash identifier: 3Gca1taxAEXtgD3tgffR+U2oid2HyJaxn5dhM3kyl7U= Subject key identifier: B1:A9:AD:37:F7:F3:E1:21:EC:3D:00:77:45:69:B9:7D:CF:55:B0:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0A39D03A2D20921B980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 40717 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:a3:9d:03:a2:d2:09:21:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=c48e1100-c53f-4b5c-aa2d-2db3aed40ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:9a:c9:de:17:44:1c:45:1e:ac:92:22:ec: 3f:37:20:34:17:26:fb:76:fd:ea:b5:d6:39:09:65: e7:12:f5:2c:53:39:41:a9:a2:ac:02:f7:9a:27:a9: 0c:69:e8:a4:41:50:d0:93:0d:94:46:db:0c:61:a9: 91:fc:ad:28:b6:ea:0d:74:a1:ec:6f:b4:66:4b:41: e0:d0:8c:3d:f8:97:6d:a3:0b:28:cc:9e:00:65:29: cd:dd:65:38:32:ac:44:0f:c3:b5:ce:e5:ea:06:4b: d8:95:a9:ad:82:d2:cb:cf:7d:22:cd:8c:02:67:b5: 99:b8:91:50:b0:67:59:ff:dc:28:64:40:9e:a9:e8: be:4f:10:85:a5:5b:d0:fe:59:75:9f:bc:2a:0a:fb: c2:69:a8:e9:34:1b:82:97:a4:2e:48:75:cf:98:af: d6:73:3c:48:ae:ff:a4:60:fa:d3:ed:a9:8d:57:dd: b3:8f:df:6a:ed:d6:72:4e:3b:33:21:db:1e:e1:66: ee:9c:a1:9d:96:1e:da:01:2d:a8:d3:e4:8a:c6:35: 67:c4:e0:67:ed:28:61:9d:b8:35:c7:f5:f5:7c:d6: ff:00:12:5d:0d:34:be:73:38:e9:f2:61:33:e5:13: 3a:a4:9b:35:45:32:e8:63:85:48:3a:c8:e0:de:b9: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A9:AD:37:F7:F3:E1:21:EC:3D:00:77:45:69:B9:7D:CF:55:B0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c7:39:24:d9:fb:f4:84:46:52:2e:9b:1d:de:37:7c:b4:75: 73:43:a9:e3:49:f7:c2:96:65:6f:54:37:c0:1d:22:d1:72:bc: b7:fb:16:c2:07:1f:a1:64:3a:9d:50:3f:55:f0:02:d1:08:00: c4:c9:d7:3d:4a:64:70:bd:ce:ce:96:92:d1:e5:63:40:78:7b: bc:8b:d6:a3:ee:d5:d1:22:7a:a5:5e:1c:78:a2:f5:0c:1d:9e: 5e:da:66:bf:15:bf:ee:56:32:cf:5c:06:a2:92:da:b6:66:e3: 98:38:2c:e7:82:ca:df:88:10:3d:ce:74:c8:80:9c:05:ce:d3: 5f:78:e0:6d:a8:b9:a6:2c:7c:54:83:97:c8:94:c4:52:db:f0: 81:3d:8f:bb:91:13:c8:11:50:c5:bf:be:6e:47:14:65:52:c2: 92:ed:15:34:6a:40:05:6b:75:b5:26:ca:ee:9b:37:35:36:d1: db:53:b0:91:dd:4e:8d:bf:22:b2:97:7b:90:38:21:87:37:94: 47:a6:8a:73:0f:cf:38:b6:50:61:16:99:f1:c4:37:d5:4f:af: 07:91:b1:a0:cd:1a:59:2a:c4:96:7c:57:b8:3a:1a:7e:f7:fb: fb:62:5e:a5:a4:0d:d3:3e:99:6f:bb:4c:17:1e:74:38:48:5e: ea:81:5d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NCjnQOi0gkhuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk YzQ4ZTExMDAtYzUzZi00YjVjLWFhMmQtMmRiM2FlZDQwZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCiayd4XRBxFHqySIuw/NyA0Fyb7dv3qtdY5 CWXnEvUsUzlBqaKsAveaJ6kMaeikQVDQkw2URtsMYamR/K0otuoNdKHsb7RmS0Hg 0Iw9+JdtowsozJ4AZSnN3WU4MqxED8O1zuXqBkvYlamtgtLLz30izYwCZ7WZuJFQ sGdZ/9woZECeqei+TxCFpVvQ/ll1n7wqCvvCaajpNBuCl6QuSHXPmK/WczxIrv+k YPrT7amNV92zj99q7dZyTjszIdse4WbunKGdlh7aAS2o0+SKxjVnxOBn7Shhnbg1 x/X1fNb/ABJdDTS+czjp8mEz5RM6pJs1RTLoY4VIOsjg3rnSxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGprTf38+Eh7D0Ad0VpuX3PVbBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EwMGNhZDgtMDI2Ny0z OWI0LWFmNmQtZmIzY2QxYTk0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLHOSTZ+/SERlIumx3eN3y0dXNDqeNJ98KWZW9UN8AdItFyvLf7FsIH H6FkOp1QP1XwAtEIAMTJ1z1KZHC9zs6WktHlY0B4e7yL1qPu1dEieqVeHHii9Qwd nl7aZr8Vv+5WMs9cBqKS2rZm45g4LOeCyt+IED3OdMiAnAXO01944G2ouaYsfFSD l8iUxFLb8IE9j7uRE8gRUMW/vm5HFGVSwpLtFTRqQAVrdbUmyu6bNzU20dtTsJHd To2/IrKXe5A4IYc3lEeminMPzzi2UGEWmfHEN9VPrweRsaDNGlkqxJZ8V7g6Gn73 +/tiXqWkDdM+mW+7TBcedDhIXuqBXY0= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:57 2025 by rpki-client