$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa File: 3b069af5-8b25-354c-8d61-259a5210c9bd.roa (raw, json) Hash identifier: 4BnCwN+U6qkysYaut8ujJWxf8UqHPZGmytzMj0+5T0g= Subject key identifier: 67:0F:19:D2:12:7A:34:8E:50:D5:DD:1C:B7:82:CA:6F:40:B1:6D:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE3326938D1CDB23A580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 397199 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:33:26:93:8d:1c:db:23:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=b4f6bef6-ec53-4289-905a-01a2630353d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:71:52:75:a1:df:a6:0e:53:21:27:ef:1a: c1:7c:e4:47:25:61:54:65:64:42:0d:c7:6d:1b:7c: 36:e4:9e:5a:d2:86:c2:ff:8e:5b:64:56:4c:cb:5c: c0:0b:78:86:0a:87:79:0c:91:e7:3c:b0:6d:de:8b: 58:3d:c0:58:88:57:a3:b6:bf:05:da:26:78:0a:8d: c3:35:ae:a5:f3:50:28:4b:4f:58:63:5c:5d:23:e0: cc:03:f0:b5:39:0c:5d:6d:27:fb:69:f9:04:56:c0: 30:6d:b2:d2:d4:77:31:a1:48:6e:03:37:fd:2b:9c: e0:89:ac:fb:86:e2:85:20:1c:5a:19:f5:75:88:0b: 0f:d5:4f:d0:82:96:a2:7d:c4:ab:b4:30:61:dd:1c: 47:a7:2d:c7:b7:4e:6d:55:26:93:4b:8e:75:e8:72: b2:3b:31:97:aa:d6:9c:7b:f0:8f:15:f6:ff:8f:f2: 24:5b:fc:52:a7:e7:52:e9:5a:15:5d:d0:27:95:d8: 95:91:2a:c3:2d:cb:45:63:b9:6d:43:37:04:ec:d9: 1e:5b:2d:8e:4e:89:4f:76:bf:9d:07:03:d4:1e:18: cb:03:28:d9:40:ca:6d:ab:9e:4c:5c:b4:2a:f9:eb: 55:57:e7:13:79:0a:1a:6a:f5:81:05:b3:92:f1:1d: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0F:19:D2:12:7A:34:8E:50:D5:DD:1C:B7:82:CA:6F:40:B1:6D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d1:32:41:37:50:c8:e6:39:e7:9f:b8:9d:59:7f:f3:eb:22: 4b:70:c4:8c:67:81:56:d2:d2:f4:01:a7:c8:a0:d4:22:12:73: cd:15:1a:1e:4b:1b:c8:67:4e:d4:a1:83:0d:23:71:55:5d:eb: 8f:9f:f5:12:16:35:0d:45:e4:44:24:1d:3c:4a:27:e0:74:a9: 34:b3:e9:6d:3f:d7:21:f6:f8:e9:d0:71:f1:d4:a1:59:9a:24: 4b:a8:4f:fb:c3:bd:ed:f3:70:78:bd:ad:9a:45:23:3c:37:23: d6:22:7c:d9:7c:04:b3:63:6a:cf:14:0d:1d:30:bb:a9:43:6e: c0:37:b9:fb:7b:b0:33:86:fe:7d:da:19:e4:af:08:7a:ac:66: e8:83:cf:4c:db:d6:da:e1:27:7f:ce:20:4e:2c:63:80:44:e2: 65:fd:0a:9b:0f:8b:d5:f2:d4:70:cd:2e:56:b9:3d:bc:91:1c: 08:01:e6:32:39:f3:a7:c9:5a:08:31:7e:97:b9:9d:95:d0:ae: 19:00:48:50:7b:44:36:04:62:31:67:35:56:d6:ee:f5:b8:65: 4e:ee:fe:5e:d5:b7:23:84:f3:5e:60:d8:d4:57:c8:18:ac:8c: 0c:59:68:7d:ca:fb:5b:de:5e:2d:d2:39:2b:07:2b:62:8e:36: 71:ea:07:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M4zJpONHNsjpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YjRmNmJlZjYtZWM1My00Mjg5LTkwNWEtMDFhMjYzMDM1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMNxUnWh36YOUyEn7xrBfORHJWFUZWRCDcdt G3w25J5a0obC/45bZFZMy1zAC3iGCod5DJHnPLBt3otYPcBYiFejtr8F2iZ4Co3D Na6l81AoS09YY1xdI+DMA/C1OQxdbSf7afkEVsAwbbLS1HcxoUhuAzf9K5zgiaz7 huKFIBxaGfV1iAsP1U/QgpaifcSrtDBh3RxHpy3Ht05tVSaTS4516HKyOzGXqtac e/CPFfb/j/IkW/xSp+dS6VoVXdAnldiVkSrDLctFY7ltQzcE7NkeWy2OTolPdr+d BwPUHhjLAyjZQMptq55MXLQq+etVV+cTeQoaavWBBbOS8R0ktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcPGdISejSOUNXdHLeCym9AsW1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IwNjlhZjUtOGIyNS0z NTRjLThkNjEtMjU5YTUyMTBjOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnRMkE3UMjmOeefuJ1Zf/PrIktwxIxngVbS0vQBp8ig1CISc80VGh5L G8hnTtShgw0jcVVd64+f9RIWNQ1F5EQkHTxKJ+B0qTSz6W0/1yH2+OnQcfHUoVma JEuoT/vDve3zcHi9rZpFIzw3I9YifNl8BLNjas8UDR0wu6lDbsA3uft7sDOG/n3a GeSvCHqsZuiDz0zb1trhJ3/OIE4sY4BE4mX9CpsPi9Xy1HDNLla5PbyRHAgB5jI5 86fJWggxfpe5nZXQrhkASFB7RDYEYjFnNVbW7vW4ZU7u/l7VtyOE815g2NRXyBis jAxZaH3K+1veXi3SOSsHK2KONnHqBwc= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:44 2025 by rpki-client