$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa File: 3b4db415-f68a-3719-bef4-43680aafc957.roa (raw, json) Hash identifier: 5jD1/f7IFa0hnc9QsEDncOUTc9un7SKbXNG96xAeOJg= Subject key identifier: 1A:B3:D7:DF:02:F3:CE:2D:CD:FF:6A:3D:FC:20:5F:24:FA:1E:D2:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC1C0D0FAE9E6953BEF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396580 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:1c:0d:0f:ae:9e:69:53:be:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=29fc9d13-cf4d-4f30-a547-7d9dd1d4851b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:17:9d:a4:36:5f:68:77:03:93:d6:51:4d:2b: 4a:2d:3c:ab:11:18:af:3e:b7:b0:db:ca:64:48:27: 93:3e:6f:c8:2a:6f:37:04:a5:29:66:ac:2b:54:5b: e0:af:1b:2b:81:ff:50:7c:34:3b:20:a8:3c:6a:4a: 89:e6:9b:37:51:d1:34:a1:cc:e5:ad:9c:a3:fe:28: 7b:d5:9b:bd:6e:a4:0e:cb:a9:69:3b:14:94:8d:bd: 42:b6:1b:cc:65:2c:f0:a0:27:27:97:85:ab:7c:39: c1:a2:8c:7a:07:d5:1b:29:bf:a0:34:40:a5:a4:66: 45:50:fa:7f:69:85:08:86:69:52:fe:4e:9d:09:0e: 8a:a5:bd:33:e1:fb:29:e7:66:4a:a8:fb:e5:16:54: d4:8c:4f:f7:67:bd:28:2d:1c:3e:02:a0:d6:16:93: c5:81:f3:24:cc:00:ac:3f:96:9a:68:0b:11:73:9e: 59:14:32:9f:8e:4f:13:40:81:2a:39:a3:4d:7b:a7: 47:10:c6:23:27:bf:02:22:10:95:1d:b5:1b:16:e6: 2f:6c:d3:a1:c8:69:e7:f7:81:68:d1:18:ce:c8:6a: 72:44:e7:f0:32:45:4a:e1:ea:a2:15:18:73:ea:34: 38:82:df:4c:f1:c0:8f:de:36:ee:56:26:1e:a2:17: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B3:D7:DF:02:F3:CE:2D:CD:FF:6A:3D:FC:20:5F:24:FA:1E:D2:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:32:64:02:3d:40:82:a6:f0:8c:1c:91:58:99:2d:a9:3e:8f: 17:8c:f9:ec:b8:4a:af:1b:c6:d2:5d:44:09:5d:1a:de:aa:4c: 3f:78:89:d9:71:ff:0d:3c:80:a2:5c:eb:f5:1e:01:df:00:1e: 4e:3b:1b:a3:7e:1f:c3:95:70:9f:93:95:36:a4:f6:b4:c5:ba: bb:09:9c:fc:0a:0f:46:14:a2:3f:a9:36:24:ef:9f:11:74:c3: 66:00:ad:2f:a5:18:de:51:82:e0:29:ea:51:42:fd:58:60:73: a1:8a:f6:01:4e:1e:eb:33:d5:62:6a:2a:36:93:5c:5d:c6:1a: 14:70:07:7e:87:5b:34:2a:62:2f:e6:47:9a:42:24:db:9c:4e: 24:79:9f:c8:0e:67:8a:22:f9:97:f5:99:55:38:04:6a:ea:45: dc:f9:c8:8f:d8:ad:eb:0e:3a:b8:d6:a8:66:bd:0b:01:a8:1b: 3a:8e:f5:ce:6a:0c:b0:2f:f3:f7:ac:e9:03:7c:ac:42:54:54: 22:5b:ad:4f:c2:46:b0:bb:a6:78:ea:cb:bd:2f:44:8f:c7:ab: 78:bf:29:f7:0b:d8:17:a2:86:fb:17:31:d6:ac:da:60:e9:51: 78:90:b5:63:7f:52:64:4f:b8:5c:cb:66:03:39:4b:a7:6d:93: 94:fd:c9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MwcDQ+unmlTvvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk MjlmYzlkMTMtY2Y0ZC00ZjMwLWE1NDctN2Q5ZGQxZDQ4NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhedpDZfaHcDk9ZRTStKLTyrERivPrew28pk SCeTPm/IKm83BKUpZqwrVFvgrxsrgf9QfDQ7IKg8akqJ5ps3UdE0oczlrZyj/ih7 1Zu9bqQOy6lpOxSUjb1CthvMZSzwoCcnl4WrfDnBoox6B9UbKb+gNEClpGZFUPp/ aYUIhmlS/k6dCQ6Kpb0z4fsp52ZKqPvlFlTUjE/3Z70oLRw+AqDWFpPFgfMkzACs P5aaaAsRc55ZFDKfjk8TQIEqOaNNe6dHEMYjJ78CIhCVHbUbFuYvbNOhyGnn94Fo 0RjOyGpyROfwMkVK4eqiFRhz6jQ4gt9M8cCP3jbuViYeohd6UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqz198C884tzf9qPfwgXyT6HtIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I0ZGI0MTUtZjY4YS0z NzE5LWJlZjQtNDM2ODBhYWZjOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsyZAI9QIKm8IwckViZLak+jxeM+ey4Sq8bxtJdRAldGt6qTD94idlx /w08gKJc6/UeAd8AHk47G6N+H8OVcJ+TlTak9rTFursJnPwKD0YUoj+pNiTvnxF0 w2YArS+lGN5RguAp6lFC/Vhgc6GK9gFOHusz1WJqKjaTXF3GGhRwB36HWzQqYi/m R5pCJNucTiR5n8gOZ4oi+Zf1mVU4BGrqRdz5yI/YresOOrjWqGa9CwGoGzqO9c5q DLAv8/es6QN8rEJUVCJbrU/CRrC7pnjqy70vRI/Hq3i/KfcL2BeihvsXMdas2mDp UXiQtWN/UmRPuFzLZgM5S6dtk5T9yQQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:21 2025 by rpki-client