$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa File: 3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa (raw, json) Hash identifier: thIP7h9mU1OxHXqZPYEi4Tl+qIOag8GPnrI2x2S4dPw= Subject key identifier: C8:17:F2:57:54:FB:E1:33:B6:AA:63:D6:28:CE:D6:3C:54:B6:38:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCBE898F83DFADC33F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396600 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:e8:98:f8:3d:fa:dc:33:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=08def4a3-c37b-4587-8a4b-06ffd4b8ca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:24:f7:87:47:be:98:c2:c4:7e:6d:2b:78:dc: 2b:2d:c7:46:52:c1:42:43:65:b7:d7:d1:9e:98:9e: b6:7b:08:11:7f:89:01:da:61:7e:cb:22:9b:94:db: f6:98:dc:9f:30:67:85:5e:a7:e5:06:3a:f6:65:d6: 15:9e:c0:8e:49:b8:d2:13:ac:25:80:ba:73:3e:7f: 5d:d5:6a:8a:12:67:d8:29:b6:65:4e:0d:60:2e:ce: e7:28:39:0c:d2:86:2d:80:19:1f:9c:c8:be:48:e2: 8b:3f:4e:3d:4d:08:22:c9:e1:3f:98:8b:56:2f:a6: 0e:0d:cb:40:e2:65:53:bc:2a:c1:dc:b0:d3:4f:ca: 57:a6:69:27:10:dc:b5:b0:b1:66:9d:8c:f4:b1:bf: b2:22:2b:8e:b7:9f:50:f2:55:b2:37:2e:36:5d:3a: 21:7c:84:fa:af:be:cb:80:88:9e:75:cf:e1:a3:11: f3:71:91:5a:71:39:56:61:fe:b1:77:51:9b:d0:05: 61:1a:c9:95:e1:05:1d:e6:b1:54:74:3a:1b:72:3a: b9:c2:32:d2:64:3d:e2:f2:2f:ef:51:2a:bd:91:c5: 5b:f5:3f:3f:77:5a:ad:f8:ad:5e:04:cc:9c:e9:4b: 4f:3f:4c:bd:fd:c1:f8:c7:81:7b:10:c9:85:e3:a2: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:17:F2:57:54:FB:E1:33:B6:AA:63:D6:28:CE:D6:3C:54:B6:38:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d5:b7:a3:0c:8b:4f:7d:0d:d0:61:f9:43:ec:f5:5b:e3:b6: 50:68:2d:78:ba:99:90:cb:4a:f9:bc:a6:53:63:7c:08:fe:7f: 3d:09:90:35:38:03:e1:03:4f:0a:e3:75:49:a6:03:f2:e6:42: 27:70:41:94:a2:3f:7c:29:1c:85:be:84:10:68:f1:39:c6:4f: f3:f0:c3:35:ae:d7:e3:87:b7:41:6f:58:d5:fd:c0:71:fc:31: 68:61:c7:a1:15:61:d3:c6:1e:4b:8a:4a:11:55:3f:7c:92:27: 73:25:a9:5b:60:5d:d1:46:83:4e:b4:45:13:cd:24:c1:f6:77: 4d:e4:81:2f:e2:b0:4b:01:40:97:a1:d3:25:8e:84:7f:22:fc: 4f:61:03:18:b0:a1:8c:00:aa:af:a5:de:7b:a2:4f:1f:49:e2: 4f:18:9a:6e:07:eb:cd:3d:cc:6e:4f:85:c8:52:e4:60:58:3c: f6:8b:2e:7c:1a:af:f4:54:01:3b:51:02:cd:e0:27:31:48:fb: 71:31:b1:38:2e:11:da:da:b9:70:fd:1b:15:93:fc:8d:ee:fa: de:e5:5d:08:59:83:82:92:66:69:a5:49:fd:f2:87:15:5d:3c: 92:ab:39:47:1e:5f:45:fe:d6:be:6b:99:16:cf:70:71:d3:31: f0:4f:21:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MvomPg9+twz9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk MDhkZWY0YTMtYzM3Yi00NTg3LThhNGItMDZmZmQ0YjhjYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ST3h0e+mMLEfm0reNwrLcdGUsFCQ2W319Ge mJ62ewgRf4kB2mF+yyKblNv2mNyfMGeFXqflBjr2ZdYVnsCOSbjSE6wlgLpzPn9d 1WqKEmfYKbZlTg1gLs7nKDkM0oYtgBkfnMi+SOKLP049TQgiyeE/mItWL6YODctA 4mVTvCrB3LDTT8pXpmknENy1sLFmnYz0sb+yIiuOt59Q8lWyNy42XTohfIT6r77L gIiedc/hoxHzcZFacTlWYf6xd1Gb0AVhGsmV4QUd5rFUdDobcjq5wjLSZD3i8i/v USq9kcVb9T8/d1qt+K1eBMyc6UtPP0y9/cH4x4F7EMmF46L7ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgX8ldU++Eztqpj1ijO1jxUtjisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U1ZDc5ZjUtZTkyMi0z YjlhLTlkZmYtYmZlNTliYTAyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7Vt6MMi099DdBh+UPs9VvjtlBoLXi6mZDLSvm8plNjfAj+fz0JkDU4 A+EDTwrjdUmmA/LmQidwQZSiP3wpHIW+hBBo8TnGT/PwwzWu1+OHt0FvWNX9wHH8 MWhhx6EVYdPGHkuKShFVP3ySJ3MlqVtgXdFGg060RRPNJMH2d03kgS/isEsBQJeh 0yWOhH8i/E9hAxiwoYwAqq+l3nuiTx9J4k8Ymm4H6809zG5PhchS5GBYPPaLLnwa r/RUATtRAs3gJzFI+3ExsTguEdrauXD9GxWT/I3u+t7lXQhZg4KSZmmlSf3yhxVd PJKrOUceX0X+1r5rmRbPcHHTMfBPIbE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:41 2025 by rpki-client