$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa File: 5274d554-e4b1-3b34-8cfa-acf399066c9c.roa (raw, json) Hash identifier: ybZ9D8OVzNTnysopUZvQL9xiBoBVvDaYOb2UgUIZYu4= Subject key identifier: F0:F0:44:36:2C:11:E8:F0:0A:5B:6F:C7:FD:97:77:6B:C9:DF:56:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0C28A411F43B806C880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 19836 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:c2:8a:41:1f:43:b8:06:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=9839e216-32a3-4fe2-8c24-e8caada788d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:28:57:1c:ae:1a:db:bb:3a:e9:b1:ff:58: 42:3a:f4:49:c2:32:3a:a8:bb:3d:b8:6f:bd:08:5e: 73:01:44:98:ea:3f:ed:56:78:9e:df:ba:b3:8a:45: c2:f1:40:df:5c:a1:53:41:6b:f5:24:5e:43:91:b7: be:fb:d7:0d:ae:d0:11:64:2b:d0:af:a5:d6:3d:a8: 13:69:e9:a6:75:f5:bb:cb:55:2c:60:b7:ec:4c:87: cc:49:1c:30:51:fe:90:c0:75:6b:7a:6e:9d:e8:2a: 98:ea:4c:f0:ec:56:c1:bc:88:8d:b5:78:f4:58:f1: 61:27:6d:f0:e7:18:ce:78:ce:68:2d:df:90:02:75: 60:90:6e:72:b7:14:4f:69:13:e7:4c:b7:3f:ce:aa: b2:27:76:58:d6:08:f0:94:68:c6:a9:42:3b:bf:a0: 90:24:de:80:16:37:ab:8c:70:a9:f7:a1:8a:7f:d4: e8:2e:cc:be:71:6c:76:75:32:36:de:fd:3c:26:c2: dd:38:62:e5:ff:26:3d:4c:3f:b4:78:9f:6e:25:47: 0b:b6:b0:db:40:66:ba:6f:60:35:e6:f8:ca:7f:2e: 18:75:bd:f5:4c:7b:86:03:fd:f2:11:64:8a:60:b3: 85:64:df:81:ea:fd:bf:2c:b2:24:19:fe:0c:a7:63: 74:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:44:36:2C:11:E8:F0:0A:5B:6F:C7:FD:97:77:6B:C9:DF:56:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ba:c4:0e:27:ab:b4:c3:1d:5b:51:35:aa:8e:ad:8a:01:c1: 16:1f:b0:34:fb:95:7d:90:0e:68:85:b7:71:11:8c:fb:6c:75: 6f:de:6e:00:d9:f6:ac:e6:76:a9:21:36:a9:a2:61:db:14:43: ea:e8:29:bb:d9:c9:3b:3f:29:1e:27:6c:19:a2:c1:e6:59:23: 85:6d:fa:4f:88:29:e3:cb:b0:bb:37:6d:32:f2:0a:51:cf:61: 6a:60:6b:3c:18:75:95:84:b1:9d:16:3f:f7:44:e5:57:f3:49: 86:c2:82:d7:d7:4a:d2:57:b1:44:aa:03:54:1c:d7:fc:28:63: 68:e2:57:e3:04:4a:43:7b:44:66:5b:da:48:7c:34:a7:eb:93: 6a:aa:2a:ad:31:d8:4b:c9:56:0d:8c:18:d9:e3:ed:05:6e:9c: ae:20:4d:3e:81:9c:95:6a:19:7a:11:b7:95:0d:d9:d4:59:10: 68:5f:1d:cf:15:e7:8f:38:42:53:cc:bc:6a:29:a4:50:17:0d: 44:36:48:a3:1c:18:49:0a:55:0b:4a:22:79:52:64:28:50:55: c7:c6:02:ed:aa:59:f1:95:48:54:ef:3d:c4:77:03:5c:cf:83: 65:69:f6:98:e3:79:f2:28:bc:ac:d9:b8:0f:93:c0:97:22:4e: bd:48:da:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NDCikEfQ7gGyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk OTgzOWUyMTYtMzJhMy00ZmUyLThjMjQtZThjYWFkYTc4OGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl0oVxyuGtu7Oumx/1hCOvRJwjI6qLs9uG+9 CF5zAUSY6j/tVnie37qzikXC8UDfXKFTQWv1JF5Dkbe++9cNrtARZCvQr6XWPagT aemmdfW7y1UsYLfsTIfMSRwwUf6QwHVrem6d6CqY6kzw7FbBvIiNtXj0WPFhJ23w 5xjOeM5oLd+QAnVgkG5ytxRPaRPnTLc/zqqyJ3ZY1gjwlGjGqUI7v6CQJN6AFjer jHCp96GKf9ToLsy+cWx2dTI23v08JsLdOGLl/yY9TD+0eJ9uJUcLtrDbQGa6b2A1 5vjKfy4Ydb31THuGA/3yEWSKYLOFZN+B6v2/LLIkGf4Mp2N0jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDwRDYsEejwCltvx/2Xd2vJ31YjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI3NGQ1NTQtZTRiMS0z YjM0LThjZmEtYWNmMzk5MDY2YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy6xA4nq7TDHVtRNaqOrYoBwRYfsDT7lX2QDmiFt3ERjPtsdW/ebgDZ 9qzmdqkhNqmiYdsUQ+roKbvZyTs/KR4nbBmiweZZI4Vt+k+IKePLsLs3bTLyClHP YWpgazwYdZWEsZ0WP/dE5VfzSYbCgtfXStJXsUSqA1Qc1/woY2jiV+MESkN7RGZb 2kh8NKfrk2qqKq0x2EvJVg2MGNnj7QVunK4gTT6BnJVqGXoRt5UN2dRZEGhfHc8V 5484QlPMvGoppFAXDUQ2SKMcGEkKVQtKInlSZChQVcfGAu2qWfGVSFTvPcR3A1zP g2Vp9pjjefIovKzZuA+TwJciTr1I2ic= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:14 2025 by rpki-client