$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa File: 5ca52584-7b11-32cc-94d7-eac837c5a2af.roa (raw, json) Hash identifier: i+6KgwY7DRobEgSN9gGjI9i38vaGM51HZiROA+d7oVo= Subject key identifier: F3:26:60:4E:C5:A8:D3:09:E9:FF:CF:DD:55:88:27:F0:58:9E:72:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD3BEB392C9192065F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396604 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:3b:eb:39:2c:91:92:06:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=620bcaa4-22ae-44a7-84d6-39bfdfc0e743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:a3:50:68:c3:61:6f:0c:81:24:a6:77:9f: f5:c6:aa:c5:64:c5:2b:45:c0:ee:be:e8:4b:f4:e9: cb:f5:ae:6b:b4:29:83:db:69:ab:87:29:0f:c5:12: 67:21:bf:4a:cb:a3:72:97:8c:2f:80:7d:68:7f:80: fc:72:0a:e5:16:85:1e:0e:01:d5:45:ca:dc:42:22: 63:af:de:0e:66:01:71:87:8e:c3:4b:e1:80:09:70: c1:39:70:13:bd:42:ca:fd:ba:09:80:a6:e0:c2:ad: 17:c0:49:13:a7:03:92:6e:47:5c:ba:8e:6b:cf:5f: f8:8c:cb:47:3c:fb:af:80:86:10:38:c7:f2:28:cb: e9:0b:01:d0:7d:9e:39:27:b7:e4:b7:72:82:e1:a9: 0d:b0:ec:59:97:e1:37:0b:c2:54:bd:5b:82:8f:30: 23:ce:41:de:55:11:63:ec:f4:23:08:b1:67:10:f8: ea:fe:51:83:eb:84:79:29:63:c8:5a:81:6e:26:d4: b8:6c:f0:e8:f2:dd:99:aa:00:80:9a:0b:90:5c:bc: e1:0b:f4:7d:3b:bb:c8:c4:2e:af:35:d0:ac:39:ac: 77:fe:db:1b:40:77:a3:0d:73:5f:1d:c0:83:b0:b8: 15:a0:01:91:8c:89:e6:62:bd:ea:22:6f:53:ad:96: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:26:60:4E:C5:A8:D3:09:E9:FF:CF:DD:55:88:27:F0:58:9E:72:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:66:30:85:61:8e:62:3b:44:b3:8e:19:e0:bc:f7:d6:64:ce: f3:8b:a3:87:d9:8c:7c:0a:9e:00:1d:81:6f:e6:c0:74:61:63: 28:8c:9c:d3:c4:2b:9d:a9:b4:4d:29:2d:94:c4:46:14:1e:30: 56:41:41:1d:8d:43:d8:0e:25:97:1d:ff:91:f7:fa:6e:2c:3e: 51:8c:14:57:ae:7b:ab:2c:58:d8:df:9b:f9:e6:ee:76:d9:63: fb:bb:7f:c2:ae:dd:3f:5c:9c:bf:8d:0c:96:b2:83:c9:c4:bb: 4b:f1:c2:64:e2:a0:dc:c3:a3:ca:58:c4:a8:95:ef:70:59:e3: a1:37:52:b3:d3:54:1d:5e:3e:6a:f1:c4:13:18:54:4f:df:f3: c1:ab:a8:87:6e:64:d5:df:1d:31:1c:72:43:ab:a7:6f:34:b2: 4d:8d:5d:11:29:f0:21:ef:5c:cf:45:61:4a:72:d3:71:cf:2b: 4b:ef:58:2f:3e:ae:53:e4:a3:84:01:4e:51:c4:d1:8d:e4:07: a9:19:a1:9f:f0:a8:f4:4e:80:91:3c:c8:a3:55:7c:39:5c:af: 00:f8:51:bb:37:1f:7d:cc:01:0c:5e:5a:03:91:7b:8b:71:bb: 6a:07:b1:e9:13:11:f1:b5:21:ab:13:0a:be:d3:c9:d1:20:ba: 1a:3d:5f:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M076zkskZIGX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NjIwYmNhYTQtMjJhZS00NGE3LTg0ZDYtMzliZmRmYzBlNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4WjUGjDYW8MgSSmd5/1xqrFZMUrRcDuvuhL 9OnL9a5rtCmD22mrhykPxRJnIb9Ky6Nyl4wvgH1of4D8cgrlFoUeDgHVRcrcQiJj r94OZgFxh47DS+GACXDBOXATvULK/boJgKbgwq0XwEkTpwOSbkdcuo5rz1/4jMtH PPuvgIYQOMfyKMvpCwHQfZ45J7fkt3KC4akNsOxZl+E3C8JUvVuCjzAjzkHeVRFj 7PQjCLFnEPjq/lGD64R5KWPIWoFuJtS4bPDo8t2ZqgCAmguQXLzhC/R9O7vIxC6v NdCsOax3/tsbQHejDXNfHcCDsLgVoAGRjInmYr3qIm9TrZa8jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMmYE7FqNMJ6f/P3VWIJ/BYnnIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWNhNTI1ODQtN2IxMS0z MmNjLTk0ZDctZWFjODM3YzVhMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBmMIVhjmI7RLOOGeC899ZkzvOLo4fZjHwKngAdgW/mwHRhYyiMnNPE K52ptE0pLZTERhQeMFZBQR2NQ9gOJZcd/5H3+m4sPlGMFFeue6ssWNjfm/nm7nbZ Y/u7f8Ku3T9cnL+NDJayg8nEu0vxwmTioNzDo8pYxKiV73BZ46E3UrPTVB1ePmrx xBMYVE/f88GrqIduZNXfHTEcckOrp280sk2NXREp8CHvXM9FYUpy03HPK0vvWC8+ rlPko4QBTlHE0Y3kB6kZoZ/wqPROgJE8yKNVfDlcrwD4Ubs3H33MAQxeWgORe4tx u2oHsekTEfG1IasTCr7TydEguho9X8I= -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:30 2025 by rpki-client