$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa File: 60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa (raw, json) Hash identifier: +zF7/ny2nqNjrSmItK7Btq9tb7VjW6WIRyy1oGa3qYA= Subject key identifier: D5:7B:3B:28:40:A3:9F:85:C3:4B:5B:24:8F:56:2F:E6:C1:96:EF:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCF152F11A7F91339AC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396584 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:15:2f:11:a7:f9:13:39:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=bbccb468-a12f-43ed-a0c8-acc8951fdf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:5a:ec:e2:a9:b9:f0:ad:14:fe:8f:8b:f4: f6:4a:3a:41:5c:87:c9:7d:c6:cc:3d:a2:d8:76:04: 93:28:e8:4c:33:01:f7:c9:53:9b:af:5e:be:ea:b8: a3:b8:db:e2:b3:32:88:b6:3a:61:ce:01:d2:ae:dc: 76:d8:f5:db:88:02:1d:a1:9f:b6:d3:f6:05:60:1f: 3f:70:2c:e8:4a:6e:eb:5d:5e:9e:c7:f9:b7:d0:4d: 32:d3:79:28:ba:b4:7f:4d:5b:3a:7e:3e:9e:d5:86: 88:f1:2a:9c:68:b9:f8:ba:75:63:d9:55:1f:84:d9: ef:63:89:10:d3:b9:46:d2:4d:fd:a3:19:db:dc:9a: aa:a1:47:04:05:63:89:05:df:33:af:49:1b:64:b5: 87:e5:23:2a:5a:3f:91:95:91:7b:5a:4d:14:17:8f: 61:20:65:6b:45:6f:77:a6:ec:37:3c:3d:f1:30:1d: ca:bb:a2:0c:3f:d4:39:ea:5a:04:92:66:c8:fe:20: 56:02:5f:16:8d:a8:d7:61:e9:7f:0c:09:bd:e5:79: b5:e6:70:7e:ef:ef:af:f0:f8:da:f9:78:86:e0:9c: 8f:13:45:51:70:15:2e:cf:34:ca:66:e5:f1:09:fb: 92:1e:b2:c6:59:1f:61:e7:ae:44:a5:1b:20:58:84: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:3B:28:40:A3:9F:85:C3:4B:5B:24:8F:56:2F:E6:C1:96:EF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b2:b7:3f:2f:b3:75:2c:97:4b:3f:b9:fe:01:94:63:67:e7: c7:1d:65:83:44:08:2b:27:45:48:3f:0a:91:07:02:02:b1:b3: 43:56:45:7f:5c:1a:98:f8:1e:2a:03:61:16:65:e4:9d:f0:f0: cd:d8:15:2f:52:88:d4:6d:bb:c1:97:79:d0:1f:09:cd:aa:2e: 56:16:b3:72:d2:f7:18:e7:fa:bb:ae:ca:62:6e:81:06:cb:d3: b8:df:7c:e1:5b:ed:b0:f8:5e:b7:aa:98:60:1a:91:4a:31:50: 00:23:d1:56:f3:23:89:28:51:a0:1c:5d:09:78:74:ac:48:74: e7:6b:bb:35:7f:18:a2:e6:5a:8b:a7:f7:9f:96:4d:fa:6f:75: 3f:85:12:3a:ea:94:63:c3:3c:b5:cf:ba:0b:0e:a5:e6:86:ce: 84:61:5a:03:57:73:17:29:e7:ba:47:53:30:a8:69:fe:5d:b4: c1:22:ea:4f:0a:b5:58:01:9d:81:09:29:a3:47:9f:ea:65:66: 26:f4:cc:2f:5c:70:76:85:b6:14:5c:5f:d4:3d:73:f7:ad:8f: d6:c4:74:29:77:15:85:78:55:d7:05:97:f9:3b:1e:6a:4a:6d: 05:91:e8:8e:8a:d2:20:68:5b:d2:10:08:32:bd:5b:55:71:23: 6a:51:b5:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M8VLxGn+RM5rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YmJjY2I0NjgtYTEyZi00M2VkLWEwYzgtYWNjODk1MWZkZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Na7OKpufCtFP6Pi/T2SjpBXIfJfcbMPaLY dgSTKOhMMwH3yVObr16+6rijuNviszKItjphzgHSrtx22PXbiAIdoZ+20/YFYB8/ cCzoSm7rXV6ex/m30E0y03kourR/TVs6fj6e1YaI8SqcaLn4unVj2VUfhNnvY4kQ 07lG0k39oxnb3JqqoUcEBWOJBd8zr0kbZLWH5SMqWj+RlZF7Wk0UF49hIGVrRW93 puw3PD3xMB3Ku6IMP9Q56loEkmbI/iBWAl8WjajXYel/DAm95Xm15nB+7++v8Pja +XiG4JyPE0VRcBUuzzTKZuXxCfuSHrLGWR9h565EpRsgWISnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV7OyhAo5+Fw0tbJI9WL+bBlu8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBlYTliNDYtZjRlMC0z ZjhjLWE3MzAtZTVhOWQyNzlhNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6ytz8vs3Usl0s/uf4BlGNn58cdZYNECCsnRUg/CpEHAgKxs0NWRX9c Gpj4HioDYRZl5J3w8M3YFS9SiNRtu8GXedAfCc2qLlYWs3LS9xjn+ruuymJugQbL 07jffOFb7bD4XreqmGAakUoxUAAj0VbzI4koUaAcXQl4dKxIdOdruzV/GKLmWoun 95+WTfpvdT+FEjrqlGPDPLXPugsOpeaGzoRhWgNXcxcp57pHUzCoaf5dtMEi6k8K tVgBnYEJKaNHn+plZib0zC9ccHaFthRcX9Q9c/etj9bEdCl3FYV4VdcFl/k7HmpK bQWR6I6K0iBoW9IQCDK9W1VxI2pRteA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:04 2025 by rpki-client