$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa File: 672d8fcd-2150-3c7e-8677-093f7d936027.roa (raw, json) Hash identifier: yt+h6pO3DuHgK3nj1GupICxvfCmLrpvcfm0JfJxPGUk= Subject key identifier: EE:24:3F:CB:56:C9:58:7F:E4:74:98:65:EE:43:19:49:6A:D2:43:D6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCA331FA3B53D27F08500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 36627 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ca:33:1f:a3:b5:3d:27:f0:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=dc504db8-7e5e-4da0-b21c-20eb500427d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:08:a4:2e:3f:9d:d5:61:b4:e1:ff:4f:f1: 48:f8:5b:0c:cd:aa:84:f3:3c:26:d8:9c:d2:98:14: d4:d1:ba:5f:a9:1c:b9:0e:18:f9:e3:3e:45:0b:e3: 62:24:90:c9:cc:83:4f:b4:55:eb:6c:c5:0d:78:8a: 7a:b8:33:18:1c:fe:5c:8e:42:33:83:69:9b:6a:2c: 35:ed:6d:b5:a5:12:c2:8e:c7:4d:66:98:8a:b6:ed: b7:22:92:01:0c:d4:97:73:64:74:8c:4f:4e:b9:e2: 6f:7e:79:e9:b8:ae:89:4f:0d:f3:7f:4a:9e:85:01: 2a:55:c1:75:b0:a7:e4:a8:62:42:06:1c:da:22:e9: 5e:c1:84:73:89:67:46:e1:de:c4:f0:11:65:fe:57: a3:d1:25:40:c8:35:f1:c5:54:22:8b:e7:73:80:71: 88:e8:fb:38:c9:a7:1d:c8:1b:54:75:06:20:db:9d: 93:1c:e6:57:53:a5:9c:71:6f:04:d1:35:09:76:c2: 3e:cb:7d:84:ba:c7:40:88:90:ce:fc:04:ea:71:f6: a0:b4:f3:7d:93:ec:7f:a4:0d:8e:e8:55:12:9e:ee: da:7f:2a:a3:d0:46:7d:6e:11:9d:bd:df:09:e7:2f: 76:b1:78:d3:46:3b:51:80:ad:38:e7:ef:33:b5:78: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:3F:CB:56:C9:58:7F:E4:74:98:65:EE:43:19:49:6A:D2:43:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:be:2b:65:de:68:79:a1:c2:e6:13:62:33:5c:eb:21:da:ea: 07:2a:b8:4b:87:3d:45:31:f4:a1:86:ab:d2:1c:bc:66:86:c9: 7e:f3:88:ff:0e:13:c2:b3:ca:b3:98:1a:08:be:4a:b1:4a:cf: ab:5f:a4:db:ec:f8:36:48:67:00:3f:8a:f8:b5:35:70:dd:8a: 8e:05:46:f9:b9:45:04:9b:00:67:16:0b:30:35:b4:aa:a8:97: 43:f0:93:7d:51:1c:19:22:39:4a:70:83:e9:35:a4:cf:67:13: 0d:59:48:92:de:5c:de:0c:cf:b9:8d:05:55:a5:22:50:c6:dc: bd:49:b0:2a:c0:93:9b:7c:d4:46:c0:2b:88:dc:af:ec:4f:c0: b4:d6:a7:ed:e1:9e:e9:a0:31:c4:04:28:72:3b:b9:fe:45:ce: 58:49:7b:34:45:42:92:0c:6a:41:f2:36:0b:42:cf:f2:51:6a: fe:22:99:6f:20:b6:a4:9c:fc:58:6d:08:6f:e2:52:f7:3f:1b: f4:ed:96:d3:d7:07:b0:c3:12:c0:9d:28:fb:fb:ab:e4:26:db: 97:14:37:66:68:1e:32:a1:c1:03:17:b5:ec:26:5a:a3:ad:c2: 8d:8b:78:c8:13:65:bc:1f:fa:a5:41:7c:e9:85:27:d0:f9:a9: 3e:c9:5b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MozH6O1PSfwhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk ZGM1MDRkYjgtN2U1ZS00ZGEwLWIyMWMtMjBlYjUwMDQyN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i4IpC4/ndVhtOH/T/FI+FsMzaqE8zwm2JzS mBTU0bpfqRy5Dhj54z5FC+NiJJDJzINPtFXrbMUNeIp6uDMYHP5cjkIzg2mbaiw1 7W21pRLCjsdNZpiKtu23IpIBDNSXc2R0jE9OueJvfnnpuK6JTw3zf0qehQEqVcF1 sKfkqGJCBhzaIulewYRziWdG4d7E8BFl/lej0SVAyDXxxVQii+dzgHGI6Ps4yacd yBtUdQYg252THOZXU6WccW8E0TUJdsI+y32EusdAiJDO/ATqcfagtPN9k+x/pA2O 6FUSnu7afyqj0EZ9bhGdvd8J5y92sXjTRjtRgK045+8ztXi6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4kP8tWyVh/5HSYZe5DGUlq0kPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyZDhmY2QtMjE1MC0z YzdlLTg2NzctMDkzZjdkOTM2MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi+K2XeaHmhwuYTYjNc6yHa6gcquEuHPUUx9KGGq9IcvGaGyX7ziP8O E8KzyrOYGgi+SrFKz6tfpNvs+DZIZwA/ivi1NXDdio4FRvm5RQSbAGcWCzA1tKqo l0Pwk31RHBkiOUpwg+k1pM9nEw1ZSJLeXN4Mz7mNBVWlIlDG3L1JsCrAk5t81EbA K4jcr+xPwLTWp+3hnumgMcQEKHI7uf5FzlhJezRFQpIMakHyNgtCz/JRav4imW8g tqSc/FhtCG/iUvc/G/TtltPXB7DDEsCdKPv7q+Qm25cUN2ZoHjKhwQMXtewmWqOt wo2LeMgTZbwf+qVBfOmFJ9D5qT7JW08= -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:40 2025 by rpki-client