$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa File: 6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa (raw, json) Hash identifier: vBEXgoGRc+3t9Roa5gXVwuVVopPNvAugA1WIvfj8Ak8= Subject key identifier: 4C:8B:1F:0D:96:AB:BB:30:E8:EF:79:CB:FB:C4:F7:F9:D3:28:41:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCECB761FC47D68908800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396540 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:cb:76:1f:c4:7d:68:90:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=b0b4d124-74e0-49a7-b542-7b55c8ad215d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:c8:ab:ca:b6:79:10:9e:d7:e1:e9:2d:0c: c8:71:6f:6b:04:87:56:a8:0b:51:b6:73:bf:e8:6a: 47:53:93:f3:e5:1c:89:b7:cc:5b:9b:22:b2:ad:00: a9:5f:e2:d1:de:89:c2:63:5f:d9:bf:5b:69:ec:6a: 4d:75:4b:e2:03:31:24:ec:5f:f7:c2:c9:4e:64:92: ed:1c:9b:b9:e3:fd:e7:8d:99:6a:65:9d:4c:83:64: 14:c9:68:67:da:85:6b:2e:fc:a7:8e:fd:d5:c4:8a: 90:0e:6a:d8:6a:a5:f0:eb:a4:74:1a:e6:89:d8:da: d5:95:4a:a8:a1:89:6e:67:83:69:44:fa:64:52:06: a1:26:a2:b4:94:ea:dd:59:26:e2:23:7a:e7:81:7c: 5c:be:9a:8b:5e:7f:fa:09:35:21:4e:ca:c4:23:a3: c3:3b:6f:1f:54:d5:8f:c6:d8:a1:6a:54:91:ec:0c: 29:c8:f6:9c:71:29:29:8d:54:e2:1b:f4:29:6e:e7: cf:54:f6:bc:e8:84:a8:41:c2:48:b5:2c:f6:7a:c5: 0c:f7:6e:d7:06:95:0f:75:07:54:e0:13:c1:9b:b8: fb:b2:29:e5:09:d5:c7:83:11:11:b0:8e:06:86:1c: fb:37:fd:3d:45:74:24:0d:b6:3a:37:4f:73:d7:fa: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8B:1F:0D:96:AB:BB:30:E8:EF:79:CB:FB:C4:F7:F9:D3:28:41:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5e:87:d3:cd:92:20:e0:86:0e:51:39:22:63:86:89:d9:cf: 32:e7:71:35:d4:4b:76:cb:69:ba:e4:92:fb:2f:05:92:f3:df: 6c:87:05:48:23:39:df:6c:c5:67:a5:37:e6:6b:01:71:bc:ec: 81:12:a6:6f:08:4a:df:f6:a7:41:27:b9:bb:ea:2c:f9:1f:c6: fd:21:80:20:e2:4d:da:02:90:9a:fd:87:02:a9:4b:45:1e:5a: 1d:cb:97:ee:87:10:d0:a1:fe:cd:1b:39:a0:3d:9b:ed:e0:c1: 8c:48:76:dc:9e:c8:e9:84:ab:a7:69:04:81:3b:0f:94:5d:bc: ee:f9:27:b9:71:1f:04:21:89:47:be:71:51:9b:df:15:5b:24: 8c:56:e1:ea:ff:59:69:c6:87:c9:e2:3e:51:6e:a2:f2:fc:f1: a3:eb:76:58:7e:ad:a1:39:72:8c:cf:f8:67:b9:6b:64:be:32: 90:a0:ae:bd:1e:a1:f7:2a:1a:7d:ae:3b:3e:b5:0e:74:82:bf: 4d:68:6d:8c:d0:62:c8:0d:7e:08:65:b5:f6:64:5a:fb:97:58: cc:77:fa:87:39:f0:b3:8e:09:e0:6b:21:63:31:e6:e8:6c:75: 6d:77:58:a4:7a:51:4d:a7:6b:f4:e2:d5:ea:32:d1:b9:2d:71: 37:2d:9a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M7Ldh/EfWiQiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YjBiNGQxMjQtNzRlMC00OWE3LWI1NDItN2I1NWM4YWQyMTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP/Iq8q2eRCe1+HpLQzIcW9rBIdWqAtRtnO/ 6GpHU5Pz5RyJt8xbmyKyrQCpX+LR3onCY1/Zv1tp7GpNdUviAzEk7F/3wslOZJLt HJu54/3njZlqZZ1Mg2QUyWhn2oVrLvynjv3VxIqQDmrYaqXw66R0GuaJ2NrVlUqo oYluZ4NpRPpkUgahJqK0lOrdWSbiI3rngXxcvpqLXn/6CTUhTsrEI6PDO28fVNWP xtihalSR7AwpyPaccSkpjVTiG/QpbufPVPa86ISoQcJItSz2esUM927XBpUPdQdU 4BPBm7j7sinlCdXHgxERsI4Ghhz7N/09RXQkDbY6N09z1/oZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyLHw2Wq7sw6O95y/vE9/nTKEEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmExZmM1ODEtMjJhMy0z ZjRlLTk5OTMtZTcyYzkyMjlmMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1eh9PNkiDghg5ROSJjhonZzzLncTXUS3bLabrkkvsvBZLz32yHBUgj Od9sxWelN+ZrAXG87IESpm8ISt/2p0EnubvqLPkfxv0hgCDiTdoCkJr9hwKpS0Ue Wh3Ll+6HENCh/s0bOaA9m+3gwYxIdtyeyOmEq6dpBIE7D5RdvO75J7lxHwQhiUe+ cVGb3xVbJIxW4er/WWnGh8niPlFuovL88aPrdlh+raE5cozP+Ge5a2S+MpCgrr0e ofcqGn2uOz61DnSCv01obYzQYsgNfghltfZkWvuXWMx3+oc58LOOCeBrIWMx5uhs dW13WKR6UU2na/Ti1eoy0bktcTctmtw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:43 2025 by rpki-client