$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa File: 6c69a170-71e0-38d1-9369-f97deba2b850.roa (raw, json) Hash identifier: DlA+VNA9zeRM1mSMBQfiTar2IVmF7ovTTRTLF8pHrUk= Subject key identifier: C0:0A:35:1C:02:92:26:48:47:C7:5E:05:7F:FF:8B:B3:89:74:AE:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCCED510AF05F12F6CA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396546 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:ed:51:0a:f0:5f:12:f6:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=34bfd9b0-d603-4e06-aeed-78580d3e347d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:dc:d6:d2:69:f6:54:6b:e5:24:d9:f0:80: 81:c5:31:d7:5f:31:7b:74:8e:bb:be:46:0f:0c:ef: 61:e5:d2:3e:23:67:66:bc:ae:12:34:39:6b:dd:32: b4:f9:d3:28:53:be:a2:00:bf:24:7b:71:7c:7c:4a: f7:43:0b:05:08:8c:f6:7a:8e:86:0d:c5:77:fd:55: 61:4b:b4:5d:7b:f2:42:b3:ee:ef:b4:fb:7c:e8:e7: a7:49:73:8d:a8:7e:1b:fa:60:bd:a6:67:82:a6:40: c7:55:31:61:00:75:64:d1:64:e4:77:3b:e9:10:17: eb:39:ae:a0:11:92:b7:3d:93:d2:bc:36:be:50:e7: 3b:2a:a3:a1:3b:04:83:b0:72:8d:b5:56:12:c2:ba: 3c:f8:e6:46:d5:f0:c6:0b:64:ba:19:79:b7:51:06: b6:c3:89:17:e1:50:86:02:8b:97:c3:68:7f:b7:29: 38:93:54:ca:7f:7b:c6:8c:54:71:88:6a:01:fa:cf: 71:5c:b4:ed:6a:28:9c:5a:f5:1f:31:b3:65:8b:ca: 5d:06:3a:e3:c6:6d:45:4e:81:d2:95:f5:59:e6:f0: ef:91:50:ab:a0:d5:00:25:a0:46:0d:74:fd:30:8f: 51:f0:05:6b:ec:12:6d:c2:d4:42:f5:09:6b:99:13: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:35:1C:02:92:26:48:47:C7:5E:05:7F:FF:8B:B3:89:74:AE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:90:92:bb:e4:20:2c:fb:75:d8:f6:14:21:ae:72:e4:0d:16: 8c:46:53:57:13:c6:48:56:ee:1d:a5:e9:f2:a0:11:88:e6:e9: ab:0e:99:14:f8:1f:eb:94:95:81:67:36:f1:cf:9a:e2:86:17: 4c:3e:04:82:36:a3:63:d9:5e:9e:96:6a:f7:59:49:5b:9c:16: a1:ad:85:60:ff:51:18:ac:ea:2f:35:35:03:c1:ed:22:3d:07: c5:60:d5:36:35:c9:ae:b5:be:25:e6:0b:4f:a4:79:18:e5:12: d0:52:63:ac:1e:95:de:85:0d:90:43:96:d9:2e:b4:8e:54:be: 58:56:90:b4:ed:28:0f:97:9f:54:37:89:f8:c5:20:73:ac:5f: a7:4d:5f:78:d9:6a:b1:69:e0:46:75:6b:65:81:62:8d:7d:3b: 1c:14:6e:05:80:19:d5:de:24:e9:f4:4d:c2:27:c5:ff:d7:9d: f7:17:d3:93:b2:f3:f4:0f:ee:c8:e2:25:2a:f2:ef:ee:a9:92: 89:2a:2d:7f:f8:f1:92:d1:85:26:92:29:1f:23:6e:b9:ab:5f: b8:51:2e:6c:cb:c5:e1:91:86:d2:5d:65:1e:38:aa:ad:5e:7c: e1:28:e9:3f:79:97:21:98:f2:7c:17:09:a2:d7:e8:15:fd:24: 79:1e:37:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MztUQrwXxL2yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk MzRiZmQ5YjAtZDYwMy00ZTA2LWFlZWQtNzg1ODBkM2UzNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Xc1tJp9lRr5STZ8ICBxTHXXzF7dI67vkYP DO9h5dI+I2dmvK4SNDlr3TK0+dMoU76iAL8ke3F8fEr3QwsFCIz2eo6GDcV3/VVh S7Rde/JCs+7vtPt86OenSXONqH4b+mC9pmeCpkDHVTFhAHVk0WTkdzvpEBfrOa6g EZK3PZPSvDa+UOc7KqOhOwSDsHKNtVYSwro8+OZG1fDGC2S6GXm3UQa2w4kX4VCG AouXw2h/tyk4k1TKf3vGjFRxiGoB+s9xXLTtaiicWvUfMbNli8pdBjrjxm1FToHS lfVZ5vDvkVCroNUAJaBGDXT9MI9R8AVr7BJtwtRC9QlrmROyKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAKNRwCkiZIR8deBX//i7OJdK5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2OWExNzAtNzFlMC0z OGQxLTkzNjktZjk3ZGViYTJiODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6QkrvkICz7ddj2FCGucuQNFoxGU1cTxkhW7h2l6fKgEYjm6asOmRT4 H+uUlYFnNvHPmuKGF0w+BII2o2PZXp6WavdZSVucFqGthWD/URis6i81NQPB7SI9 B8Vg1TY1ya61viXmC0+keRjlEtBSY6weld6FDZBDltkutI5UvlhWkLTtKA+Xn1Q3 ifjFIHOsX6dNX3jZarFp4EZ1a2WBYo19OxwUbgWAGdXeJOn0TcInxf/XnfcX05Oy 8/QP7sjiJSry7+6pkokqLX/48ZLRhSaSKR8jbrmrX7hRLmzLxeGRhtJdZR44qq1e fOEo6T95lyGY8nwXCaLX6BX9JHkeN7E= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:32 2025 by rpki-client