$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa File: 70dcef90-0f98-3238-97eb-8f20ab34ab79.roa (raw, json) Hash identifier: An/ehHtCNhUqfhLHEMXCJBsKUZQHG2Dnr6QL2167FFc= Subject key identifier: 4C:7A:E7:05:8F:A0:7A:EA:91:34:4D:D9:B1:12:0C:52:05:8F:7F:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE4DABE558FABA4D07F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396593 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:4d:ab:e5:58:fa:ba:4d:07:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=a320e947-e289-456f-88ea-6a692fe65e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:0d:2f:ac:a3:f2:49:d1:e9:39:f6:a4:44: 09:8e:2f:85:d2:56:e2:a3:b8:73:34:bb:c9:7c:99: b7:e2:d2:c6:b8:a0:7c:2e:1e:1e:c7:a2:4a:31:14: d2:53:a9:5c:42:43:03:a4:6a:6e:e0:bb:54:73:c1: 49:cf:29:ea:cc:a1:db:6c:13:fd:b8:e7:7f:15:cd: fb:fe:3d:32:15:46:e0:38:24:23:1b:c5:61:e5:ed: bb:7c:37:ac:a0:78:ff:4c:d4:73:af:16:f2:06:51: d5:a2:33:4e:7d:38:c4:1a:90:0f:f6:4e:8f:76:be: 11:1c:d6:b4:93:ba:97:a6:ca:e2:e8:4d:a5:c9:fa: ac:21:0d:bf:c4:f4:c0:7e:75:07:a1:e2:ba:39:d2: bb:7a:08:84:0b:2a:22:13:97:aa:e3:8c:3a:52:b3: 1d:b4:cd:d1:cb:f8:5a:04:af:b9:9e:7b:f8:ad:6e: 59:d8:11:16:f3:96:48:c8:e3:99:50:5e:38:9b:3f: 0d:ab:67:d0:7b:38:bf:b3:4e:d2:6c:09:d6:be:a4: f4:3e:15:62:ea:02:cc:98:85:8c:f8:fd:c7:ac:e8: 94:35:4a:a1:7d:54:51:9d:d6:02:ec:80:cb:ec:5c: 83:83:d7:3a:a1:45:de:60:5b:f9:8c:64:82:12:f4: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:E7:05:8F:A0:7A:EA:91:34:4D:D9:B1:12:0C:52:05:8F:7F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e3:88:ea:fc:19:53:48:55:c8:db:af:1f:cc:0a:b7:a8:19: 3d:1b:fe:3f:fa:63:f8:ad:32:54:dd:94:62:bf:0a:f2:26:90: 48:57:a8:ac:5b:65:2f:75:7f:e6:e0:2a:4c:55:98:0e:ec:9f: 14:5f:9b:88:e6:58:5e:16:96:c4:cf:2f:35:c8:ad:78:30:1d: c7:95:e1:5f:e9:ef:0c:b7:ab:a7:34:10:ed:7e:aa:de:e8:07: 1b:dd:9f:54:7d:51:b2:40:13:a3:ba:c9:ea:db:30:3e:4d:6d: bb:2d:69:76:9a:33:77:75:25:04:bc:5b:1d:8d:c9:16:95:ea: 50:6c:73:da:75:61:8b:52:af:d4:fd:03:59:d6:15:5c:8d:c2: f4:18:84:12:a5:18:28:81:d5:0e:2e:3a:9f:bc:23:e0:1f:ba: 68:c7:46:ad:58:d2:7d:03:2c:9b:ab:25:91:f8:9c:53:18:7a: 71:d6:e5:3b:75:83:96:ac:7c:8a:fb:ec:9c:fd:6f:5d:dd:96: 18:d4:13:97:32:05:8f:2c:05:31:d5:4a:80:4d:17:33:95:31: cd:04:31:1f:a6:f2:b1:a3:05:10:2d:cd:a4:47:7c:3d:d4:8c: bb:a2:6e:15:c8:9c:2c:24:15:2c:b1:32:95:43:bc:86:b2:4c: 86:21:3d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M5Nq+VY+rpNB/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YTMyMGU5NDctZTI4OS00NTZmLTg4ZWEtNmE2OTJmZTY1ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlYNL6yj8knR6Tn2pEQJji+F0lbio7hzNLvJ fJm34tLGuKB8Lh4ex6JKMRTSU6lcQkMDpGpu4LtUc8FJzynqzKHbbBP9uOd/Fc37 /j0yFUbgOCQjG8Vh5e27fDesoHj/TNRzrxbyBlHVojNOfTjEGpAP9k6Pdr4RHNa0 k7qXpsri6E2lyfqsIQ2/xPTAfnUHoeK6OdK7egiECyoiE5eq44w6UrMdtM3Ry/ha BK+5nnv4rW5Z2BEW85ZIyOOZUF44mz8Nq2fQezi/s07SbAnWvqT0PhVi6gLMmIWM +P3HrOiUNUqhfVRRndYC7IDL7FyDg9c6oUXeYFv5jGSCEvQmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx65wWPoHrqkTRN2bESDFIFj39OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBkY2VmOTAtMGY5OC0z MjM4LTk3ZWItOGYyMGFiMzRhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbjiOr8GVNIVcjbrx/MCreoGT0b/j/6Y/itMlTdlGK/CvImkEhXqKxb ZS91f+bgKkxVmA7snxRfm4jmWF4WlsTPLzXIrXgwHceV4V/p7wy3q6c0EO1+qt7o Bxvdn1R9UbJAE6O6yerbMD5NbbstaXaaM3d1JQS8Wx2NyRaV6lBsc9p1YYtSr9T9 A1nWFVyNwvQYhBKlGCiB1Q4uOp+8I+AfumjHRq1Y0n0DLJurJZH4nFMYenHW5Tt1 g5asfIr77Jz9b13dlhjUE5cyBY8sBTHVSoBNFzOVMc0EMR+m8rGjBRAtzaRHfD3U jLuibhXInCwkFSyxMpVDvIayTIYhPdw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:50 2025 by rpki-client