$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa File: 7b8994b8-8426-3cdb-84ec-894afbaf4419.roa (raw, json) Hash identifier: M9WQD1C+vqRAT5NM8V5rO4JGX3l0z6VeBPHoeBkJmCw= Subject key identifier: 0C:90:07:54:27:32:53:56:BE:79:4E:A0:53:21:DF:87:00:D4:B3:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB02BFC7BFBE7447F280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396561 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:02:bf:c7:bf:be:74:47:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=2dc11b39-17c5-47f2-8459-806b5be7b6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:70:dd:f1:80:e0:9c:1b:ae:27:91:60:a0: f2:87:b8:4b:37:5c:38:8a:02:3e:ab:af:19:10:53: 77:9e:01:f9:7e:1d:7c:90:7a:8f:50:f5:4f:8b:1e: c5:dd:7c:27:54:30:35:e3:e9:38:9f:78:c4:9b:23: e4:66:96:6c:f4:cd:1c:02:1a:3f:67:a8:01:4c:b9: ba:e2:38:1f:1d:80:f2:ba:a7:a9:b4:c5:50:67:93: 10:86:25:96:8a:04:b7:42:e4:a6:e4:3a:98:47:0a: d6:a2:14:1c:9f:b6:4f:bd:84:b8:06:53:f1:14:93: dc:c3:49:85:cc:fe:93:7c:35:49:a6:b6:f3:c9:eb: de:86:b6:6d:8b:da:32:5d:79:3c:ac:dd:1a:9d:d1: ad:2f:85:63:c6:ea:ea:31:ab:82:b5:69:85:17:f9: 49:03:e4:11:56:88:63:28:f6:57:08:ec:d1:e6:9a: 8c:d8:3e:65:5a:46:b1:56:83:f8:63:2d:5c:97:a3: f0:a0:e6:3e:17:38:fc:10:ad:3d:78:b9:7c:97:c5: 48:3b:d8:d1:c9:65:81:d8:f6:b2:34:41:0f:17:e6: 5e:c5:4c:10:c4:c7:ff:2c:57:4a:b8:8b:12:a0:7d: 43:10:be:fe:af:4b:02:ac:ef:76:2e:92:e2:c9:05: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:90:07:54:27:32:53:56:BE:79:4E:A0:53:21:DF:87:00:D4:B3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b8994b8-8426-3cdb-84ec-894afbaf4419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4b:22:a6:13:3c:26:ee:16:ef:f1:f8:f8:c7:ae:77:08:46: 8f:b3:0b:45:36:f2:20:20:1b:f6:66:c1:30:da:b8:d9:8d:fa: af:05:0f:45:43:b9:37:79:c1:d5:dd:b4:61:52:90:60:49:6f: fa:24:2f:87:a4:cc:e2:84:fe:bf:76:b1:9a:f1:20:27:64:08: c4:43:e3:0b:b8:b7:6d:0f:7d:f8:ea:f0:e1:d3:12:07:cd:00: 01:25:c8:54:96:c1:2e:70:af:3b:a3:dc:5b:09:8a:2e:61:22: 34:40:5a:cf:fe:21:66:a1:4f:6e:a1:be:76:b3:7e:be:d1:b8: b0:ce:2f:c8:fd:83:dd:8d:dd:b5:73:01:84:51:78:0b:95:4a: 92:11:2b:2a:d7:72:25:67:89:9a:c9:7c:a6:e9:08:3c:9f:02: 3c:99:59:44:cc:c7:20:94:03:6d:23:46:89:a2:d3:15:87:a7: c9:83:7d:c1:de:16:80:48:23:74:4b:ce:c4:8f:ca:80:72:0a: 71:d6:93:ae:92:7e:1c:17:34:f7:1a:be:20:6f:13:07:9a:11: 1f:e2:5b:6c:ca:51:14:66:16:a3:43:b0:2d:f4:a4:d6:1e:16: 12:a1:39:49:99:be:57:c6:7d:22:4f:dc:d9:a6:16:80:2f:aa: e6:bd:18:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MsCv8e/vnRH8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk MmRjMTFiMzktMTdjNS00N2YyLTg0NTktODA2YjViZTdiNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO5w3fGA4JwbrieRYKDyh7hLN1w4igI+q68Z EFN3ngH5fh18kHqPUPVPix7F3XwnVDA14+k4n3jEmyPkZpZs9M0cAho/Z6gBTLm6 4jgfHYDyuqeptMVQZ5MQhiWWigS3QuSm5DqYRwrWohQcn7ZPvYS4BlPxFJPcw0mF zP6TfDVJprbzyevehrZti9oyXXk8rN0andGtL4VjxurqMauCtWmFF/lJA+QRVohj KPZXCOzR5pqM2D5lWkaxVoP4Yy1cl6PwoOY+Fzj8EK09eLl8l8VIO9jRyWWB2Pay NEEPF+ZexUwQxMf/LFdKuIsSoH1DEL7+r0sCrO92LpLiyQUOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyQB1QnMlNWvnlOoFMh34cA1LMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2I4OTk0YjgtODQyNi0z Y2RiLTg0ZWMtODk0YWZiYWY0NDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtLIqYTPCbuFu/x+PjHrncIRo+zC0U28iAgG/ZmwTDauNmN+q8FD0VD uTd5wdXdtGFSkGBJb/okL4ekzOKE/r92sZrxICdkCMRD4wu4t20Pffjq8OHTEgfN AAElyFSWwS5wrzuj3FsJii5hIjRAWs/+IWahT26hvnazfr7RuLDOL8j9g92N3bVz AYRReAuVSpIRKyrXciVniZrJfKbpCDyfAjyZWUTMxyCUA20jRomi0xWHp8mDfcHe FoBII3RLzsSPyoByCnHWk66SfhwXNPcaviBvEweaER/iW2zKURRmFqNDsC30pNYe FhKhOUmZvlfGfSJP3NmmFoAvqua9GIE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:45 2025 by rpki-client