$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa File: 867a3490-759c-3fa2-a869-8e920a15b939.roa (raw, json) Hash identifier: iWOedTYznU4lH05IcKJLJGjJ9iOvYHJZRYV4w+87JQ8= Subject key identifier: 63:64:3B:CE:52:F2:09:87:A3:3B:68:62:3B:42:B6:9B:F0:04:8A:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0B4F8221D797E254BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 397197 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:b4:f8:22:1d:79:7e:25:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=fa8668ee-842c-4c90-9789-a47084b827cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f3:8b:49:a1:25:42:5b:be:98:a1:a4:ea:f2: e9:94:25:36:35:95:8c:5b:df:b8:58:a8:f1:07:39: f2:65:d0:33:ca:82:28:4f:95:3e:65:6d:1b:e2:90: 1d:c6:15:56:d9:76:9e:79:47:71:b2:6c:40:a5:3e: d8:50:17:94:7c:e5:52:fc:94:cc:7a:3d:7f:ed:55: 6d:a2:be:fa:ea:de:3a:af:c6:09:8d:b3:9d:03:55: 10:98:ee:82:93:8e:e6:2a:97:c6:2d:a0:f5:df:20: 42:ae:63:61:09:b8:e8:6d:40:36:9b:3f:0c:6f:1b: 17:b7:58:70:f9:e7:f0:51:63:a5:91:6a:77:b6:61: c0:7a:45:72:57:cb:cd:d7:3b:c4:9d:eb:27:5e:bf: b2:1f:5f:1a:45:d3:95:2f:4b:9a:04:3b:5d:51:12: 21:27:62:06:14:bf:2f:ee:86:12:48:d5:f9:76:a9: 31:32:c6:b7:e9:6f:07:4a:26:71:85:e6:37:0b:a5: 7a:99:0a:cf:e8:05:2d:91:c3:33:3f:77:7e:8b:34: e9:0c:b6:cd:8d:83:de:78:49:1b:98:49:22:e5:a8: df:13:7e:e2:ad:bb:70:47:45:a9:8a:f3:7d:f3:d5: 65:d7:76:83:f1:3a:f7:a7:72:43:22:10:af:4e:95: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:3B:CE:52:F2:09:87:A3:3B:68:62:3B:42:B6:9B:F0:04:8A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a8:24:75:f6:fb:41:38:fb:97:1f:8c:0a:4a:8d:e6:67:86: 12:52:7e:4f:41:2f:65:63:3c:59:cd:eb:77:a8:59:96:2b:cd: 8a:1e:04:5d:fa:0e:90:93:7b:b7:62:d8:8f:63:7a:e7:61:1a: a8:02:b1:28:5e:05:eb:ad:7e:68:97:6e:62:64:fe:23:0e:ed: e3:14:cf:2f:99:f3:30:07:9f:9e:2f:88:f3:69:bc:94:10:66: dc:db:5b:d0:28:34:78:7c:da:5a:e4:7c:02:b0:92:c2:0b:9d: eb:92:6e:c2:87:c1:f0:6a:6d:d8:46:8d:b9:ba:3c:c2:36:06: 2e:57:2a:2b:b6:ce:12:9b:78:dd:59:65:82:1d:98:2c:68:7e: e9:46:3e:f6:85:bd:df:c1:27:5e:62:3d:a8:50:27:4f:27:da: 14:1b:15:2d:ac:14:19:fd:45:53:14:ae:39:e5:76:ef:1a:e3: 41:5e:9e:b9:6f:77:5f:ec:67:b4:d6:14:fd:96:e2:85:fb:95: b0:0b:8e:75:4d:79:f9:b5:0f:d8:a1:85:a8:b7:b7:fc:eb:49: 89:b3:44:89:e2:92:ca:71:22:48:11:46:0f:7f:0f:75:f5:14: 56:db:1b:1c:2f:19:a9:74:b3:d8:d4:dc:be:0b:5f:df:a6:a7: 22:c9:08:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NC0+CIdeX4lS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk ZmE4NjY4ZWUtODQyYy00YzkwLTk3ODktYTQ3MDg0YjgyN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvOLSaElQlu+mKGk6vLplCU2NZWMW9+4WKjx BznyZdAzyoIoT5U+ZW0b4pAdxhVW2XaeeUdxsmxApT7YUBeUfOVS/JTMej1/7VVt or766t46r8YJjbOdA1UQmO6Ck47mKpfGLaD13yBCrmNhCbjobUA2mz8MbxsXt1hw +efwUWOlkWp3tmHAekVyV8vN1zvEnesnXr+yH18aRdOVL0uaBDtdURIhJ2IGFL8v 7oYSSNX5dqkxMsa36W8HSiZxheY3C6V6mQrP6AUtkcMzP3d+izTpDLbNjYPeeEkb mEki5ajfE37irbtwR0WpivN989Vl13aD8Tr3p3JDIhCvTpVsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNkO85S8gmHoztoYjtCtpvwBIoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY3YTM0OTAtNzU5Yy0z ZmEyLWE4NjktOGU5MjBhMTViOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWoJHX2+0E4+5cfjApKjeZnhhJSfk9BL2VjPFnN63eoWZYrzYoeBF36 DpCTe7di2I9jeudhGqgCsSheBeutfmiXbmJk/iMO7eMUzy+Z8zAHn54viPNpvJQQ ZtzbW9AoNHh82lrkfAKwksILneuSbsKHwfBqbdhGjbm6PMI2Bi5XKiu2zhKbeN1Z ZYIdmCxofulGPvaFvd/BJ15iPahQJ08n2hQbFS2sFBn9RVMUrjnldu8a40Fenrlv d1/sZ7TWFP2W4oX7lbALjnVNefm1D9ihhai3t/zrSYmzRInikspxIkgRRg9/D3X1 FFbbGxwvGal0s9jU3L4LX9+mpyLJCNU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:44 2025 by rpki-client