$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa File: 894d604d-4003-3744-858c-fd7bf4addcb6.roa (raw, json) Hash identifier: YQqnRvCmsWeotOBNX4J6iV8e9BSgEjPyJVqFE1tt9T4= Subject key identifier: 36:12:76:E0:12:EE:D8:73:84:78:4E:22:D4:83:47:AE:E7:26:FC:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD65AE0B0554BCB3D080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 36621 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:65:ae:0b:05:54:bc:b3:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=94bbfa23-bacf-40b7-a434-375025a53571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:cb:a7:7a:c5:41:cb:38:02:30:1a:5a:43: b2:23:73:fe:c7:92:9f:9c:16:4c:3b:e4:d0:bd:7e: c0:a0:32:e9:d1:10:1a:4d:90:6c:7c:42:c4:3b:fb: a3:18:40:f7:72:32:f3:30:69:35:30:07:e6:6e:44: 8c:1e:b0:7b:ab:40:5c:fc:24:ea:e0:4f:d2:24:36: 32:af:03:a1:39:c2:a0:aa:2e:bc:18:52:49:7c:9d: 49:1d:da:44:c2:be:a0:e3:68:89:4a:9e:7a:5b:f9: 28:ab:1b:fd:e4:c9:69:4f:70:2e:2d:4f:48:b3:14: 94:e1:ed:0d:71:60:21:30:c8:71:91:05:e4:0c:ea: e5:8b:c1:fa:d5:42:a5:f6:02:8c:32:aa:85:a1:4c: 19:97:bc:25:a8:20:d5:3f:4c:a9:07:68:2f:c8:f6: 02:e9:fd:50:f0:a1:93:42:ee:5f:ab:53:86:c8:9e: 6b:72:eb:9f:9b:14:f7:bd:de:99:49:2a:29:6f:65: d5:2e:e7:36:1b:05:2d:94:b4:f0:e3:f3:b7:9e:3a: 3e:f2:b3:37:4c:15:f0:7f:b5:7c:65:38:d2:db:16: 89:2b:90:50:7f:ec:db:f3:55:f6:d6:7e:f5:4e:26: 80:ea:83:c5:5e:98:38:37:e1:89:1d:ba:ae:54:01: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:76:E0:12:EE:D8:73:84:78:4E:22:D4:83:47:AE:E7:26:FC:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:a2:da:c2:3d:8b:10:41:76:b6:ea:29:d8:30:b7:cb:fa:f2: 98:b3:e3:76:7b:82:94:d7:f1:33:23:67:ab:3a:82:00:9d:42: f7:c8:bd:f9:c3:f2:6a:93:1f:50:44:1a:59:69:22:02:95:ee: ed:7c:cc:0a:aa:85:4d:7c:97:c9:ae:07:89:fa:64:71:94:a0: 4a:13:2c:56:66:e5:e8:6a:97:0b:40:d9:a9:b2:d1:f8:e6:5e: 7f:c5:a8:3f:12:9e:45:a3:45:a3:9c:37:fc:82:b7:6d:0c:38: a9:fb:3f:eb:61:73:a6:43:ba:f0:c0:ba:d5:aa:7d:7c:41:0c: a4:76:82:fb:57:68:83:b9:fe:71:3c:4e:fc:e9:e6:7f:49:43: 29:6a:49:26:02:ac:7d:d3:2d:f4:75:99:f5:97:1f:d6:79:a7: c7:3d:10:18:cc:dd:36:1d:d4:df:70:e0:9e:5e:dc:1a:0c:95: 3f:26:27:16:1d:ff:c5:f1:d0:1d:4f:09:b4:9a:42:53:0b:7f: 3d:11:0f:fe:82:d6:56:c0:c3:48:8b:37:4c:27:c8:94:2a:4e: 54:9a:ea:4f:34:98:20:76:b2:30:8b:c3:70:c9:02:3d:a9:60: 49:db:18:0a:0a:3b:e9:88:c6:72:a0:5d:f4:4f:62:13:6d:fd: 39:ac:57:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M1lrgsFVLyz0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk OTRiYmZhMjMtYmFjZi00MGI3LWE0MzQtMzc1MDI1YTUzNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRbLp3rFQcs4AjAaWkOyI3P+x5KfnBZMO+TQ vX7AoDLp0RAaTZBsfELEO/ujGED3cjLzMGk1MAfmbkSMHrB7q0Bc/CTq4E/SJDYy rwOhOcKgqi68GFJJfJ1JHdpEwr6g42iJSp56W/koqxv95MlpT3AuLU9IsxSU4e0N cWAhMMhxkQXkDOrli8H61UKl9gKMMqqFoUwZl7wlqCDVP0ypB2gvyPYC6f1Q8KGT Qu5fq1OGyJ5rcuufmxT3vd6ZSSopb2XVLuc2GwUtlLTw4/O3njo+8rM3TBXwf7V8 ZTjS2xaJK5BQf+zb81X21n71TiaA6oPFXpg4N+GJHbquVAFnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYSduAS7thzhHhOItSDR67nJvzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODk0ZDYwNGQtNDAwMy0z NzQ0LTg1OGMtZmQ3YmY0YWRkY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2i2sI9ixBBdrbqKdgwt8v68piz43Z7gpTX8TMjZ6s6ggCdQvfIvfnD 8mqTH1BEGllpIgKV7u18zAqqhU18l8muB4n6ZHGUoEoTLFZm5ehqlwtA2amy0fjm Xn/FqD8SnkWjRaOcN/yCt20MOKn7P+thc6ZDuvDAutWqfXxBDKR2gvtXaIO5/nE8 Tvzp5n9JQylqSSYCrH3TLfR1mfWXH9Z5p8c9EBjM3TYd1N9w4J5e3BoMlT8mJxYd /8Xx0B1PCbSaQlMLfz0RD/6C1lbAw0iLN0wnyJQqTlSa6k80mCB2sjCLw3DJAj2p YEnbGAoKO+mIxnKgXfRPYhNt/TmsV9Q= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:43 2025 by rpki-client