$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa File: 89bd953d-ca92-3d30-a75f-08e12d302671.roa (raw, json) Hash identifier: Aakg7D3S9CWW8cHSvEy0Xhxe9BZmV0y00EIZaiQJdhg= Subject key identifier: AC:43:3D:A9:E2:A7:DB:69:7C:F5:21:70:9C:99:C8:00:E5:F6:6E:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCF49C7972AB99D9DE700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396542 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:49:c7:97:2a:b9:9d:9d:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=039f578e-13af-4540-bbe0-666dcb52c57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cd:6a:ff:f8:ff:21:d3:2b:6a:f3:99:e6:c0: 21:c1:c4:6e:77:5d:75:d1:ed:8c:97:c7:7c:bd:b7: bd:dc:26:c7:d0:cd:7c:f7:76:61:e0:25:27:93:38: e0:07:7a:63:ba:4d:d4:ea:99:c8:4f:7c:83:0f:bd: 52:09:bb:f8:d4:ed:9a:76:e9:6e:9a:df:c4:c3:fa: b8:34:7a:b1:fa:c6:49:87:e8:60:53:b8:3d:37:af: d7:22:6a:3a:a5:e2:74:14:5c:2b:15:0f:d4:c2:9e: e8:79:0b:d6:c3:ca:17:78:b1:10:34:f8:9e:ac:aa: bc:2c:6a:31:72:02:e6:39:04:5a:ee:df:ce:6e:7a: f9:de:62:3e:61:1e:d9:28:ae:0c:a1:30:c3:11:62: 51:93:38:7e:e6:73:95:f5:da:1f:ce:ca:f7:b2:4c: 8f:a7:f1:81:f3:7d:81:f9:7f:6a:86:dc:4d:08:51: 9b:77:12:a1:d3:98:e8:89:29:d9:13:37:8a:76:c2: 5a:5c:df:4e:aa:8f:47:5d:74:2b:4b:5e:ef:9e:92: 0c:19:24:60:75:8d:df:ca:b5:57:e9:6e:b1:57:a4: ec:95:35:7f:22:a7:5f:3f:f4:77:72:4d:ee:1e:70: 73:5e:0e:15:f3:bc:2f:0a:8b:06:7c:f3:28:ce:e4: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:43:3D:A9:E2:A7:DB:69:7C:F5:21:70:9C:99:C8:00:E5:F6:6E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b2:07:5c:aa:29:41:8b:4b:33:8d:b3:65:b9:c4:a3:2e:5b: 07:d7:35:11:ae:7b:3c:9b:c4:0f:43:0f:20:d9:37:c2:5e:5c: 66:10:24:6e:26:cd:ad:2b:dc:be:bd:c0:eb:d0:ed:91:3e:bc: bc:5d:5d:e1:b6:d3:87:da:c0:4d:94:35:20:8c:25:b6:49:a5: a9:46:ce:02:44:48:b1:cd:ab:f7:09:56:cd:df:db:ec:67:ee: 73:92:c7:d8:bf:12:0a:e2:79:96:b9:53:9d:2f:85:a2:9b:b7: 28:eb:b7:62:2b:26:99:c2:c5:64:40:b9:77:72:d8:9d:5f:50: 01:a8:c6:a3:13:b3:49:71:fb:c2:39:d7:26:5f:ca:52:bb:cd: ec:bc:aa:d5:7b:97:aa:74:c7:6c:af:5b:e2:42:a4:c1:e5:c1: 00:48:61:78:03:c9:fa:02:7f:85:d5:12:33:d1:2a:4f:25:2f: cf:60:61:c8:19:12:c1:c3:2e:5b:67:65:be:13:c9:74:a9:72: 0d:6f:db:a6:7b:be:1d:b6:70:d7:93:4b:a8:d5:ed:16:21:ce: 45:42:75:bc:48:b8:cd:d3:fb:81:bd:25:28:48:5c:62:94:3f: 3c:9a:5a:25:14:bf:df:dc:d8:2e:5d:4d:55:4f:be:30:9b:b0: e2:8a:7c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M9Jx5cquZ2d5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk MDM5ZjU3OGUtMTNhZi00NTQwLWJiZTAtNjY2ZGNiNTJjNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi81q//j/IdMravOZ5sAhwcRud1110e2Ml8d8 vbe93CbH0M1893Zh4CUnkzjgB3pjuk3U6pnIT3yDD71SCbv41O2adulumt/Ew/q4 NHqx+sZJh+hgU7g9N6/XImo6peJ0FFwrFQ/Uwp7oeQvWw8oXeLEQNPierKq8LGox cgLmOQRa7t/Obnr53mI+YR7ZKK4MoTDDEWJRkzh+5nOV9dofzsr3skyPp/GB832B +X9qhtxNCFGbdxKh05joiSnZEzeKdsJaXN9Oqo9HXXQrS17vnpIMGSRgdY3fyrVX 6W6xV6TslTV/IqdfP/R3ck3uHnBzXg4V87wvCosGfPMozuTRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxDPanip9tpfPUhcJyZyADl9m6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODliZDk1M2QtY2E5Mi0z ZDMwLWE3NWYtMDhlMTJkMzAyNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECyB1yqKUGLSzONs2W5xKMuWwfXNRGuezybxA9DDyDZN8JeXGYQJG4m za0r3L69wOvQ7ZE+vLxdXeG204fawE2UNSCMJbZJpalGzgJESLHNq/cJVs3f2+xn 7nOSx9i/EgrieZa5U50vhaKbtyjrt2IrJpnCxWRAuXdy2J1fUAGoxqMTs0lx+8I5 1yZfylK7zey8qtV7l6p0x2yvW+JCpMHlwQBIYXgDyfoCf4XVEjPRKk8lL89gYcgZ EsHDLltnZb4TyXSpcg1v26Z7vh22cNeTS6jV7RYhzkVCdbxIuM3T+4G9JShIXGKU PzyaWiUUv9/c2C5dTVVPvjCbsOKKfMk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:24 2025 by rpki-client