$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa File: 8d98e4da-a161-3bc6-b14f-34b900f50194.roa (raw, json) Hash identifier: fUK3zDAh8Cd097EnJtMtFM44eYmoMMZRzujGVUJ10g8= Subject key identifier: C5:3C:CB:CF:74:B9:50:4E:AE:6E:B3:56:C8:C3:3F:2F:06:61:43:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC4CE095DB2919C55900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 36629 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:4c:e0:95:db:29:19:c5:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=e941a571-e2c3-4463-af66-d6ec6f8f55e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:2a:42:3c:f3:78:2a:83:5f:4c:69:72:7c: 25:b5:12:1a:77:a2:b1:28:ca:84:9d:a6:7e:28:e7: e1:52:8d:07:8e:b8:df:92:ee:a7:3a:21:f3:c2:89: 35:3d:a8:47:df:5a:a5:f6:18:7a:81:23:ee:1a:65: 47:29:c4:cc:18:58:27:36:b9:ec:1e:fb:70:44:55: ab:05:d8:e9:37:69:53:4e:a9:25:b6:fa:27:53:dd: 4f:eb:fd:cf:48:9f:cf:e4:bb:3b:61:dd:d4:fc:34: fc:82:84:b5:f3:36:f5:f7:f3:6b:00:02:a7:3a:73: 44:ee:2d:f9:7c:2d:68:64:59:64:26:c7:5d:7d:2c: 61:30:33:38:68:09:97:b0:fc:34:71:7e:4f:47:e7: 60:ed:82:db:23:7b:b0:c9:d7:b4:07:28:92:3e:d4: 4b:af:ed:8d:fa:ad:44:88:75:2c:6b:ee:02:36:9e: f2:40:a1:a7:4a:23:39:f6:c1:3f:59:35:8a:47:a7: 1c:7e:3c:3f:8f:e2:84:91:3d:0b:90:43:f5:ea:03: fe:da:0a:f9:5e:4d:51:1d:06:82:10:ad:81:6f:b9: 3a:66:73:02:da:31:68:02:c6:4d:a3:b6:80:73:7a: 8b:bf:ab:11:57:40:74:b5:d4:4b:d4:76:ed:65:5c: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:CB:CF:74:B9:50:4E:AE:6E:B3:56:C8:C3:3F:2F:06:61:43:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ce:79:45:86:06:71:46:8a:56:bc:f5:01:de:a8:6c:80:30: 02:f7:a8:54:6a:c9:44:03:79:f9:87:03:ca:3a:2a:ca:ba:d1: af:5b:30:e7:18:ed:95:d0:18:b8:48:4b:f8:28:0c:a5:e6:93: 65:ca:23:a0:4a:1b:84:12:96:62:76:c1:c4:74:b2:17:c7:a7: 6a:0e:1b:a3:46:8c:c0:d7:31:cf:e2:65:36:35:f6:4f:f1:dc: e6:5b:1d:8e:69:c2:f5:2f:1f:b7:c9:5e:a8:29:01:59:9c:53: c9:a1:5b:00:63:ba:40:73:60:8e:69:e8:68:37:91:88:b5:3c: d8:f0:e5:f9:7b:92:03:a9:8b:a2:be:1f:79:db:b9:19:90:e5: 9c:85:b1:b5:c5:1b:88:51:65:2c:36:a3:78:3d:c1:38:d0:77: c5:b7:56:8b:ce:2e:ec:65:bb:7c:42:a4:58:d4:bd:9b:51:9b: 32:a1:45:2c:08:e2:c7:06:89:ee:11:79:50:38:83:13:02:1f: 44:69:1b:1e:7d:16:19:50:67:e8:8f:0b:02:17:6f:8e:71:d9: 77:78:0c:c3:ce:1a:60:52:4a:e7:24:6b:b0:8c:e9:8e:4e:26: 71:e6:aa:28:49:89:00:c1:46:49:27:28:4f:6f:9a:48:e7:47: ee:f9:0f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MxM4JXbKRnFWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk ZTk0MWE1NzEtZTJjMy00NDYzLWFmNjYtZDZlYzZmOGY1NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVsqQjzzeCqDX0xpcnwltRIad6KxKMqEnaZ+ KOfhUo0Hjrjfku6nOiHzwok1PahH31ql9hh6gSPuGmVHKcTMGFgnNrnsHvtwRFWr BdjpN2lTTqkltvonU91P6/3PSJ/P5Ls7Yd3U/DT8goS18zb19/NrAAKnOnNE7i35 fC1oZFlkJsddfSxhMDM4aAmXsPw0cX5PR+dg7YLbI3uwyde0ByiSPtRLr+2N+q1E iHUsa+4CNp7yQKGnSiM59sE/WTWKR6ccfjw/j+KEkT0LkEP16gP+2gr5Xk1RHQaC EK2Bb7k6ZnMC2jFoAsZNo7aAc3qLv6sRV0B0tdRL1HbtZVxUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU8y890uVBOrm6zVsjDPy8GYUO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ5OGU0ZGEtYTE2MS0z YmM2LWIxNGYtMzRiOTAwZjUwMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErOeUWGBnFGila89QHeqGyAMAL3qFRqyUQDefmHA8o6Ksq60a9bMOcY 7ZXQGLhIS/goDKXmk2XKI6BKG4QSlmJ2wcR0shfHp2oOG6NGjMDXMc/iZTY19k/x 3OZbHY5pwvUvH7fJXqgpAVmcU8mhWwBjukBzYI5p6Gg3kYi1PNjw5fl7kgOpi6K+ H3nbuRmQ5ZyFsbXFG4hRZSw2o3g9wTjQd8W3VovOLuxlu3xCpFjUvZtRmzKhRSwI 4scGie4ReVA4gxMCH0RpGx59FhlQZ+iPCwIXb45x2Xd4DMPOGmBSSucka7CM6Y5O JnHmqihJiQDBRkknKE9vmkjnR+75D5I= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:07 2025 by rpki-client