$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa File: 966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa (raw, json) Hash identifier: mxoNsfHuZUxsCb7S5o7NdFV3NtOubvvyGI0RyCFRoQY= Subject key identifier: BB:DF:1B:9A:53:EC:5A:44:DB:93:58:85:43:44:77:12:D9:AF:96:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCCDF412C149C3C457400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396563 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:df:41:2c:14:9c:3c:45:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=4536d9b7-45a1-4d00-9735-0ffe07afe2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:a9:88:57:10:43:83:73:2c:75:95:2d:b5: 4c:5d:f1:90:71:20:20:bd:93:5b:03:ee:01:00:e1: e9:de:90:c6:c6:3b:a1:04:e1:01:24:ff:a1:a1:c1: be:4d:5f:20:b5:10:9f:24:a6:02:a4:1a:c3:c4:1e: 5c:0b:5a:2e:ff:33:21:4a:a0:17:4c:52:05:6f:d1: 79:85:78:2b:94:c9:a5:ab:80:b0:69:ea:b3:80:85: 15:77:31:d1:06:5d:9f:35:b9:74:4d:5d:c1:f2:04: 0b:75:33:5b:be:eb:c1:12:b6:45:1b:0a:f6:f8:b4: ac:69:51:eb:89:18:17:3a:96:26:d3:91:50:29:20: 5c:dd:90:e6:83:96:cb:bc:82:2c:3a:e7:bd:2b:11: c2:a2:da:55:7c:1a:f8:6c:e0:f6:f5:1a:88:71:e3: 40:52:24:50:ba:1c:77:3c:07:b2:d6:24:fc:13:48: e6:be:93:66:3d:85:13:a2:eb:51:c9:ad:5a:53:f7: e4:56:25:65:4d:10:51:75:74:be:08:c5:a5:32:e3: 16:57:07:20:65:e1:49:b5:95:5f:46:aa:4d:47:47: 3c:1b:20:51:95:ea:9e:65:bc:0d:b7:44:62:a6:e4: 17:bb:e5:17:e0:b0:a8:eb:d1:43:3f:4e:3d:00:fc: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:1B:9A:53:EC:5A:44:DB:93:58:85:43:44:77:12:D9:AF:96:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6c:a4:1e:51:a9:b1:cc:42:4b:4e:5e:6c:cc:f5:50:bf:c5: 5d:bd:e7:e6:1e:a8:ff:72:54:c2:9d:da:b5:88:b7:56:99:ea: d1:c2:cb:e7:bf:e1:cd:1a:3b:8f:42:f7:c8:87:6a:7f:ca:2c: e4:0f:8e:b7:8a:9b:1f:3b:02:1d:fb:7b:3a:b2:e8:42:8e:9c: aa:b2:4f:85:d3:45:85:91:c5:b3:23:1f:44:db:93:fa:1b:02: e5:c0:a3:b9:c5:92:02:0a:af:46:6a:2e:1a:fc:f9:77:77:44: 0a:6d:7f:ad:18:39:cc:44:d3:6a:42:e6:c1:58:a7:36:31:06: 11:93:e3:a1:b2:10:7d:d9:f3:53:8c:5a:a4:85:89:79:cd:fd: b8:d5:a9:73:99:eb:25:78:bb:b8:35:47:83:2d:51:bd:e4:4f: 9a:34:f2:e2:48:20:29:33:1d:db:77:b0:c8:d3:4d:8a:c9:fb: fa:c4:24:53:0c:d4:52:4a:b7:51:59:b0:a2:57:ff:fe:7b:19: d9:31:ed:68:32:c2:97:e0:8f:74:c5:0a:ac:99:a4:3e:60:b1: 57:33:a8:13:f4:c6:f2:91:27:99:dc:e9:ef:37:ae:6f:60:3f: e4:fb:88:4e:86:bc:70:12:5d:50:d5:8c:2e:90:9d:0d:57:ba: 4a:73:cc:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MzfQSwUnDxFdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NDUzNmQ5YjctNDVhMS00ZDAwLTk3MzUtMGZmZTA3YWZlMmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSmpiFcQQ4NzLHWVLbVMXfGQcSAgvZNbA+4B AOHp3pDGxjuhBOEBJP+hocG+TV8gtRCfJKYCpBrDxB5cC1ou/zMhSqAXTFIFb9F5 hXgrlMmlq4CwaeqzgIUVdzHRBl2fNbl0TV3B8gQLdTNbvuvBErZFGwr2+LSsaVHr iRgXOpYm05FQKSBc3ZDmg5bLvIIsOue9KxHCotpVfBr4bOD29RqIceNAUiRQuhx3 PAey1iT8E0jmvpNmPYUToutRya1aU/fkViVlTRBRdXS+CMWlMuMWVwcgZeFJtZVf RqpNR0c8GyBRleqeZbwNt0RipuQXu+UX4LCo69FDP049APzISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvfG5pT7FpE25NYhUNEdxLZr5YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTY2YWI1NWMtMzRhOC0z ZDI0LTg5ODEtOWE4ZjhmNjVmZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNspB5RqbHMQktOXmzM9VC/xV295+YeqP9yVMKd2rWIt1aZ6tHCy+e/ 4c0aO49C98iHan/KLOQPjreKmx87Ah37ezqy6EKOnKqyT4XTRYWRxbMjH0Tbk/ob AuXAo7nFkgIKr0ZqLhr8+Xd3RAptf60YOcxE02pC5sFYpzYxBhGT46GyEH3Z81OM WqSFiXnN/bjVqXOZ6yV4u7g1R4MtUb3kT5o08uJIICkzHdt3sMjTTYrJ+/rEJFMM 1FJKt1FZsKJX//57Gdkx7Wgywpfgj3TFCqyZpD5gsVczqBP0xvKRJ5nc6e83rm9g P+T7iE6GvHASXVDVjC6QnQ1XukpzzJk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:20 2025 by rpki-client