$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa File: 9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa (raw, json) Hash identifier: Szyk7aIbBxUGU9Cn0x/UZVT8gBy7G0S3iJXLaVZ/7w8= Subject key identifier: E5:46:C6:F7:61:51:B3:82:9D:A6:C4:61:1E:9D:1F:A2:11:7A:00:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCFC1955CD2583BF75080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 397209 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:c1:95:5c:d2:58:3b:f7:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=85d51948-12bb-48c5-8845-8ead6cf5d2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6d:4b:8c:c8:ac:60:e9:55:48:48:d3:e0:03: 5c:be:4d:19:4c:2c:e6:1f:4e:0d:2b:cc:ff:cd:ac: 99:49:4d:7e:ed:07:6a:c8:3e:4f:f0:06:82:62:76: ff:8f:85:3f:a7:da:bd:9b:24:11:33:a3:d9:b8:01: e8:3f:5f:00:67:d8:2e:42:a4:ad:8e:54:fc:d1:2f: 81:11:b2:87:4a:87:b0:ac:18:ff:84:f3:93:9c:4b: bd:be:6a:a1:3a:f6:7b:41:3c:6c:97:e6:b2:2c:0e: d3:90:4f:b1:75:fc:12:ec:dd:7b:d2:a7:28:36:08: ea:d5:78:5b:4c:51:a9:da:46:9d:1e:05:2f:2d:a2: 0b:1f:3f:81:3b:10:c0:2e:ae:91:d8:25:00:89:97: bc:85:20:9f:86:a6:92:d1:27:82:b4:e6:ca:b7:64: 45:63:8b:c3:c4:4d:d3:f1:65:4e:f7:89:f2:60:71: ec:b0:f4:ba:59:3c:f6:9f:32:da:0c:13:80:ca:d2: de:d5:dd:c9:62:d1:a2:11:7d:bb:28:77:d9:b1:1a: 0c:96:bf:19:df:57:f4:a4:ef:21:d1:59:cb:ae:8b: df:c9:7d:45:0b:12:e4:93:d8:16:ba:30:93:74:96: 3e:78:33:17:35:33:20:fa:b8:35:1e:d4:94:38:70: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:46:C6:F7:61:51:B3:82:9D:A6:C4:61:1E:9D:1F:A2:11:7A:00:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a3:ff:f4:36:bd:ba:56:f7:88:7c:1c:0c:42:f8:4f:52:09: 30:27:bc:3a:af:81:78:7b:2c:ff:70:01:9b:b3:33:3e:4b:11: aa:e1:1b:b6:45:e6:41:40:51:2c:e7:5c:64:4f:12:9e:a0:6e: c0:b2:c9:56:f5:5b:60:f3:9e:aa:8c:14:a4:9b:4a:e1:85:11: 71:0b:4d:b9:4f:63:64:aa:dc:b3:16:fa:7f:80:9a:2c:21:34: 70:69:b3:9c:97:92:06:2e:8f:aa:f4:cd:b6:e1:33:91:49:ec: 57:78:c8:4a:61:c1:4b:03:98:49:48:74:21:8f:d6:1f:31:36: 23:07:67:68:41:dc:65:f9:f6:ba:77:4f:b7:aa:f5:d8:30:b7: 89:b6:da:bc:a7:26:86:e4:2d:69:7e:eb:1b:ce:cd:30:fc:74: d3:f1:aa:3b:0a:10:2a:ea:5d:c0:69:67:ae:fa:13:a3:fe:7f: 46:16:f6:ae:92:5e:ab:3c:05:0c:6a:98:37:16:1c:44:16:dd: 59:45:f5:50:f4:82:8a:5c:36:f5:06:37:c8:41:29:44:4f:59: 8f:ff:3e:4e:bb:6d:ac:49:0d:cd:a6:2e:38:45:88:27:34:c6: c7:99:b4:f3:f9:da:5a:15:cc:6f:69:64:cf:f4:82:53:75:5a: 8c:f9:71:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M/BlVzSWDv3UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk ODVkNTE5NDgtMTJiYi00OGM1LTg4NDUtOGVhZDZjZjVkMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG1LjMisYOlVSEjT4ANcvk0ZTCzmH04NK8z/ zayZSU1+7QdqyD5P8AaCYnb/j4U/p9q9myQRM6PZuAHoP18AZ9guQqStjlT80S+B EbKHSoewrBj/hPOTnEu9vmqhOvZ7QTxsl+ayLA7TkE+xdfwS7N170qcoNgjq1Xhb TFGp2kadHgUvLaILHz+BOxDALq6R2CUAiZe8hSCfhqaS0SeCtObKt2RFY4vDxE3T 8WVO94nyYHHssPS6WTz2nzLaDBOAytLe1d3JYtGiEX27KHfZsRoMlr8Z31f0pO8h 0VnLrovfyX1FCxLkk9gWujCTdJY+eDMXNTMg+rg1HtSUOHAkawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVGxvdhUbOCnabEYR6dH6IRegCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI1Njg5YTUtMWNhNC0z MjllLWExNTYtMDBjNGI4MmQ5OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGej//Q2vbpW94h8HAxC+E9SCTAnvDqvgXh7LP9wAZuzMz5LEarhG7ZF 5kFAUSznXGRPEp6gbsCyyVb1W2DznqqMFKSbSuGFEXELTblPY2Sq3LMW+n+Amiwh NHBps5yXkgYuj6r0zbbhM5FJ7Fd4yEphwUsDmElIdCGP1h8xNiMHZ2hB3GX59rp3 T7eq9dgwt4m22rynJobkLWl+6xvOzTD8dNPxqjsKECrqXcBpZ676E6P+f0YW9q6S Xqs8BQxqmDcWHEQW3VlF9VD0gopcNvUGN8hBKURPWY//Pk67baxJDc2mLjhFiCc0 xseZtPP52loVzG9pZM/0glN1Woz5cZg= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:43 2025 by rpki-client