$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa File: 9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa (raw, json) Hash identifier: NYLGF1FoSyHSfvbe3v1LGS/0g+xaxIsKo51x8K8PBpY= Subject key identifier: A3:1C:B4:15:6A:4B:9C:D6:F2:A2:1D:F3:0F:60:AA:16:57:0D:FD:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD072D0954F12AB4868EC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 396553 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:72:d0:95:4f:12:ab:48:68:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=98db2769-cde5-45e4-bec4-5372fca0ccd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:17:99:16:87:fb:b9:0a:65:9d:7b:6e:dc: a7:fd:7e:52:49:75:d8:68:ad:6f:9b:c5:9b:0d:3b: ea:2a:76:ca:14:25:e0:bc:e3:1b:67:ba:55:7a:b9: f1:36:ce:d8:29:2c:8b:0f:e1:d0:9d:81:6d:20:b3: 2c:fe:5a:33:5c:84:52:c3:cd:de:5f:90:3a:4e:6f: ed:5c:71:09:2b:d6:3f:de:80:e8:12:fb:a3:45:16: ce:7b:3f:da:e5:fc:af:f4:23:76:0b:24:17:27:d3: d8:b7:78:74:d8:e6:49:87:46:d6:be:6c:2c:80:bc: 2a:40:31:40:24:31:91:be:f9:f1:03:70:06:93:1c: 9d:6a:7e:fa:e2:bc:8b:93:98:fa:ea:b1:1b:ae:44: cb:1b:9d:bd:a2:a3:93:b7:07:dd:c3:86:02:6d:94: 49:7e:80:68:ba:ad:84:3b:9c:40:7d:50:39:d0:82: 48:e8:80:68:e5:2f:e8:73:0d:65:ba:b6:1d:96:17: d9:13:e7:9c:fe:04:11:cf:24:85:fe:f2:53:ab:5b: 88:bf:d2:58:32:a2:1c:78:44:76:35:1e:16:c5:a4: 16:58:4a:97:22:47:26:38:e0:0b:f8:5f:f9:68:05: 27:34:49:22:7d:06:13:72:6f:8a:c8:4b:e6:70:62: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1C:B4:15:6A:4B:9C:D6:F2:A2:1D:F3:0F:60:AA:16:57:0D:FD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7a:a9:f3:c0:a9:f3:35:52:80:40:0d:4a:35:78:86:a8:aa: 0e:0b:ea:da:b5:f2:8b:36:a9:bd:3f:ec:9e:b3:d3:42:86:a4: 12:57:7c:ce:59:f6:85:13:f5:16:b8:c2:9e:2b:0b:19:55:cb: 06:4a:bc:c0:59:0e:b4:5a:0a:7d:1b:39:27:89:a3:93:c3:72: bb:a2:c3:0d:9c:18:bd:1f:6b:d8:6a:75:b9:1f:7b:c2:b9:60: 46:05:2a:6f:9c:b7:2b:df:96:96:f9:6d:f4:0c:57:df:cd:85: 57:41:dd:e9:db:57:58:d6:7b:aa:58:ad:cd:fc:3c:9f:62:97: 22:82:e9:b7:58:6b:9e:32:53:da:b8:12:f2:31:7d:43:9a:01: ca:d1:c4:cd:1b:c0:ed:19:8b:df:a1:9b:15:a5:56:40:25:f6: 61:a8:e5:14:28:eb:26:f2:0f:0d:10:a0:b5:28:6c:a6:68:aa: dd:1b:49:34:b4:24:f1:ac:e4:af:5a:a2:b2:87:ab:b9:0e:86: 01:fc:06:3a:87:4c:ed:4f:de:31:e6:31:b9:77:35:89:b9:55: 00:eb:0d:e9:ca:97:b8:d9:44:f6:44:ad:a3:40:05:d4:97:0d: cd:0b:5f:37:a7:4e:da:cf:78:97:80:47:96:1c:a7:c3:39:ec: 56:c4:80:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NBy0JVPEqtIaOwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk OThkYjI3NjktY2RlNS00NWU0LWJlYzQtNTM3MmZjYTBjY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzQXmRaH+7kKZZ17btyn/X5SSXXYaK1vm8Wb DTvqKnbKFCXgvOMbZ7pVernxNs7YKSyLD+HQnYFtILMs/lozXIRSw83eX5A6Tm/t XHEJK9Y/3oDoEvujRRbOez/a5fyv9CN2CyQXJ9PYt3h02OZJh0bWvmwsgLwqQDFA JDGRvvnxA3AGkxydan764ryLk5j66rEbrkTLG529oqOTtwfdw4YCbZRJfoBouq2E O5xAfVA50IJI6IBo5S/ocw1lurYdlhfZE+ec/gQRzySF/vJTq1uIv9JYMqIceER2 NR4WxaQWWEqXIkcmOOAL+F/5aAUnNEkifQYTcm+KyEvmcGK+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMctBVqS5zW8qId8w9gqhZXDf17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWUyMWJjMmUtNmUzMi0z M2MyLWJlMzUtM2UwOWQyYThhZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE56qfPAqfM1UoBADUo1eIaoqg4L6tq18os2qb0/7J6z00KGpBJXfM5Z 9oUT9Ra4wp4rCxlVywZKvMBZDrRaCn0bOSeJo5PDcruiww2cGL0fa9hqdbkfe8K5 YEYFKm+ctyvflpb5bfQMV9/NhVdB3enbV1jWe6pYrc38PJ9ilyKC6bdYa54yU9q4 EvIxfUOaAcrRxM0bwO0Zi9+hmxWlVkAl9mGo5RQo6ybyDw0QoLUobKZoqt0bSTS0 JPGs5K9aorKHq7kOhgH8BjqHTO1P3jHmMbl3NYm5VQDrDenKl7jZRPZEraNABdSX Dc0LXzenTtrPeJeAR5Ycp8M57FbEgBU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:13 2025 by rpki-client