$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a025c458-16f0-33e5-a943-a7b719b230a3.roa File: a025c458-16f0-33e5-a943-a7b719b230a3.roa (raw, json) Hash identifier: r2xSDRMLCSGHRAZ4+Y9Alf75kwXsLiodvH7Y9cbx0K8= Subject key identifier: 09:E4:29:3E:1B:11:1A:A4:71:2D:83:2E:82:72:04:AC:08:D1:70:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCBA700464BB366D3C380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a025c458-16f0-33e5-a943-a7b719b230a3.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396569 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:a7:00:46:4b:b3:66:d3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=495660e4-82da-45fe-8877-671bb6e5a9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:80:ee:6e:62:92:36:84:04:cb:12:de:7e: 7e:ee:20:02:22:99:60:cb:59:04:7a:7b:df:c1:24: 8f:ad:0f:b9:6b:7d:47:a3:1c:96:08:96:e7:1a:77: c9:db:03:02:d0:8c:80:a1:6f:bf:57:ba:7d:a5:fc: 34:e5:ec:aa:32:90:ae:81:67:22:5a:6a:c4:e4:26: e1:50:60:04:45:7f:8a:5d:18:cf:5c:9b:c5:d1:77: bc:0f:3d:1f:ed:ab:3f:9b:ca:8d:00:6c:82:da:91: 24:46:89:f7:28:ba:7a:ef:d7:66:fd:cf:63:72:36: 20:5a:9a:6d:a6:07:32:02:62:64:77:39:64:ed:9c: 7c:d9:6b:f2:01:8d:80:55:90:52:f8:e8:4e:a2:fe: bb:b4:f3:5f:f8:e9:ca:d8:a9:d7:d1:74:e2:22:c8: a6:e3:3d:ab:eb:49:42:b4:d6:1d:d5:58:fa:da:46: 3a:8e:ec:ba:17:4e:71:8e:1b:33:5b:58:5d:e7:d4: c0:54:2f:17:5e:11:cf:23:bf:cf:fc:61:9a:96:db: 4d:83:ea:3a:58:c7:7b:c9:8d:9a:c2:b8:e1:ad:a1: 0b:5e:4c:b7:6c:49:3c:b1:9d:b2:f3:e1:f1:2a:e5: 45:11:4b:ff:81:35:fb:48:02:57:93:eb:51:b2:a8: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E4:29:3E:1B:11:1A:A4:71:2D:83:2E:82:72:04:AC:08:D1:70:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a025c458-16f0-33e5-a943-a7b719b230a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:20:a6:6f:c9:7b:f4:f1:ef:f4:ed:71:08:ed:a3:da:97:ee: 5a:62:54:25:87:b6:91:6a:8e:77:e4:02:4f:50:90:59:fa:f0: 94:fe:b4:14:96:5c:d6:0f:25:2d:85:e7:24:f0:5c:06:68:3a: 6f:17:8f:d1:98:9a:70:c9:14:91:e5:c0:96:26:de:79:5c:33: cb:73:49:6b:60:2e:5c:35:ea:8e:53:4f:b4:81:f4:bc:54:76: dd:47:25:ab:23:29:f1:7a:e0:fa:c0:d2:47:eb:a0:f9:e2:15: f2:92:38:1f:36:8e:16:6f:69:1c:9f:de:90:41:95:39:bd:df: 32:1e:7e:11:f6:f8:7b:8c:18:44:5a:7c:43:a8:e6:5d:68:d2: a9:cb:ef:c9:64:ef:62:b7:4d:8b:00:83:e5:6a:65:11:6b:ff: 61:76:b6:81:de:20:93:a9:b3:6e:69:90:bf:74:02:bd:49:37: b3:f2:5d:4b:56:15:f1:82:4f:52:ca:c6:06:58:36:ba:b1:24: 37:9a:9e:20:55:9a:b8:dd:e5:0a:5b:88:eb:9c:33:0c:44:11: f4:c2:45:5a:45:8c:7e:0c:1f:41:f3:7f:73:57:b5:32:61:c5: 10:0e:fc:ee:a9:f6:d8:ba:5e:49:b6:0c:22:aa:3a:fb:03:bc: 9d:3f:61:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MunAEZLs2bTw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk NDk1NjYwZTQtODJkYS00NWZlLTg4NzctNjcxYmI2ZTVhOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdiA7m5ikjaEBMsS3n5+7iACIplgy1kEenvf wSSPrQ+5a31HoxyWCJbnGnfJ2wMC0IyAoW+/V7p9pfw05eyqMpCugWciWmrE5Cbh UGAERX+KXRjPXJvF0Xe8Dz0f7as/m8qNAGyC2pEkRon3KLp679dm/c9jcjYgWppt pgcyAmJkdzlk7Zx82WvyAY2AVZBS+OhOov67tPNf+OnK2KnX0XTiIsim4z2r60lC tNYd1Vj62kY6juy6F05xjhszW1hd59TAVC8XXhHPI7/P/GGalttNg+o6WMd7yY2a wrjhraELXky3bEk8sZ2y8+HxKuVFEUv/gTX7SAJXk+tRsqiyHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnkKT4bERqkcS2DLoJyBKwI0XCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTAyNWM0NTgtMTZmMC0z M2U1LWE5NDMtYTdiNzE5YjIzMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIgpm/Je/Tx7/TtcQjto9qX7lpiVCWHtpFqjnfkAk9QkFn68JT+tBSW XNYPJS2F5yTwXAZoOm8Xj9GYmnDJFJHlwJYm3nlcM8tzSWtgLlw16o5TT7SB9LxU dt1HJasjKfF64PrA0kfroPniFfKSOB82jhZvaRyf3pBBlTm93zIefhH2+HuMGERa fEOo5l1o0qnL78lk72K3TYsAg+VqZRFr/2F2toHeIJOps25pkL90Ar1JN7PyXUtW FfGCT1LKxgZYNrqxJDeaniBVmrjd5QpbiOucMwxEEfTCRVpFjH4MH0Hzf3NXtTJh xRAO/O6p9ti6Xkm2DCKqOvsDvJ0/YeU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:29 2025 by rpki-client