$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa File: a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa (raw, json) Hash identifier: Fq+IPyvX1gd9Wp3Lr6hgwdHtIEHfd/rmjUY2wtPaiTo= Subject key identifier: B9:0D:7F:76:85:F8:04:DB:26:AE:C5:F0:B6:E3:B7:79:F7:FA:9A:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD0CF90E40F4D37B81180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 397201 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:cf:90:e4:0f:4d:37:b8:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=ba7dfb40-a916-4d34-a585-61c903ba4fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:32:0e:e0:81:85:b3:c2:7f:9f:ed:32:20: fe:a0:82:1b:de:d7:2d:c4:62:db:4f:47:7c:d0:dc: a5:46:68:3b:67:74:03:e3:99:84:24:f9:74:83:05: 37:2e:78:4c:d6:31:89:3d:8b:d6:dc:06:5c:02:db: 3d:fe:b3:fa:38:b6:42:2a:da:aa:c3:99:fc:d1:01: 1f:69:28:d8:bf:b0:ec:b6:e1:39:c6:60:ff:0e:e4: 8c:2f:51:c1:76:77:c1:9b:66:fb:45:72:ff:75:08: 35:35:77:c4:cf:41:ec:df:9f:f7:46:a6:b2:7f:30: 24:6f:40:c4:a2:63:bf:1d:04:3f:eb:2c:81:bf:18: 8b:14:24:fe:89:0d:63:9c:1a:9a:a0:5e:a3:8d:d6: ed:ca:a8:aa:32:fe:8c:7c:95:24:86:54:23:8d:98: 7a:bd:55:e8:28:60:59:6d:39:f8:5d:3d:e9:49:0f: 3e:2e:fc:5b:e2:f5:f6:39:a6:37:dc:0f:9c:6f:a5: a4:32:67:20:bc:ee:bc:c9:5c:10:0c:24:b6:a3:09: 6d:65:21:4f:e0:1b:9b:06:82:14:f7:8e:80:9a:09: 5d:10:a8:34:57:8a:23:c2:65:71:0f:8b:fd:d8:94: 1f:31:f3:b6:3d:88:45:22:18:7e:ae:08:57:f8:61: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:7F:76:85:F8:04:DB:26:AE:C5:F0:B6:E3:B7:79:F7:FA:9A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:28:08:3c:3e:3d:28:fc:bb:6d:94:bc:a7:f1:93:9f:ef:04: 4d:9e:f2:88:d7:ba:6b:9f:0b:32:b5:59:48:ca:69:5f:6a:c1: b5:1c:fe:f2:a9:e1:53:de:75:d0:08:7f:82:ff:5f:bf:5c:fe: 91:ac:e4:40:eb:b0:83:92:fd:c5:f4:1c:45:b8:1a:bb:67:13: ef:32:18:3c:e0:14:4f:e0:e7:7f:5c:84:f0:0c:be:eb:19:48: 82:d6:5a:6b:3d:0c:78:e2:65:6c:e1:f1:47:ac:47:8e:da:3f: 58:8d:d8:bd:6c:ff:ef:1b:af:54:e2:42:7c:7e:86:e6:c2:0e: 9d:6b:b0:37:e0:ae:61:8d:ad:73:42:5e:02:fb:40:90:5f:11: 61:ec:96:68:39:50:0b:90:9b:98:f1:3f:09:7f:d4:c2:20:e6: 5f:87:b8:6e:aa:54:54:48:44:32:22:7a:3e:f9:52:22:b3:da: 12:6a:db:f3:fe:10:c0:28:1b:ae:27:3f:9f:a2:ca:97:19:07: 56:46:7b:43:6b:0c:aa:31:7a:d9:47:28:5f:7e:4c:52:4e:a3: 5a:f6:73:5f:de:4a:a4:40:83:33:97:44:23:14:5a:2b:fe:80: 5b:2a:27:90:06:7e:b0:27:c6:51:08:57:14:69:71:9e:6f:f2: 9d:b8:2d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NDPkOQPTTe4EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk YmE3ZGZiNDAtYTkxNi00ZDM0LWE1ODUtNjFjOTAzYmE0ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl08yDuCBhbPCf5/tMiD+oIIb3tctxGLbT0d8 0NylRmg7Z3QD45mEJPl0gwU3LnhM1jGJPYvW3AZcAts9/rP6OLZCKtqqw5n80QEf aSjYv7DstuE5xmD/DuSML1HBdnfBm2b7RXL/dQg1NXfEz0Hs35/3RqayfzAkb0DE omO/HQQ/6yyBvxiLFCT+iQ1jnBqaoF6jjdbtyqiqMv6MfJUkhlQjjZh6vVXoKGBZ bTn4XT3pSQ8+Lvxb4vX2OaY33A+cb6WkMmcgvO68yVwQDCS2owltZSFP4BubBoIU 946AmgldEKg0V4ojwmVxD4v92JQfMfO2PYhFIhh+rghX+GFLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkNf3aF+ATbJq7F8Lbjt3n3+prnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwMTljZTAtNmVlOS0z YTAxLWJmYmEtOWJmNDA4NmY4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIoCDw+PSj8u22UvKfxk5/vBE2e8ojXumufCzK1WUjKaV9qwbUc/vKp 4VPeddAIf4L/X79c/pGs5EDrsIOS/cX0HEW4GrtnE+8yGDzgFE/g539chPAMvusZ SILWWms9DHjiZWzh8UesR47aP1iN2L1s/+8br1TiQnx+hubCDp1rsDfgrmGNrXNC XgL7QJBfEWHslmg5UAuQm5jxPwl/1MIg5l+HuG6qVFRIRDIiej75UiKz2hJq2/P+ EMAoG64nP5+iypcZB1ZGe0NrDKoxetlHKF9+TFJOo1r2c1/eSqRAgzOXRCMUWiv+ gFsqJ5AGfrAnxlEIVxRpcZ5v8p24LQs= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:02 2025 by rpki-client