$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa File: a2894194-5977-35b0-91f8-795131d217be.roa (raw, json) Hash identifier: GOimBNgkNkCEquevmjSySaZIQG6PJ3IwDfM5wYWp7F4= Subject key identifier: 06:0C:CA:89:11:80:28:C8:81:8B:39:3B:A6:EA:97:59:DB:72:BE:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD4B16F66FF40FFE5200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396599 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:4b:16:f6:6f:f4:0f:fe:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=d37d8b3d-51b1-4a1e-ab74-72832e208a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:f4:2a:28:be:17:51:88:ad:3a:6d:d1:9d: bb:09:88:16:e4:0d:9b:46:a8:6b:fa:b6:78:05:49: da:fa:62:26:6b:48:86:ee:4f:cc:c3:ec:c1:96:f4: 50:29:82:9b:0c:2c:11:e1:87:c1:aa:09:e0:50:7a: af:91:06:66:02:71:7f:22:3c:c7:cd:14:fe:ce:9b: 9e:1f:ab:cb:b9:57:47:31:13:e0:d0:6b:20:79:5a: aa:54:cf:94:28:f7:56:15:47:62:b4:f4:da:86:45: 93:27:9b:0e:70:ae:6f:64:c7:e0:bb:3e:c3:8c:8e: 56:69:82:40:e6:d4:05:28:ef:23:e7:a3:a3:0e:c2: d9:d0:ac:34:fc:44:1c:65:72:e6:95:89:cc:72:a2: e2:93:0f:60:78:52:ea:39:e3:a1:e9:9f:e2:9e:7d: dd:7e:8a:0d:f0:2f:94:b7:65:15:8e:9b:66:56:3b: 3f:a8:44:4a:56:39:46:30:7f:33:96:50:28:d3:45: bf:2d:f8:91:a3:2c:f8:6b:12:89:46:68:23:2b:05: 89:77:11:6a:ea:22:84:5b:9e:f1:56:f1:a2:9b:84: aa:7d:50:87:97:3c:44:47:06:25:14:1e:12:10:58: 6b:e0:37:98:35:b0:11:8d:6a:a4:e8:63:92:11:8d: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0C:CA:89:11:80:28:C8:81:8B:39:3B:A6:EA:97:59:DB:72:BE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:5c:cc:bb:b7:1c:5e:85:0a:86:db:39:88:7d:79:21:55: 51:83:11:22:88:ff:06:15:f3:e9:fe:ad:c6:22:c2:60:b2:00: 03:32:09:5d:0e:61:c4:e3:1a:89:94:fe:fd:06:d6:f8:9b:c9: 04:22:d1:b5:86:20:1e:63:df:4a:88:6b:7e:cb:02:72:fc:b6: bc:a3:3f:0f:21:d7:9b:d5:a0:98:1e:f2:ba:be:72:d8:c5:f2: 1a:88:70:87:ac:c8:31:bb:cb:c7:c8:3a:93:f8:dd:bf:c3:90: 25:d6:19:39:a3:6b:c0:aa:12:99:32:c0:38:3b:f0:7e:18:e9: 15:b6:27:f8:64:06:6e:a2:ba:1b:dd:e6:50:c3:e4:8c:5e:08: f6:b4:8a:e1:5a:d8:4c:67:ea:66:73:a8:c3:14:5f:81:61:8f: 9b:d4:08:87:84:16:c0:4b:01:90:02:35:07:f8:2a:4c:b0:44: 7a:3e:40:0a:0f:75:dc:27:3c:b2:e9:18:6c:07:fa:03:c0:ff: 59:68:fc:b5:b2:54:f4:c9:e1:3e:e5:28:d2:73:3d:7d:af:d5: 65:03:10:3f:3b:93:fc:5b:ac:7a:9f:dd:73:e8:83:06:34:51: 70:40:66:8d:b8:c6:0e:c3:f0:56:99:74:e6:38:87:02:1b:b1: d9:d6:d2:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M1LFvZv9A/+UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk ZDM3ZDhiM2QtNTFiMS00YTFlLWFiNzQtNzI4MzJlMjA4YTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUj0Kii+F1GIrTpt0Z27CYgW5A2bRqhr+rZ4 BUna+mIma0iG7k/Mw+zBlvRQKYKbDCwR4YfBqgngUHqvkQZmAnF/IjzHzRT+zpue H6vLuVdHMRPg0GsgeVqqVM+UKPdWFUditPTahkWTJ5sOcK5vZMfguz7DjI5WaYJA 5tQFKO8j56OjDsLZ0Kw0/EQcZXLmlYnMcqLikw9geFLqOeOh6Z/inn3dfooN8C+U t2UVjptmVjs/qERKVjlGMH8zllAo00W/LfiRoyz4axKJRmgjKwWJdxFq6iKEW57x VvGim4SqfVCHlzxERwYlFB4SEFhr4DeYNbARjWqk6GOSEY0BLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYMyokRgCjIgYs5O6bql1nbcr7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI4OTQxOTQtNTk3Ny0z NWIwLTkxZjgtNzk1MTMxZDIxN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVxXMy7txxehQqG2zmIfXkhVVGDESKI/wYV8+n+rcYiwmCyAAMyCV0O YcTjGomU/v0G1vibyQQi0bWGIB5j30qIa37LAnL8tryjPw8h15vVoJge8rq+ctjF 8hqIcIesyDG7y8fIOpP43b/DkCXWGTmja8CqEpkywDg78H4Y6RW2J/hkBm6iuhvd 5lDD5IxeCPa0iuFa2Exn6mZzqMMUX4Fhj5vUCIeEFsBLAZACNQf4KkywRHo+QAoP ddwnPLLpGGwH+gPA/1lo/LWyVPTJ4T7lKNJzPX2v1WUDED87k/xbrHqf3XPogwY0 UXBAZo24xg7D8FaZdOY4hwIbsdnW0m4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:08 2025 by rpki-client