$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4eb392b-e0ef-3830-8b7f-a0ba243d0c82.roa File: a4eb392b-e0ef-3830-8b7f-a0ba243d0c82.roa (raw, json) Hash identifier: ZVf/+W4OJWecotafhINo2Z3VrqBND8ClIpSnffC44bk= Subject key identifier: 99:1F:CE:5C:95:AA:D7:8A:CF:60:C6:12:60:90:41:56:8E:0B:C8:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCA6AF5B1D3CD9C2A9680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4eb392b-e0ef-3830-8b7f-a0ba243d0c82.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396567 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ca:6a:f5:b1:d3:cd:9c:2a:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=884f285d-8d17-40c7-a2f0-20a05e5536fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:47:06:eb:a5:24:e8:a9:c9:14:1f:da:84: 78:be:2a:65:43:d3:2d:bc:1b:29:52:e2:f2:49:57: 1e:9b:47:65:8f:6a:71:7a:8b:1f:6a:ef:5e:c0:87: bb:98:ad:e7:6d:64:19:42:f5:43:e6:69:80:3b:6a: 09:97:72:b5:a4:df:21:8d:b5:ef:92:24:ae:20:0f: 83:25:69:5b:0e:25:3e:c6:41:31:93:35:ca:02:1c: 08:1a:04:9b:0b:dc:91:ec:97:f5:89:ed:83:56:95: 0c:5d:0f:ef:7a:04:7e:13:8f:fd:4d:ea:17:2d:7b: 39:5f:79:4f:80:50:e7:14:f3:f0:4a:3b:6b:9f:f3: d3:6a:24:e2:e4:18:cb:32:b8:4a:d9:88:df:e7:b3: 3b:5e:21:60:90:0c:38:47:ee:a4:a1:22:c2:cd:b0: 84:b8:3e:91:7e:1d:0d:02:e2:15:14:88:4e:11:40: 28:a6:56:53:e8:e0:bc:2c:64:1c:df:59:ba:26:98: 34:84:28:f1:f2:fd:d4:91:30:8c:ae:18:da:c1:86: c4:87:59:05:d2:10:5f:16:74:8c:68:2e:b5:a3:45: 87:30:b1:d2:18:42:78:cb:7b:3a:ba:c8:b5:93:0a: 14:1c:47:7d:2c:44:e5:65:e0:8c:3c:b8:6a:54:5b: e6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:CE:5C:95:AA:D7:8A:CF:60:C6:12:60:90:41:56:8E:0B:C8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4eb392b-e0ef-3830-8b7f-a0ba243d0c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:46:8e:94:5c:f6:8d:81:4b:61:85:40:0c:e9:e3:a9:3c:f5: 13:be:f8:f3:e2:85:d9:e5:b3:b1:a3:9c:d7:e9:d2:4f:0f:17: 56:10:ae:e2:e0:3a:cd:d6:ef:74:ca:7a:2f:be:9f:d5:7b:ee: e6:06:93:46:02:49:8e:f9:38:08:52:65:ae:8a:f4:b3:1a:df: 97:e8:15:bc:4a:2d:bd:5d:0d:90:53:9d:41:61:56:89:38:ae: 3c:8c:09:c8:92:e3:7c:29:91:d7:09:23:3f:14:86:74:44:82: 66:c9:e6:dd:a4:1b:c5:60:75:f4:9f:4c:8a:75:2e:57:44:87: e7:3f:ac:f5:52:ef:45:f4:55:ef:10:ed:4c:90:04:f8:1e:5f: 23:93:29:44:14:27:1b:5c:b2:49:35:2e:9f:67:8f:16:8c:98: bd:34:85:c0:6f:ea:dd:76:d8:ea:b7:d6:ec:8f:d8:5b:20:9b: d1:a1:10:a5:9a:14:95:ff:79:d1:09:44:9a:88:ac:d6:cf:94: f7:0a:0c:6c:42:cb:c2:6c:08:11:1b:7d:73:2b:43:16:df:07: 28:de:8e:2f:90:bb:03:52:99:28:66:38:1f:bf:e7:2d:1b:5a: 82:52:e0:75:60:b5:65:a5:c5:7a:02:65:db:03:3a:d5:7f:d1: cf:df:58:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mpq9bHTzZwqloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk ODg0ZjI4NWQtOGQxNy00MGM3LWEyZjAtMjBhMDVlNTUzNmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii9HBuulJOipyRQf2oR4viplQ9MtvBspUuLy SVcem0dlj2pxeosfau9ewIe7mK3nbWQZQvVD5mmAO2oJl3K1pN8hjbXvkiSuIA+D JWlbDiU+xkExkzXKAhwIGgSbC9yR7Jf1ie2DVpUMXQ/vegR+E4/9TeoXLXs5X3lP gFDnFPPwSjtrn/PTaiTi5BjLMrhK2Yjf57M7XiFgkAw4R+6koSLCzbCEuD6Rfh0N AuIVFIhOEUAoplZT6OC8LGQc31m6Jpg0hCjx8v3UkTCMrhjawYbEh1kF0hBfFnSM aC61o0WHMLHSGEJ4y3s6usi1kwoUHEd9LETlZeCMPLhqVFvm0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkfzlyVqteKz2DGEmCQQVaOC8hZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTRlYjM5MmItZTBlZi0z ODMwLThiN2YtYTBiYTI0M2QwYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhGjpRc9o2BS2GFQAzp46k89RO++PPihdnls7GjnNfp0k8PF1YQruLg Os3W73TKei++n9V77uYGk0YCSY75OAhSZa6K9LMa35foFbxKLb1dDZBTnUFhVok4 rjyMCciS43wpkdcJIz8UhnREgmbJ5t2kG8VgdfSfTIp1LldEh+c/rPVS70X0Ve8Q 7UyQBPgeXyOTKUQUJxtcskk1Lp9njxaMmL00hcBv6t122Oq31uyP2Fsgm9GhEKWa FJX/edEJRJqIrNbPlPcKDGxCy8JsCBEbfXMrQxbfByjeji+QuwNSmShmOB+/5y0b WoJS4HVgtWWlxXoCZdsDOtV/0c/fWAk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:36 2025 by rpki-client