$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a86eeeff-ed96-33d9-8237-580ebf5c677b.roa File: a86eeeff-ed96-33d9-8237-580ebf5c677b.roa (raw, json) Hash identifier: stn5nXPKUo+5s1m9VHLyAKewqIO+hxTMbeIXo0FjmsM= Subject key identifier: 32:F6:2B:08:E3:FC:0D:94:0F:96:81:B3:3E:54:77:8C:D6:DD:C3:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB6AC8A7C0B1D5F857A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a86eeeff-ed96-33d9-8237-580ebf5c677b.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396570 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:6a:c8:a7:c0:b1:d5:f8:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=e89c02dd-e918-4c5b-8c8b-fee4e35a719c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3b:3c:e2:56:7e:f0:d8:49:5e:df:03:6e:29: 18:f4:3b:a0:44:c9:26:49:37:98:de:a5:d7:0c:7e: e7:1a:0a:78:aa:4e:53:52:31:1a:7f:3d:92:a5:c6: 4e:af:0b:12:82:af:85:69:61:a1:02:36:1a:8f:73: c7:65:06:0d:77:09:17:45:01:99:b5:72:8a:2e:aa: 9f:70:3c:f3:a2:2f:12:2d:b1:98:b7:27:d7:39:8a: e2:ba:c0:b5:82:c6:5f:e9:a8:0c:f9:3f:4f:d6:66: 83:25:85:9f:5d:7e:1a:93:93:66:8b:85:40:fa:81: 60:44:d0:d9:66:a6:39:bf:08:39:78:f9:1b:e2:d8: 7a:99:84:09:3f:64:fc:32:c4:46:81:09:c3:09:47: a4:ff:4f:88:03:04:bf:a1:bb:d8:72:7b:5d:68:73: 96:aa:37:46:22:ca:0e:c3:9b:5f:09:14:8b:4a:58: 2e:7d:ce:61:b6:db:42:da:54:e6:a5:30:f3:9c:79: 24:87:d7:50:42:bc:b5:12:e9:bb:d9:2e:12:9b:09: 86:44:f0:13:a0:1f:58:78:c4:4c:06:25:91:87:ad: 53:e6:74:94:25:ff:db:9f:75:76:b2:5f:30:af:d8: 7b:51:65:78:a9:05:69:a5:56:96:b8:86:a8:2b:e7: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F6:2B:08:E3:FC:0D:94:0F:96:81:B3:3E:54:77:8C:D6:DD:C3:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a86eeeff-ed96-33d9-8237-580ebf5c677b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:22:c4:db:e8:8b:bd:4b:e4:ab:46:7d:46:e0:b7:1d:81:31: 9a:75:c8:1d:9c:40:dd:6a:60:04:89:9c:aa:58:a4:b3:b7:fe: 46:e6:33:ea:21:d7:ad:8e:7e:23:34:17:63:ac:29:60:3a:04: f4:a0:b3:3e:5f:c2:4e:29:4e:54:79:9f:95:0a:de:47:73:9f: f0:c7:67:9c:3b:d5:9b:d3:02:5b:9a:c1:19:43:30:6f:fe:77: 18:1d:cc:e2:59:13:9a:06:e4:ac:c3:cf:14:65:85:b6:e0:83: 62:25:85:15:fb:1d:5b:31:69:fa:e5:c5:82:42:bc:21:32:fe: 3c:66:3f:d1:a1:f0:c2:ee:ab:50:2c:c9:23:be:fb:ee:93:0e: 79:66:2e:16:ce:22:66:0a:04:9c:09:3b:d5:97:12:fb:30:33: 8a:1b:57:60:eb:02:62:2b:84:8a:1d:78:fc:12:d9:2d:5e:e4: 9d:22:38:37:ef:ed:5f:6a:9e:f2:df:95:ee:c3:12:34:6b:37: 3f:e8:7b:8f:36:50:6b:ee:70:97:7d:80:5f:3f:ff:40:78:ea: 29:f0:10:69:c0:5d:19:19:3f:20:80:f9:32:b9:49:cb:11:c0: 77:a6:a1:e3:80:16:c6:6e:9b:6d:6f:11:0c:d7:aa:26:32:ec: c2:64:35:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MtqyKfAsdX4V6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk ZTg5YzAyZGQtZTkxOC00YzViLThjOGItZmVlNGUzNWE3MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ts84lZ+8NhJXt8DbikY9DugRMkmSTeY3qXX DH7nGgp4qk5TUjEafz2SpcZOrwsSgq+FaWGhAjYaj3PHZQYNdwkXRQGZtXKKLqqf cDzzoi8SLbGYtyfXOYriusC1gsZf6agM+T9P1maDJYWfXX4ak5Nmi4VA+oFgRNDZ ZqY5vwg5ePkb4th6mYQJP2T8MsRGgQnDCUek/0+IAwS/obvYcntdaHOWqjdGIsoO w5tfCRSLSlgufc5htttC2lTmpTDznHkkh9dQQry1Eum72S4SmwmGRPAToB9YeMRM BiWRh61T5nSUJf/bn3V2sl8wr9h7UWV4qQVppVaWuIaoK+d8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL2Kwjj/A2UD5aBsz5Ud4zW3cPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg2ZWVlZmYtZWQ5Ni0z M2Q5LTgyMzctNTgwZWJmNWM2NzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsixNvoi71L5KtGfUbgtx2BMZp1yB2cQN1qYASJnKpYpLO3/kbmM+oh 162OfiM0F2OsKWA6BPSgsz5fwk4pTlR5n5UK3kdzn/DHZ5w71ZvTAluawRlDMG/+ dxgdzOJZE5oG5KzDzxRlhbbgg2IlhRX7HVsxafrlxYJCvCEy/jxmP9Gh8MLuq1As ySO+++6TDnlmLhbOImYKBJwJO9WXEvswM4obV2DrAmIrhIodePwS2S1e5J0iODfv 7V9qnvLfle7DEjRrNz/oe482UGvucJd9gF8//0B46inwEGnAXRkZPyCA+TK5ScsR wHemoeOAFsZum21vEQzXqiYy7MJkNaU= -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:14 2025 by rpki-client