$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa File: aa3aaa0b-972a-3dc5-aeb1-702709556878.roa (raw, json) Hash identifier: DIxE+PJu0OEK8ME+rXxFpwMK2K6wOuaYfCuHkyVgwiw= Subject key identifier: 5A:31:9D:14:06:3C:59:77:7B:9C:BB:FD:EB:82:DD:14:EF:54:CE:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCA5DED220B801C7F3900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 25485 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ca:5d:ed:22:0b:80:1c:7f:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=49d1b82b-0c9c-43e5-acb2-f1460963bc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:15:92:64:87:b0:d3:c1:12:a2:ac:51:5e: 05:15:2b:f0:e3:9e:4c:ed:17:5a:22:00:ef:f7:de: 44:f7:82:5f:ff:08:53:ae:3e:ed:6d:d4:1b:63:25: 5c:45:9a:6e:34:d4:e1:06:c6:94:f5:ab:9a:da:60: 0d:20:60:5f:bd:9a:1a:c5:72:04:6f:10:47:87:a0: 88:ca:a9:1e:47:23:e1:97:11:f1:86:c8:cd:4a:cf: 87:0f:4d:eb:f7:63:8b:c5:b1:a4:74:2d:21:df:f8: f6:7c:43:ea:db:30:6e:9d:61:0f:49:20:36:31:08: 89:84:56:11:3b:59:f1:70:21:a1:0b:c1:c3:c6:ab: f7:97:ee:d1:89:90:9d:6e:6a:19:0b:45:d3:d4:c2: 28:75:44:75:25:f7:5e:79:5a:53:df:98:ef:ea:92: f0:87:ba:65:40:77:ac:e2:5a:1f:df:c9:d4:a3:c6: 7a:a5:2b:d0:12:12:35:35:03:c1:0e:40:40:46:b7: e2:5c:83:62:c8:68:f4:28:07:9e:69:97:cd:90:5c: f8:e0:97:2b:65:15:4b:62:5e:e6:42:c3:91:51:f8: d0:20:fb:ae:0b:dc:c8:2b:28:6c:8c:d5:f4:ba:f2: bb:51:ad:d6:e3:56:18:6a:8a:d6:5f:13:e4:10:18: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:9D:14:06:3C:59:77:7B:9C:BB:FD:EB:82:DD:14:EF:54:CE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:73:89:08:bb:5a:28:2d:b8:b2:b3:22:67:55:8a:cf:dc:a0: 67:32:b0:94:75:92:b1:85:32:e5:e3:fb:03:01:4c:e7:0a:2b: 81:8f:0d:83:3a:d7:d8:0e:2f:52:30:4e:97:3a:74:17:1a:79: dd:41:03:14:77:6c:71:4e:c3:19:53:3e:fe:2e:e7:f8:77:13: 5b:59:b0:46:5a:aa:e2:c8:f1:b3:6a:24:91:92:d8:6c:f1:ef: 21:00:21:4b:e9:56:15:72:84:6c:bd:8b:42:4b:10:fc:11:75: 40:38:42:6a:17:08:96:d4:4c:ef:10:55:47:90:09:0e:e7:4b: 78:d1:d5:c5:7a:4e:9a:56:33:c1:43:73:6e:3d:a7:f9:c5:c2: 3a:d2:5c:f2:3c:fc:ee:eb:85:3d:cc:97:5f:34:c1:74:6e:32: 68:41:51:e4:c6:aa:f3:0c:bd:bc:25:63:25:5b:75:9f:03:40: 7f:2b:d3:3b:20:a7:cf:13:0a:cf:db:77:7b:e5:f4:e8:f7:c2: eb:09:20:2a:f1:7a:76:6d:af:90:6e:6f:b1:33:34:d8:0f:d9: 3d:4b:1e:e2:8b:ab:1f:3a:8d:62:2a:88:b3:68:54:c5:66:2f: 6b:ae:70:2d:52:c6:3c:21:93:34:51:ff:ac:08:5f:bd:ad:4b: 4d:6e:a0:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mpd7SILgBx/OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk NDlkMWI4MmItMGM5Yy00M2U1LWFjYjItZjE0NjA5NjNiYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZkVkmSHsNPBEqKsUV4FFSvw455M7RdaIgDv 995E94Jf/whTrj7tbdQbYyVcRZpuNNThBsaU9aua2mANIGBfvZoaxXIEbxBHh6CI yqkeRyPhlxHxhsjNSs+HD03r92OLxbGkdC0h3/j2fEPq2zBunWEPSSA2MQiJhFYR O1nxcCGhC8HDxqv3l+7RiZCdbmoZC0XT1MIodUR1JfdeeVpT35jv6pLwh7plQHes 4lof38nUo8Z6pSvQEhI1NQPBDkBARrfiXINiyGj0KAeeaZfNkFz44JcrZRVLYl7m QsORUfjQIPuuC9zIKyhsjNX0uvK7Ua3W41YYaorWXxPkEBiG2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoxnRQGPFl3e5y7/euC3RTvVM7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEzYWFhMGItOTcyYS0z ZGM1LWFlYjEtNzAyNzA5NTU2ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZziQi7WigtuLKzImdVis/coGcysJR1krGFMuXj+wMBTOcKK4GPDYM6 19gOL1IwTpc6dBcaed1BAxR3bHFOwxlTPv4u5/h3E1tZsEZaquLI8bNqJJGS2Gzx 7yEAIUvpVhVyhGy9i0JLEPwRdUA4QmoXCJbUTO8QVUeQCQ7nS3jR1cV6TppWM8FD c249p/nFwjrSXPI8/O7rhT3Ml180wXRuMmhBUeTGqvMMvbwlYyVbdZ8DQH8r0zsg p88TCs/bd3vl9Oj3wusJICrxenZtr5Bub7EzNNgP2T1LHuKLqx86jWIqiLNoVMVm L2uucC1SxjwhkzRR/6wIX72tS01uoIQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:17 2025 by rpki-client