$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa File: aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa (raw, json) Hash identifier: lsu/st/GDCT/qXQyackt0SbBGIJToQdZtAaabfzchmI= Subject key identifier: 85:79:87:07:AF:3C:4D:40:23:FE:74:26:10:C1:4A:D7:E1:73:65:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC0F0C91961A38B48100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396595 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:0f:0c:91:96:1a:38:b4:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=bce00478-9c05-41fa-809d-76fd7cc2d3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:ac:ad:e7:d2:7b:74:0d:8b:86:2a:cf:17: cc:fd:dd:a9:aa:18:18:6d:69:a3:04:6e:7d:42:6c: 5d:d1:cc:3d:e0:79:0f:b1:c5:4a:c2:59:80:ce:45: 2c:17:3a:35:d6:33:4d:0c:5a:e6:36:3e:90:fe:54: 51:70:94:6d:33:46:01:02:2e:dd:53:cd:a1:61:ce: c2:be:59:54:97:ea:71:bc:c7:8c:87:98:4f:8c:a5: 35:47:05:7b:c9:0e:72:df:51:95:3d:11:fd:20:ff: 1b:22:73:af:bb:e3:de:53:18:7e:eb:6c:31:16:24: c5:a3:e7:81:b3:bd:ca:1c:e4:b0:b1:d2:fe:45:1e: df:14:3a:be:ff:ed:d0:db:c7:ef:d5:82:18:fe:21: a6:23:a1:ce:45:47:66:1d:6a:60:a5:c4:c6:d2:4c: f6:ae:16:c1:ba:61:96:d7:09:05:8c:be:d3:a2:aa: 81:db:53:59:2b:3c:9a:00:53:ef:0c:80:c5:f9:93: c6:70:e0:55:a7:63:5a:06:60:5a:d1:d9:f7:c0:53: 77:f6:8d:e0:ea:c4:46:9d:90:a6:59:43:b0:7e:a0: 32:51:dc:0b:ac:ba:a6:7a:3f:85:d3:ba:35:51:15: d3:fd:80:45:a1:b7:fd:8c:47:73:42:c0:5e:6b:31: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:79:87:07:AF:3C:4D:40:23:FE:74:26:10:C1:4A:D7:E1:73:65:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:50:61:64:65:97:bb:89:35:28:50:f3:40:6f:81:14:af:1c: fe:bb:92:24:3a:54:73:33:51:79:bb:5a:6d:e8:a8:b6:4d:67: 5e:a3:74:d9:c5:9a:43:ad:58:92:0b:ec:a9:bb:a8:b3:79:61: ac:5d:4d:8d:fb:f1:7f:63:62:0f:ca:5e:38:23:50:37:ba:5e: c5:39:fa:49:ab:8c:9a:fb:b5:30:5a:30:d7:48:1c:95:9d:ec: 68:4d:f4:1e:4a:ea:50:c4:02:fe:e8:25:59:8c:90:30:22:41: 23:35:30:af:57:98:59:ac:51:7d:e8:c8:e9:16:35:ed:66:a2: f8:3f:4b:44:40:4d:d1:f7:b9:49:01:11:60:59:26:8b:8d:0b: 77:a0:e6:75:39:5b:80:57:8b:81:53:ea:2d:59:36:4a:7a:67: 96:0c:8f:4e:5e:c7:2a:27:64:4b:ee:37:9b:46:56:d2:19:c7: bd:09:68:58:ee:69:b9:0d:0a:10:62:26:8a:bf:83:13:68:c3: 58:d2:f4:2c:5a:5c:38:12:17:5f:e6:7c:c5:87:58:8d:5f:04: a7:83:35:60:1c:cc:32:ad:ad:7d:36:76:20:6a:80:9a:cb:b4: e1:c3:09:36:2e:6c:6b:f7:50:2e:c3:54:c6:83:58:73:f6:c2: 35:75:8b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MwPDJGWGji0gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk YmNlMDA0NzgtOWMwNS00MWZhLTgwOWQtNzZmZDdjYzJkM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyesrefSe3QNi4YqzxfM/d2pqhgYbWmjBG59 Qmxd0cw94HkPscVKwlmAzkUsFzo11jNNDFrmNj6Q/lRRcJRtM0YBAi7dU82hYc7C vllUl+pxvMeMh5hPjKU1RwV7yQ5y31GVPRH9IP8bInOvu+PeUxh+62wxFiTFo+eB s73KHOSwsdL+RR7fFDq+/+3Q28fv1YIY/iGmI6HORUdmHWpgpcTG0kz2rhbBumGW 1wkFjL7ToqqB21NZKzyaAFPvDIDF+ZPGcOBVp2NaBmBa0dn3wFN39o3g6sRGnZCm WUOwfqAyUdwLrLqmej+F07o1URXT/YBFobf9jEdzQsBeazFUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIV5hwevPE1AI/50JhDBStfhc2W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE4ZjhiNTEtNzNhYS0z YzZiLWFiY2ItZTUxNjI5MGJkYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhQYWRll7uJNShQ80BvgRSvHP67kiQ6VHMzUXm7Wm3oqLZNZ16jdNnF mkOtWJIL7Km7qLN5YaxdTY378X9jYg/KXjgjUDe6XsU5+kmrjJr7tTBaMNdIHJWd 7GhN9B5K6lDEAv7oJVmMkDAiQSM1MK9XmFmsUX3oyOkWNe1movg/S0RATdH3uUkB EWBZJouNC3eg5nU5W4BXi4FT6i1ZNkp6Z5YMj05exyonZEvuN5tGVtIZx70JaFju abkNChBiJoq/gxNow1jS9CxaXDgSF1/mfMWHWI1fBKeDNWAczDKtrX02diBqgJrL tOHDCTYubGv3UC7DVMaDWHP2wjV1i8s= -----END CERTIFICATE-----Generated at Wed Jul 23 17:27:17 2025 by rpki-client