$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa File: af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa (raw, json) Hash identifier: 72HsQhTtuKGQTJ6g7lpEwy1cDWKxKylbhUn8kW1Xx+s= Subject key identifier: C0:A9:5F:F9:97:6B:10:F7:96:6A:8F:1D:D0:EC:67:DB:51:0D:EA:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD01488DED8B01C998B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 397195 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:14:88:de:d8:b0:1c:99:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=549c8d3b-0062-438a-8564-b44c2fd581dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:15:ab:18:79:72:ec:0f:9d:72:8a:5b:07: ba:88:2a:00:c1:3d:4e:36:62:2f:f1:2c:e1:59:d7: 20:11:c8:96:ad:dc:c9:4c:c0:7c:e7:aa:ea:05:a6: 56:17:7d:da:ca:73:e3:18:9c:87:9e:af:b7:4f:6a: 26:31:52:83:9f:f2:2d:6c:87:b9:c1:6b:66:b3:15: ed:8e:a1:e5:11:fe:63:cf:f1:1d:9d:ce:0a:73:c3: a9:67:b2:1e:ad:b1:0f:37:2c:38:ff:fd:f0:20:64: aa:d1:9f:bf:a1:55:f8:a9:b3:d9:0c:4c:89:5d:27: 9c:4e:b0:f7:1c:1d:c9:90:8b:6a:a2:2b:1f:07:b9: d6:7e:76:29:4f:b9:f5:15:a5:56:c3:ae:cf:95:82: f4:91:41:2a:5a:8a:f2:24:3f:f9:d3:0b:b2:0a:0d: 25:ad:57:93:0b:c5:d0:d3:5a:1f:4f:85:b0:c5:a3: 48:77:b5:f6:bc:22:21:87:56:48:ed:7f:a0:8c:2d: c2:c1:15:e3:c4:38:49:7f:6e:6d:82:2f:fc:f7:9a: ed:de:7f:3e:3d:6c:fd:14:46:14:0c:a0:8a:1c:8e: e1:a4:cd:56:31:f9:9a:a9:a7:28:1c:6e:22:82:a7: b4:d9:37:eb:5c:90:1c:9c:46:26:ec:54:e2:9f:85: 55:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:5F:F9:97:6B:10:F7:96:6A:8F:1D:D0:EC:67:DB:51:0D:EA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ad:eb:06:9e:d8:4a:71:6e:ca:75:2b:12:7c:12:c1:8c:c7: b7:05:10:2d:d0:20:9e:ae:88:3b:97:35:59:6f:72:72:e7:4f: b4:d6:f4:58:c9:4b:5a:d7:a2:c6:87:da:95:42:cd:fe:d6:88: 2e:cc:a6:d6:a0:9f:10:8e:1e:95:cd:62:9b:2a:b2:4b:de:18: 6f:7d:19:53:1c:62:3e:9a:1d:2e:56:43:83:99:ad:8d:86:51: 84:95:c5:d1:2b:fb:91:7b:92:92:f6:18:55:e4:39:53:c3:17: 5b:5b:4e:ef:40:29:8b:cb:68:7d:61:b4:6e:43:fd:0b:cc:f0: a4:25:a1:e0:ef:08:17:b7:6a:61:2a:c6:c9:af:e6:68:47:78: 10:a5:80:d3:d7:44:2d:cd:c4:d9:4a:48:1c:57:b7:9b:76:ac: f1:95:5d:40:c1:58:db:7e:68:16:e9:76:1a:46:29:4d:0c:ff: 83:8a:72:c0:2f:29:c1:e3:71:ce:b3:c7:2c:2b:fc:ee:15:b5: d7:d3:21:97:c7:25:94:c4:ea:99:b7:a5:52:fc:c5:48:62:21: c7:85:86:dc:1b:f6:a6:a8:bd:e1:3d:74:37:79:fd:a2:bc:5f: 0f:87:3c:55:e4:23:87:76:1c:ac:bf:37:04:4c:71:e0:dc:53: d6:6f:0f:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NAUiN7YsByZiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk NTQ5YzhkM2ItMDA2Mi00MzhhLTg1NjQtYjQ0YzJmZDU4MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh4Vqxh5cuwPnXKKWwe6iCoAwT1ONmIv8Szh WdcgEciWrdzJTMB856rqBaZWF33aynPjGJyHnq+3T2omMVKDn/ItbIe5wWtmsxXt jqHlEf5jz/Ednc4Kc8OpZ7IerbEPNyw4//3wIGSq0Z+/oVX4qbPZDEyJXSecTrD3 HB3JkItqoisfB7nWfnYpT7n1FaVWw67PlYL0kUEqWoryJD/50wuyCg0lrVeTC8XQ 01ofT4WwxaNId7X2vCIhh1ZI7X+gjC3CwRXjxDhJf25tgi/895rt3n8+PWz9FEYU DKCKHI7hpM1WMfmaqacoHG4igqe02TfrXJAcnEYm7FTin4VVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCpX/mXaxD3lmqPHdDsZ9tRDeqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjM1ZWItOGUzOS0z NTk5LWJjYmQtZDZhZjdkOTcwOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGt6wae2Epxbsp1KxJ8EsGMx7cFEC3QIJ6uiDuXNVlvcnLnT7TW9FjJ S1rXosaH2pVCzf7WiC7MptagnxCOHpXNYpsqskveGG99GVMcYj6aHS5WQ4OZrY2G UYSVxdEr+5F7kpL2GFXkOVPDF1tbTu9AKYvLaH1htG5D/QvM8KQloeDvCBe3amEq xsmv5mhHeBClgNPXRC3NxNlKSBxXt5t2rPGVXUDBWNt+aBbpdhpGKU0M/4OKcsAv KcHjcc6zxywr/O4VtdfTIZfHJZTE6pm3pVL8xUhiIceFhtwb9qaoveE9dDd5/aK8 Xw+HPFXkI4d2HKy/NwRMceDcU9ZvD/U= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:56 2025 by rpki-client