$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4a24732-16a4-33b7-bc0e-68e0468bfffe.roa File: b4a24732-16a4-33b7-bc0e-68e0468bfffe.roa (raw, json) Hash identifier: zU9LeYP0IWubczAlZOHcuPp9MHRZO4cFj+9gFkH2y5c= Subject key identifier: BB:9D:5B:64:51:FB:3A:85:29:74:11:C4:10:4E:4F:07:65:D7:53:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCF574D3EDA7D9623B370 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4a24732-16a4-33b7-bc0e-68e0468bfffe.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 397193 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:57:4d:3e:da:7d:96:23:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=c695ae0c-c34b-4a1c-afc0-07df0c0e3499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:b1:17:07:d1:dc:79:fb:4b:2d:9e:8d:d6: 22:8e:9c:66:39:cd:d3:d3:b7:9a:f1:39:67:48:bc: 80:d2:12:15:29:bc:bf:91:a1:7c:9d:3a:90:d4:05: 9b:53:cc:03:6b:e5:ef:f6:11:29:63:46:bb:ba:17: 99:98:20:47:75:1b:85:a7:b5:38:42:a8:e0:9c:d0: 20:51:a1:d2:b0:2f:e4:cc:1f:ca:2a:e1:ab:2d:cf: 91:2d:64:61:f7:70:f3:6e:2e:11:9d:20:08:af:03: c0:7c:ee:01:9c:9b:58:4a:f4:c2:28:eb:13:59:91: ba:31:9b:ac:15:6b:2c:6d:66:b9:32:60:a2:60:58: dc:64:68:16:3b:34:21:b9:68:e7:b3:47:56:c7:4d: c9:a7:0a:fb:26:54:47:bb:dd:13:61:a6:5e:b8:ef: 4a:56:8f:07:60:7c:43:30:91:75:a4:67:90:00:35: 7d:01:a2:be:89:8d:74:99:72:ff:74:11:a4:6b:c8: 1d:d0:c7:fd:73:c9:91:94:a5:b4:e1:2f:04:5f:cb: 5c:66:25:19:d8:8e:2b:cc:6a:a2:9b:99:0a:f8:4b: 47:ca:32:a5:f0:6c:00:71:ad:5a:cf:a3:72:52:e3: 61:9b:6e:68:1f:f9:07:d8:a5:ee:e2:34:45:73:ca: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9D:5B:64:51:FB:3A:85:29:74:11:C4:10:4E:4F:07:65:D7:53:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4a24732-16a4-33b7-bc0e-68e0468bfffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:18:13:db:c7:c2:97:82:c6:da:1e:8c:ce:87:70:3d:90:c1: 21:69:8d:f0:88:64:f8:ef:42:9c:2a:0c:a5:71:0f:45:c5:f8: 91:f9:56:a2:a6:90:84:8c:79:12:46:90:5c:55:26:23:2d:fd: 0a:57:32:34:cf:37:7d:42:dd:e6:b7:5f:21:39:27:42:94:4b: a7:d6:9f:83:7b:6d:ce:71:79:91:cb:80:e7:ec:3f:9e:1f:05: 3b:27:57:c8:40:ea:c8:f7:4b:74:81:e3:b9:b2:7a:7a:b4:08: 12:12:aa:f8:d8:63:0a:c9:3f:ac:ae:49:25:05:2f:7c:88:f2: fa:10:27:38:f0:e4:b9:2f:31:19:43:e4:e9:f5:2f:42:a4:8f: c8:d6:21:ff:f0:2b:71:e7:f4:71:7e:cc:84:82:13:e5:e6:0a: 6e:b8:27:8e:af:65:b2:13:a7:ee:7d:0c:a5:44:1c:f6:46:b4: 42:71:d5:b8:dc:e6:bf:7f:97:3a:59:41:31:41:5c:7f:e1:e6: a6:ad:a2:58:82:cd:44:71:a4:32:cf:ba:43:d0:ef:94:f8:f5: dd:7a:c2:19:c9:49:d5:c0:b3:2f:15:31:0e:f2:60:6b:a2:54: be:1c:8b:6e:16:b3:0b:86:92:86:9d:f9:07:86:8b:68:d3:58: e0:6d:29:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M9XTT7afZYjs3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk YzY5NWFlMGMtYzM0Yi00YTFjLWFmYzAtMDdkZjBjMGUzNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivWxFwfR3Hn7Sy2ejdYijpxmOc3T07ea8Tln SLyA0hIVKby/kaF8nTqQ1AWbU8wDa+Xv9hEpY0a7uheZmCBHdRuFp7U4QqjgnNAg UaHSsC/kzB/KKuGrLc+RLWRh93Dzbi4RnSAIrwPAfO4BnJtYSvTCKOsTWZG6MZus FWssbWa5MmCiYFjcZGgWOzQhuWjns0dWx03Jpwr7JlRHu90TYaZeuO9KVo8HYHxD MJF1pGeQADV9AaK+iY10mXL/dBGka8gd0Mf9c8mRlKW04S8EX8tcZiUZ2I4rzGqi m5kK+EtHyjKl8GwAca1az6NyUuNhm25oH/kH2KXu4jRFc8poFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLudW2RR+zqFKXQRxBBOTwdl11NtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjRhMjQ3MzItMTZhNC0z M2I3LWJjMGUtNjhlMDQ2OGJmZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYYE9vHwpeCxtoejM6HcD2QwSFpjfCIZPjvQpwqDKVxD0XF+JH5VqKm kISMeRJGkFxVJiMt/QpXMjTPN31C3ea3XyE5J0KUS6fWn4N7bc5xeZHLgOfsP54f BTsnV8hA6sj3S3SB47myenq0CBISqvjYYwrJP6yuSSUFL3yI8voQJzjw5LkvMRlD 5On1L0Kkj8jWIf/wK3Hn9HF+zISCE+XmCm64J46vZbITp+59DKVEHPZGtEJx1bjc 5r9/lzpZQTFBXH/h5qatoliCzURxpDLPukPQ75T49d16whnJSdXAsy8VMQ7yYGui VL4ci24WswuGkoad+QeGi2jTWOBtKfE= -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:19 2025 by rpki-client