$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa File: b4ff9d93-5144-396f-b11f-a879fe742559.roa (raw, json) Hash identifier: lBF0PF0+V05RKvagEco4C0Xl/yl3zzEI+rA4LFnsq9I= Subject key identifier: DC:D1:29:B3:AE:29:A3:1D:6B:55:89:24:C6:9A:E0:7D:BC:AA:EE:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCCADE6DF767DE2E4BC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396605 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:ad:e6:df:76:7d:e2:e4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=e73e105a-70a1-4502-a812-1fd2e4a395de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:80:02:aa:3a:13:15:27:a5:a8:2b:03:0f:cb: 61:22:6d:8f:83:ef:92:d6:ea:fb:4a:b5:fd:80:c6: 85:0f:a1:2c:ac:1f:69:a1:f2:d8:c7:fc:76:1e:ae: 6a:4b:be:de:dd:ed:cb:03:ee:99:a2:8b:f3:dc:fd: c6:7d:3e:49:ee:62:33:03:64:93:65:e0:22:6b:1b: c2:97:87:41:8d:d2:b8:1d:2c:00:26:cd:48:0d:74: 68:5a:98:37:5d:b4:62:87:1e:80:fc:99:8a:04:46: c5:80:b1:fe:ab:54:68:3f:cc:89:79:de:32:0c:c1: 7d:de:de:7b:9a:e4:cd:31:f1:7e:b1:d2:dc:f8:09: 02:a9:df:bf:28:57:ec:a3:54:e9:8a:e2:93:e5:b9: ec:33:f2:93:db:c9:50:64:92:e2:82:24:30:5f:2e: 7d:f3:01:f3:71:35:9d:3e:97:fe:0e:f3:21:83:09: d9:b6:e1:e0:1f:17:4a:b4:1b:8b:0c:32:65:c5:5b: 58:89:63:fa:3b:a7:f0:21:f4:b5:ab:cd:83:61:a7: af:ec:98:6b:d3:77:6d:c7:30:08:67:d7:ea:9e:55: f8:cd:f3:8d:a1:99:22:7e:dc:53:54:49:14:b2:28: d1:14:73:23:2d:41:aa:e4:5d:ef:ff:88:ed:28:ee: 8b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D1:29:B3:AE:29:A3:1D:6B:55:89:24:C6:9A:E0:7D:BC:AA:EE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:03:dc:a1:2a:4e:85:18:50:4a:8d:7f:16:29:f5:c4:46:5c: fc:df:bb:6c:f8:b9:af:16:b7:f5:0a:20:41:44:ee:07:ac:1e: 82:af:90:27:cc:8a:ab:b9:f0:8c:16:81:af:19:64:e3:2d:17: 8c:84:95:b0:5c:aa:95:37:42:cc:d1:b4:af:19:2e:22:6e:6e: ac:88:46:54:5e:1b:61:ba:5d:2b:d2:00:a6:92:92:6a:51:b8: a7:83:8d:62:81:7a:e6:65:2e:70:f8:68:fb:8c:31:cc:70:01: a2:9c:74:f3:a3:d7:03:91:ec:43:c2:e9:15:3f:13:7e:01:6c: a7:52:a2:42:62:64:2f:be:62:a1:99:b3:ce:44:6b:ce:1d:9b: e9:c7:26:69:51:15:58:cf:e1:bc:bc:88:c5:b4:3b:fa:5e:17: 10:4f:40:8b:49:1b:cd:be:4b:11:f4:fc:bf:2a:83:d2:61:88: 93:69:db:66:a4:dc:dd:c6:e2:b3:23:5c:e4:8b:96:de:c2:39: a1:3c:e5:bc:79:97:0f:37:88:19:ca:98:6e:98:cf:9c:8a:d2: 35:6d:f9:63:e1:cc:73:2b:8b:ef:0c:43:45:b1:5b:44:75:c9: d8:47:c3:db:d5:67:6b:94:81:b3:5b:22:e3:27:22:1d:e1:cd: eb:79:c9:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Myt5t92feLkvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk ZTczZTEwNWEtNzBhMS00NTAyLWE4MTItMWZkMmU0YTM5NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ACqjoTFSelqCsDD8thIm2Pg++S1ur7SrX9 gMaFD6EsrB9pofLYx/x2Hq5qS77e3e3LA+6Zoovz3P3GfT5J7mIzA2STZeAiaxvC l4dBjdK4HSwAJs1IDXRoWpg3XbRihx6A/JmKBEbFgLH+q1RoP8yJed4yDMF93t57 muTNMfF+sdLc+AkCqd+/KFfso1TpiuKT5bnsM/KT28lQZJLigiQwXy598wHzcTWd Ppf+DvMhgwnZtuHgHxdKtBuLDDJlxVtYiWP6O6fwIfS1q82DYaev7Jhr03dtxzAI Z9fqnlX4zfONoZkiftxTVEkUsijRFHMjLUGq5F3v/4jtKO6LKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzRKbOuKaMda1WJJMaa4H28qu5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjRmZjlkOTMtNTE0NC0z OTZmLWIxMWYtYTg3OWZlNzQyNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAD3KEqToUYUEqNfxYp9cRGXPzfu2z4ua8Wt/UKIEFE7gesHoKvkCfM iqu58IwWga8ZZOMtF4yElbBcqpU3QszRtK8ZLiJubqyIRlReG2G6XSvSAKaSkmpR uKeDjWKBeuZlLnD4aPuMMcxwAaKcdPOj1wOR7EPC6RU/E34BbKdSokJiZC++YqGZ s85Ea84dm+nHJmlRFVjP4by8iMW0O/peFxBPQItJG82+SxH0/L8qg9JhiJNp22ak 3N3G4rMjXOSLlt7COaE85bx5lw83iBnKmG6Yz5yK0jVt+WPhzHMri+8MQ0WxW0R1 ydhHw9vVZ2uUgbNbIuMnIh3hzet5yd4= -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:21 2025 by rpki-client