$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa File: b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa (raw, json) Hash identifier: 1wPPSCjal/ACFpYvQTM6FM6Z6Huw5PSlvugIxbBtXpc= Subject key identifier: AC:55:FE:A2:38:A2:D7:B1:58:57:BE:3F:F1:50:0B:61:61:12:D8:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD13D658C37E0369C680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 40647 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:13:d6:58:c3:7e:03:69:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=c4a88be1-aab7-4c1d-a763-c8e371787aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cd:7b:8a:f1:36:2e:2d:6f:00:f2:fd:fc:2e: 71:fc:fe:67:dd:ce:2a:b9:3b:54:f4:65:0d:ef:7b: 6a:fb:90:de:ef:20:8c:d0:23:25:cb:1b:81:cc:65: 6e:4a:65:e4:88:3d:16:c0:6a:a8:46:c8:1d:fe:e1: 4c:21:32:2b:f1:56:bc:d5:5a:bd:24:9b:50:28:6f: 33:a5:ea:ef:03:3c:43:56:09:67:d0:f9:09:82:7d: d5:41:45:b2:a4:19:90:c1:41:ba:84:8d:f8:9a:d1: 03:5c:04:a7:3b:9e:6b:b3:e6:40:f1:b7:dd:92:b6: 1d:9b:8e:e5:7b:71:85:f5:c8:69:63:fb:b7:70:42: ec:0f:b0:94:82:b5:4b:bf:4a:7b:f5:07:37:b1:ef: 7f:92:d6:a1:59:46:f7:b1:89:06:92:08:2a:49:80: 6f:02:61:27:da:2d:10:1b:cd:3c:3a:5f:9c:11:fc: df:1d:8d:83:9d:51:87:0f:43:5f:01:1c:c7:b8:a2: c3:68:b9:cd:88:6f:38:58:3b:9a:30:45:60:b3:bb: cb:94:f3:60:ca:c0:f1:95:0e:04:26:b6:03:a7:63: 30:ed:20:d6:00:69:64:4a:a9:c4:4d:47:f1:ea:51: 69:bf:da:20:d2:df:a7:2a:75:be:54:59:9f:29:72: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:55:FE:A2:38:A2:D7:B1:58:57:BE:3F:F1:50:0B:61:61:12:D8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:57:61:b0:ab:00:59:4c:bd:db:eb:10:9d:4c:b3:bc:d2:6f: 1f:86:93:07:94:67:e7:4c:bd:6b:61:52:3b:b2:09:ad:0c:4c: af:37:78:37:8d:cd:3f:ad:70:22:77:42:f3:f1:17:c1:56:a5: 0c:89:ae:7d:a9:31:15:33:b6:b5:1a:d2:2e:85:25:50:84:46: 82:b7:f2:f2:16:0c:8e:1b:05:82:8e:bb:21:af:62:41:22:e9: 13:49:d0:17:54:91:09:c0:81:e5:07:78:8f:36:1f:12:c2:c9: 8a:27:80:d0:4a:6f:f4:90:bc:b7:bc:dd:72:ea:0c:49:77:32: 45:02:08:67:15:38:3e:66:0c:dd:74:6b:c9:43:60:7d:7c:bd: dd:90:b4:9d:9e:79:f4:7b:50:a9:f4:18:d3:14:b4:9f:16:8e: af:ae:76:cc:96:25:ce:e9:3c:03:44:4c:53:29:1c:5f:e2:27: 50:88:af:48:02:9d:0f:8b:1c:fa:ee:47:ce:08:55:bd:2b:2f: d9:9c:50:2a:29:28:05:ef:08:da:1d:ad:6d:0d:43:3b:54:e4: 16:e7:b1:ec:c8:ba:66:6a:51:85:03:e8:49:6c:78:d6:00:1d: 80:c0:47:45:3e:78:22:61:9a:73:b7:24:85:92:04:34:93:e9: e3:c2:d8:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M0T1ljDfgNpxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk YzRhODhiZTEtYWFiNy00YzFkLWE3NjMtYzhlMzcxNzg3YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc17ivE2Li1vAPL9/C5x/P5n3c4quTtU9GUN 73tq+5De7yCM0CMlyxuBzGVuSmXkiD0WwGqoRsgd/uFMITIr8Va81Vq9JJtQKG8z pervAzxDVgln0PkJgn3VQUWypBmQwUG6hI34mtEDXASnO55rs+ZA8bfdkrYdm47l e3GF9chpY/u3cELsD7CUgrVLv0p79Qc3se9/ktahWUb3sYkGkggqSYBvAmEn2i0Q G808Ol+cEfzfHY2DnVGHD0NfARzHuKLDaLnNiG84WDuaMEVgs7vLlPNgysDxlQ4E JrYDp2Mw7SDWAGlkSqnETUfx6lFpv9og0t+nKnW+VFmfKXLkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxV/qI4otexWFe+P/FQC2FhEtjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2N2VjYTQtOWMxMy0z NDY0LWE1ZGYtMzAwM2QzYzhmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBXYbCrAFlMvdvrEJ1Ms7zSbx+GkweUZ+dMvWthUjuyCa0MTK83eDeN zT+tcCJ3QvPxF8FWpQyJrn2pMRUztrUa0i6FJVCERoK38vIWDI4bBYKOuyGvYkEi 6RNJ0BdUkQnAgeUHeI82HxLCyYongNBKb/SQvLe83XLqDEl3MkUCCGcVOD5mDN10 a8lDYH18vd2QtJ2eefR7UKn0GNMUtJ8Wjq+udsyWJc7pPANETFMpHF/iJ1CIr0gC nQ+LHPruR84IVb0rL9mcUCopKAXvCNodrW0NQztU5BbnsezIumZqUYUD6ElseNYA HYDAR0U+eCJhmnO3JIWSBDST6ePC2Mo= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:00 2025 by rpki-client