$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa File: b59f5ba0-880c-39fa-9f3d-3044adac6916.roa (raw, json) Hash identifier: oOKsTuqrPWQHxX7L0/oY193So4UuZueQSiGV3W1Bco0= Subject key identifier: B5:3E:CF:57:35:3D:82:D4:44:AB:F8:FB:FE:B0:BA:9C:FC:E8:3F:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCAD30B73278EA6979D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 397208 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ca:d3:0b:73:27:8e:a6:97:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=1a1af52e-4447-402d-8199-f179157fac3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:54:57:c8:b4:ff:99:f4:bf:be:2d:d2:c1: 1f:93:3f:ff:ab:7b:aa:03:e6:97:45:3b:60:2c:c1: ff:74:70:2d:f2:c1:ae:5a:52:6f:7d:52:17:b2:5d: 10:31:cf:16:40:fe:c5:2c:91:05:72:14:71:de:3e: b1:02:8c:cb:40:08:d5:b7:78:af:5a:7e:30:60:96: 18:76:d5:90:63:4e:c9:cf:ba:bc:cf:7e:a2:2a:86: b0:9d:ea:51:5d:ae:a8:07:0a:1b:49:fe:f4:14:91: 08:1f:28:24:3c:eb:1f:ee:19:a1:62:e7:d0:1c:29: 17:f1:16:1c:88:b2:38:5d:af:49:79:89:4f:5c:c8: 67:93:f5:94:57:7b:22:f1:e8:97:4a:ca:63:a7:ab: 10:db:6b:31:1d:33:ae:c4:a6:bf:f0:b2:43:09:bb: 55:33:5a:3b:ea:de:43:00:28:29:f1:c0:01:c8:14: 78:e0:12:ad:09:ae:7a:87:6d:23:b5:2f:60:ef:5e: 7b:65:8e:57:b1:fe:7c:82:63:a6:e8:a9:5f:f0:df: 24:d3:2b:d5:19:23:0e:b8:05:1f:84:05:27:91:ed: 09:fe:b6:7f:f9:1a:73:17:72:3a:75:32:52:53:55: 3e:cc:a4:56:13:42:d3:16:c4:5e:54:7b:d4:ff:f9: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3E:CF:57:35:3D:82:D4:44:AB:F8:FB:FE:B0:BA:9C:FC:E8:3F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f5:24:74:c6:09:d3:09:61:70:c7:2b:08:07:3f:e6:b2:96: 0c:d6:b9:0d:64:84:39:5e:f6:89:16:23:68:eb:a4:7e:47:c9: bd:20:4c:92:ad:79:f2:88:47:f0:bf:37:40:8e:b9:f7:46:c3: 48:1c:27:5e:d2:06:53:7b:40:28:69:4a:8e:22:01:5a:4a:29: c3:e9:ec:63:0b:99:cb:f9:47:b5:a0:df:a6:81:b4:dc:0b:0e: 9d:e3:cd:98:31:5b:79:8d:63:36:a5:b5:a5:df:97:b9:da:c4: b6:08:89:40:93:af:0d:b3:f0:29:fc:27:18:be:33:da:3d:56: 2c:16:91:59:56:89:9d:8c:55:c8:29:5f:85:36:a7:ee:35:77: 55:be:d9:7d:a0:c4:f0:90:81:5c:0c:52:c7:8f:08:e1:0f:1a: 6a:1b:8f:dc:17:9c:f6:ee:d5:57:06:11:6e:7d:5d:dd:9a:a1: 2c:fc:fe:60:4b:39:36:11:1a:f1:43:71:e0:f9:36:82:9b:e3: 1a:09:90:c3:0d:79:e9:76:6a:ba:50:a1:da:0b:1b:7c:29:e2: ab:87:86:53:2c:b1:81:d9:f8:fa:d1:00:75:05:c9:f4:4c:77: 9a:64:bc:91:27:0d:91:3c:ff:54:19:ad:ec:a9:75:16:0f:ea: 12:1a:83:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MrTC3MnjqaXnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk MWExYWY1MmUtNDQ0Ny00MDJkLTgxOTktZjE3OTE1N2ZhYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh55UV8i0/5n0v74t0sEfkz//q3uqA+aXRTtg LMH/dHAt8sGuWlJvfVIXsl0QMc8WQP7FLJEFchRx3j6xAozLQAjVt3ivWn4wYJYY dtWQY07Jz7q8z36iKoawnepRXa6oBwobSf70FJEIHygkPOsf7hmhYufQHCkX8RYc iLI4Xa9JeYlPXMhnk/WUV3si8eiXSspjp6sQ22sxHTOuxKa/8LJDCbtVM1o76t5D ACgp8cAByBR44BKtCa56h20jtS9g7157ZY5Xsf58gmOm6Klf8N8k0yvVGSMOuAUf hAUnke0J/rZ/+RpzF3I6dTJSU1U+zKRWE0LTFsReVHvU//lO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU+z1c1PYLURKv4+/6wupz86D8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU5ZjViYTAtODgwYy0z OWZhLTlmM2QtMzA0NGFkYWM2OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz1JHTGCdMJYXDHKwgHP+aylgzWuQ1khDle9okWI2jrpH5Hyb0gTJKt efKIR/C/N0COufdGw0gcJ17SBlN7QChpSo4iAVpKKcPp7GMLmcv5R7Wg36aBtNwL Dp3jzZgxW3mNYzaltaXfl7naxLYIiUCTrw2z8Cn8Jxi+M9o9ViwWkVlWiZ2MVcgp X4U2p+41d1W+2X2gxPCQgVwMUsePCOEPGmobj9wXnPbu1VcGEW59Xd2aoSz8/mBL OTYRGvFDceD5NoKb4xoJkMMNeel2arpQodoLG3wp4quHhlMssYHZ+PrRAHUFyfRM d5pkvJEnDZE8/1QZreypdRYP6hIag5s= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:15 2025 by rpki-client