$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa File: b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa (raw, json) Hash identifier: YrrrDfKi29s1aLgZMHcnWrhhVO0MV/obTRBdhccC2aY= Subject key identifier: 8E:96:8A:70:A1:7E:04:3B:9F:22:FA:E2:1E:E3:50:7C:F7:51:F6:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB12F9CA8578761EA080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 36632 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:12:f9:ca:85:78:76:1e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=9c915530-fb8c-484a-b12b-de2612bacd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:10:01:48:4a:04:b1:44:79:a3:42:ee:76: 63:b6:8f:45:8e:50:58:b5:2e:55:a1:72:ee:5b:5c: bf:8e:eb:9f:e9:53:bd:e2:02:f5:2c:f6:1e:84:53: 92:62:3d:26:6f:32:3b:30:e0:45:aa:2c:8e:1f:5c: 90:9e:be:3b:c3:44:af:01:b2:28:32:f1:f6:67:2d: 15:dd:b2:18:3a:98:45:8f:28:3c:c3:f4:2a:ce:bd: 33:f9:d2:c9:20:48:51:7f:fc:66:e6:0d:1c:39:bb: 10:b3:9a:15:80:58:15:29:3a:b0:fd:89:68:81:e2: ed:d8:38:5c:e7:a6:d9:2e:48:37:21:7d:63:17:52: fd:e2:51:22:db:a7:84:1d:f3:3b:88:f3:9e:e3:2d: c0:f7:43:05:29:68:5f:f8:2a:8f:9a:cd:d5:81:5f: 78:95:fd:04:53:cc:5a:dc:24:b1:ba:db:3d:7c:6e: ea:6b:4a:b4:75:71:db:9a:f9:96:c0:69:7d:c1:07: 29:65:38:23:9d:1a:13:dd:ea:b3:63:9d:6c:ed:57: e3:fb:8b:88:d2:c0:48:c3:18:21:36:08:18:cb:91: 2e:bf:ff:9e:80:64:88:12:ac:5f:fe:46:30:e7:e6: d1:8a:a5:f4:a4:72:a7:49:c6:f1:8f:8f:e7:0d:46: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:96:8A:70:A1:7E:04:3B:9F:22:FA:E2:1E:E3:50:7C:F7:51:F6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f0:ac:83:0d:69:7b:73:a5:1f:81:53:9f:28:fc:ea:20:b7: 96:f2:80:ee:08:38:34:9c:1f:89:85:3a:58:90:17:39:4c:27: 08:b5:de:2e:e4:46:e4:74:38:b6:8e:3c:a1:7f:a6:c4:11:2e: d0:5d:8d:47:82:e8:6e:bf:65:de:ac:59:2b:7c:4d:d1:2d:e0: 77:7a:15:2b:39:c3:34:c1:ea:89:93:59:9b:af:35:4b:bb:48: 07:0d:0c:42:85:b9:18:29:ae:e2:b1:cb:60:c3:65:d6:7f:ee: 2e:9f:d2:a4:e9:fa:d1:fd:8a:3a:65:2d:de:3f:a8:9e:1b:e5: e1:80:65:fb:bf:51:59:68:94:cf:d7:44:b1:be:f2:ac:b2:ab: 61:01:e3:bc:d4:9d:6c:65:44:ef:a5:9a:67:ac:89:83:e7:c1: c5:32:3d:41:6e:b3:d4:a9:1c:52:0d:9e:5c:7d:5d:82:0d:47: 0a:62:0b:5a:cb:72:ef:5e:f4:bb:6e:2e:51:31:54:e8:6f:93: cd:50:ff:f7:6e:33:98:90:65:a5:83:4f:50:ca:13:85:0c:b5: 68:ff:bd:d2:64:a2:93:3b:67:f0:87:82:21:f7:5c:8c:83:33: ea:15:49:93:d1:5c:c1:13:de:26:f6:c2:1e:e2:5a:2d:54:fc: 70:8e:12:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MsS+cqFeHYeoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk OWM5MTU1MzAtZmI4Yy00ODRhLWIxMmItZGUyNjEyYmFjZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIYQAUhKBLFEeaNC7nZjto9FjlBYtS5VoXLu W1y/juuf6VO94gL1LPYehFOSYj0mbzI7MOBFqiyOH1yQnr47w0SvAbIoMvH2Zy0V 3bIYOphFjyg8w/Qqzr0z+dLJIEhRf/xm5g0cObsQs5oVgFgVKTqw/YlogeLt2Dhc 56bZLkg3IX1jF1L94lEi26eEHfM7iPOe4y3A90MFKWhf+CqPms3VgV94lf0EU8xa 3CSxuts9fG7qa0q0dXHbmvmWwGl9wQcpZTgjnRoT3eqzY51s7Vfj+4uI0sBIwxgh NggYy5Euv/+egGSIEqxf/kYw5+bRiqX0pHKnScbxj4/nDUboxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6WinChfgQ7nyL64h7jUHz3Ufa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY4OWUyYTAtNzM1Ni0z Y2MwLThlMTEtNGYwOTA1Nzg0Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATwrIMNaXtzpR+BU58o/Oogt5bygO4IODScH4mFOliQFzlMJwi13i7k RuR0OLaOPKF/psQRLtBdjUeC6G6/Zd6sWSt8TdEt4Hd6FSs5wzTB6omTWZuvNUu7 SAcNDEKFuRgpruKxy2DDZdZ/7i6f0qTp+tH9ijplLd4/qJ4b5eGAZfu/UVlolM/X RLG+8qyyq2EB47zUnWxlRO+lmmesiYPnwcUyPUFus9SpHFINnlx9XYINRwpiC1rL cu9e9LtuLlExVOhvk81Q//duM5iQZaWDT1DKE4UMtWj/vdJkopM7Z/CHgiH3XIyD M+oVSZPRXMET3ib2wh7iWi1U/HCOEtw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:08 2025 by rpki-client