$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa File: ba01f06e-95a6-3810-b336-c2de627801ec.roa (raw, json) Hash identifier: IS44mmMsvd996jN/Rt7uKS5+L6SROU8VxRz4JB9WFk0= Subject key identifier: 24:FE:36:7B:57:34:1F:EE:EF:E0:82:17:79:32:67:5E:D1:6A:52:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCF223899753E2C047E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396581 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cf:22:38:99:75:3e:2c:04:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=433b0564-4108-44a8-b897-98576e1849f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:e6:ca:67:50:c6:46:6c:8d:fa:d9:84:7a: e1:ef:34:2a:bc:1b:21:86:af:dc:0c:ad:61:dd:90: 7b:85:ae:80:7e:9c:6d:35:3c:3e:54:d1:f0:10:60: c2:59:97:f2:b5:93:c1:a3:4f:28:0b:7f:1e:0e:6f: d7:dc:2a:36:fa:0b:32:aa:e3:73:95:1a:98:16:38: 9d:74:79:35:be:c3:aa:9f:86:d4:c2:2b:60:b1:8b: 9d:6d:bc:d0:c7:c4:d8:36:9a:05:2c:2b:f5:93:a4: 65:75:e0:61:1a:60:03:34:0b:4e:00:de:95:d9:2a: c1:a8:2c:9d:d7:71:66:8e:b3:3e:c1:ff:28:a3:80: 75:59:76:83:9d:1e:dd:b0:67:bb:f6:69:ef:9e:5b: a3:3e:33:a5:9c:c3:68:aa:e0:cf:06:9b:15:69:a8: ed:4b:eb:e8:d6:1d:a9:ee:09:7e:ef:cd:3a:66:53: 2b:97:69:f3:94:8f:88:89:12:11:e6:db:4f:26:3d: a8:a7:ea:6a:69:d3:c2:04:22:2f:a8:f3:d4:b7:9c: c0:86:24:1a:d9:4a:22:3b:39:61:96:83:bf:a8:db: a3:47:10:43:40:47:a3:fe:79:55:11:0d:8b:0d:95: ff:b5:f0:ae:7b:2e:78:9a:7d:e4:65:6c:26:de:e2: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FE:36:7B:57:34:1F:EE:EF:E0:82:17:79:32:67:5E:D1:6A:52:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:55:4f:47:0c:8f:73:fb:dd:08:33:82:ba:f8:01:c4:e4:51: e5:bf:f0:b4:09:35:fa:22:9a:40:3c:e4:46:17:6c:5a:84:92: 3f:42:5e:ca:e7:c1:a2:bd:1a:37:f7:0e:e0:da:61:6e:2a:db: a1:e8:e8:34:8e:84:b3:17:83:bb:73:a7:59:fd:de:94:06:6b: ae:19:68:43:79:be:ac:8e:18:3a:48:26:39:eb:82:3f:17:34: 04:81:b6:70:8e:3b:2a:80:f4:cd:f2:50:5b:32:77:b7:db:97: d8:60:09:88:0e:83:62:b1:ad:04:43:5d:06:5b:a7:e8:fb:b6: f1:cd:e4:49:e9:3e:62:d4:39:42:ad:4d:02:86:16:9e:51:27: ce:ac:06:9e:52:dc:b8:58:74:55:3a:40:17:b6:77:9f:0e:e9: ff:d9:27:9d:38:c6:1c:70:21:09:34:0e:ed:90:d4:36:35:cf: a1:c5:0d:70:3b:b8:88:c3:fc:53:6f:bc:1a:4d:ad:93:41:12: 43:68:e6:cc:d1:45:9c:9c:e4:b0:7a:cf:29:cb:13:e3:b8:45: b1:ec:54:70:19:c4:4d:31:f7:8b:fa:f4:b9:ef:6c:4c:60:63: 3d:ce:75:3d:e6:46:39:43:b8:b2:aa:c8:e9:29:58:9d:40:76: d9:6a:cf:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M8iOJl1PiwEfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk NDMzYjA1NjQtNDEwOC00NGE4LWI4OTctOTg1NzZlMTg0OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcXmymdQxkZsjfrZhHrh7zQqvBshhq/cDK1h 3ZB7ha6AfpxtNTw+VNHwEGDCWZfytZPBo08oC38eDm/X3Co2+gsyquNzlRqYFjid dHk1vsOqn4bUwitgsYudbbzQx8TYNpoFLCv1k6RldeBhGmADNAtOAN6V2SrBqCyd 13FmjrM+wf8oo4B1WXaDnR7dsGe79mnvnlujPjOlnMNoquDPBpsVaajtS+vo1h2p 7gl+7806ZlMrl2nzlI+IiRIR5ttPJj2op+pqadPCBCIvqPPUt5zAhiQa2UoiOzlh loO/qNujRxBDQEej/nlVEQ2LDZX/tfCuey54mn3kZWwm3uKtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT+NntXNB/u7+CCF3kyZ17RalLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEwMWYwNmUtOTVhNi0z ODEwLWIzMzYtYzJkZTYyNzgwMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1VT0cMj3P73Qgzgrr4AcTkUeW/8LQJNfoimkA85EYXbFqEkj9CXsrn waK9Gjf3DuDaYW4q26Ho6DSOhLMXg7tzp1n93pQGa64ZaEN5vqyOGDpIJjnrgj8X NASBtnCOOyqA9M3yUFsyd7fbl9hgCYgOg2KxrQRDXQZbp+j7tvHN5EnpPmLUOUKt TQKGFp5RJ86sBp5S3LhYdFU6QBe2d58O6f/ZJ504xhxwIQk0Du2Q1DY1z6HFDXA7 uIjD/FNvvBpNrZNBEkNo5szRRZyc5LB6zynLE+O4RbHsVHAZxE0x94v69LnvbExg Yz3OdT3mRjlDuLKqyOkpWJ1Adtlqz9U= -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:07 2025 by rpki-client