$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa File: c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa (raw, json) Hash identifier: sdLhKjEKrBYmZfaCRybm0v08ST429nWFQlhSybFB5BQ= Subject key identifier: 4D:18:AC:A1:1C:8B:9B:64:C2:2C:57:EC:D4:C5:1D:F5:D4:80:1C:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE0B9498D355A175D800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 20172 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:0b:94:98:d3:55:a1:75:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=e786cf2e-ddaf-4368-8869-1b9c091bcafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:46:1b:7b:28:54:b8:cc:3b:59:e4:ca:cd: 91:98:85:12:bc:91:30:49:e0:11:d8:68:19:99:b0: 88:69:22:43:c6:47:21:e0:cf:c4:4a:8e:39:97:5b: 32:82:31:39:c6:5b:6b:a4:cb:0e:e3:27:ce:8f:67: 9b:4a:41:73:2b:2b:8b:18:84:83:6f:84:6a:a4:f6: e4:2c:cc:7e:1e:ff:52:15:9f:e8:ab:4f:14:e5:bd: ee:18:fb:c6:0f:2b:17:b9:1a:04:a5:17:3e:33:16: d7:a5:bd:6d:9f:52:dc:93:97:ac:b0:62:0c:12:7c: d3:c1:11:4f:82:5e:98:24:37:d0:1f:29:1e:6b:af: 71:bf:26:65:21:32:c8:ef:57:7a:82:5d:df:df:85: d6:27:54:f7:3b:02:8c:df:37:1d:93:4f:50:6f:ab: 24:06:db:51:c9:35:be:91:fa:f3:84:88:31:10:de: 2f:a2:5e:4c:4a:f5:85:83:32:c9:bf:5f:67:42:27: f1:c9:f3:95:fa:03:59:de:15:02:45:1d:41:b8:e6: f6:16:4a:11:2f:1a:9e:8c:e6:51:be:9b:37:92:93: 9b:52:7d:a9:d2:d2:41:15:40:79:88:54:c7:ad:0e: b6:21:a3:5a:e1:f0:4b:fb:2d:1f:4a:dc:f0:6d:fd: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:AC:A1:1C:8B:9B:64:C2:2C:57:EC:D4:C5:1D:F5:D4:80:1C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:eb:10:8a:04:11:22:d1:fa:62:c2:fc:1e:00:cf:76:02:eb: 0e:08:70:12:04:cc:3c:3b:2b:b0:1a:fb:c6:dc:ba:da:a2:c4: 7e:54:ec:88:c1:b4:da:f5:68:c0:83:05:f4:78:57:66:b3:48: 7c:92:30:10:0e:e4:83:ff:e6:ce:2e:57:c2:e7:fd:79:97:dd: 84:77:9a:3b:cb:e0:c8:19:7f:93:93:5b:6f:ec:a7:f3:1f:e2: 75:c8:7f:43:6b:6a:cb:2e:db:43:eb:6c:e3:1f:b3:bc:d8:59: 22:d0:39:bf:e0:00:ac:9a:d4:21:cd:c7:d6:67:3a:b8:b2:cc: 09:03:db:45:fa:e3:dd:e1:e7:a0:7e:30:1d:8e:e0:b8:a4:a2: 44:8b:43:fa:d5:82:2c:4b:24:c0:40:d9:7a:0c:7d:d5:8e:eb: 99:46:a5:f5:bb:bb:ef:af:96:28:ee:e4:72:ce:5a:c4:93:57: d7:0b:0a:38:ab:3c:dc:11:d6:9c:df:76:77:de:91:e3:8b:27: ce:d3:c0:e8:6f:de:6d:21:dc:c6:31:1f:22:ed:5e:23:09:77: ee:32:34:38:b1:33:c2:e2:43:dd:96:59:5b:57:ce:ee:08:fc: fa:e7:e6:25:2c:13:6d:29:63:32:bf:96:56:b4:69:f6:ed:5a: f3:c7:58:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M4LlJjTVaF12AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk ZTc4NmNmMmUtZGRhZi00MzY4LTg4NjktMWI5YzA5MWJjYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkJGG3soVLjMO1nkys2RmIUSvJEwSeAR2GgZ mbCIaSJDxkch4M/ESo45l1sygjE5xltrpMsO4yfOj2ebSkFzKyuLGISDb4RqpPbk LMx+Hv9SFZ/oq08U5b3uGPvGDysXuRoEpRc+MxbXpb1tn1Lck5essGIMEnzTwRFP gl6YJDfQHykea69xvyZlITLI71d6gl3f34XWJ1T3OwKM3zcdk09Qb6skBttRyTW+ kfrzhIgxEN4vol5MSvWFgzLJv19nQifxyfOV+gNZ3hUCRR1BuOb2FkoRLxqejOZR vps3kpObUn2p0tJBFUB5iFTHrQ62IaNa4fBL+y0fStzwbf13uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0YrKEci5tkwixX7NTFHfXUgBz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY3YjA4NGItNWY4YS0z YTRmLWIyYWItNDkxODBlNjIxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPrEIoEESLR+mLC/B4Az3YC6w4IcBIEzDw7K7Aa+8bcutqixH5U7IjB tNr1aMCDBfR4V2azSHySMBAO5IP/5s4uV8Ln/XmX3YR3mjvL4MgZf5OTW2/sp/Mf 4nXIf0Nrassu20PrbOMfs7zYWSLQOb/gAKya1CHNx9ZnOriyzAkD20X6493h56B+ MB2O4LikokSLQ/rVgixLJMBA2XoMfdWO65lGpfW7u++vliju5HLOWsSTV9cLCjir PNwR1pzfdnfekeOLJ87TwOhv3m0h3MYxHyLtXiMJd+4yNDixM8LiQ92WWVtXzu4I /Prn5iUsE20pYzK/lla0afbtWvPHWGk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:46 2025 by rpki-client