$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa File: c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa (raw, json) Hash identifier: M1CikfIWCmEVDsT1d7c3lT+WElMOPL7cWiJyPhyG+gU= Subject key identifier: A1:99:A2:09:90:8E:36:38:07:FC:1C:0B:EB:C9:D7:BF:65:62:CC:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC3C9CD77F01701F3A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396592 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:3c:9c:d7:7f:01:70:1f:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=d2fc2737-f082-492e-b26e-786b76e42ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:f7:95:44:80:de:98:a3:47:ce:54:34:dc: a7:b2:4d:41:b1:db:be:e6:da:eb:9f:ea:4d:98:76: ca:65:49:2f:f8:65:0d:03:37:c7:0f:67:6f:4d:f9: 76:d6:05:40:93:99:5f:84:7b:0e:a1:d0:b3:df:af: 26:33:12:54:14:20:46:a2:97:ed:31:c3:f5:8e:2c: 36:19:96:52:3d:2a:c9:06:50:b8:d1:58:24:1b:3c: e5:ea:64:07:31:df:cd:75:68:d8:94:94:c2:62:56: 7b:7f:c9:bf:26:c3:d0:17:75:8c:48:a9:3f:ac:da: 05:ae:45:41:8a:d3:86:43:2a:62:9e:47:2b:c3:ae: ff:c3:c7:84:66:83:88:1f:33:88:50:59:00:71:e7: cf:3b:08:4a:5f:89:ca:20:58:6c:c4:ed:49:3c:62: 4a:de:2d:e0:cd:67:2f:81:a2:f2:96:a2:0a:68:b5: 2a:f9:0a:31:04:a4:b5:2d:b5:e7:c4:b1:95:df:32: 3c:26:75:04:6f:72:dc:82:4e:51:ea:13:5e:ff:20: 27:34:bd:b6:a2:24:3c:18:1e:87:4b:e2:3b:dc:c7: 42:0b:0e:6b:2f:9d:c0:1d:94:ce:b7:4d:b2:75:32: 7c:7d:de:a0:7d:ee:1b:6e:3c:8b:a1:79:68:0d:2c: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:99:A2:09:90:8E:36:38:07:FC:1C:0B:EB:C9:D7:BF:65:62:CC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:90:fc:af:7a:04:87:87:2a:e7:4d:c5:b4:b5:fc:05:70:ba: a1:9c:1d:9f:24:d2:7f:8e:14:a3:1a:d1:43:4c:6f:01:b0:6c: 3b:0d:1c:c4:e9:1a:23:5d:ac:cd:d2:e0:4b:1c:8d:42:b0:7e: 37:10:5a:08:13:9c:a6:14:87:51:43:34:0a:08:97:7e:d2:2c: a5:d9:b5:36:27:83:c9:4e:96:b4:a7:3f:af:0e:ea:33:7f:b0: 1b:6d:27:0c:51:8a:28:08:1d:79:c1:18:07:5e:8c:a8:5f:14: cd:48:c3:8c:a1:0c:9d:90:05:ed:f4:65:f0:50:7e:f4:33:77: 1a:38:a8:e2:27:fa:e9:95:f0:33:69:cb:fc:3b:ce:d3:21:db: a7:e5:f8:a7:93:ae:b6:4f:7b:69:ea:01:67:5b:57:c2:98:f0: 44:d4:31:48:6b:b8:6a:8c:40:42:d0:cc:74:72:cb:e4:db:ee: e2:0d:12:44:5c:c5:c9:62:02:4a:19:d5:8b:e6:21:de:b0:6f: 4e:01:8b:a4:02:44:6f:2c:b6:76:f5:f5:a1:32:d0:bc:0f:f5: b4:ab:4f:9e:1b:7a:42:70:37:da:24:69:be:c7:b9:b2:9e:f4: a3:ef:04:89:db:67:b0:72:25:1c:f7:f1:71:aa:01:b2:58:d4: 0e:0d:90:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mw8nNd/AXAfOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk ZDJmYzI3MzctZjA4Mi00OTJlLWIyNmUtNzg2Yjc2ZTQyZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoL3lUSA3pijR85UNNynsk1Bsdu+5trrn+pN mHbKZUkv+GUNAzfHD2dvTfl21gVAk5lfhHsOodCz368mMxJUFCBGopftMcP1jiw2 GZZSPSrJBlC40VgkGzzl6mQHMd/NdWjYlJTCYlZ7f8m/JsPQF3WMSKk/rNoFrkVB itOGQypinkcrw67/w8eEZoOIHzOIUFkAcefPOwhKX4nKIFhsxO1JPGJK3i3gzWcv gaLylqIKaLUq+QoxBKS1LbXnxLGV3zI8JnUEb3Lcgk5R6hNe/yAnNL22oiQ8GB6H S+I73MdCCw5rL53AHZTOt02ydTJ8fd6gfe4bbjyLoXloDSzA6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGZogmQjjY4B/wcC+vJ179lYsyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1NzBkYTYtM2EwNy0z NTZiLWE1YmEtMDhhZGFhMjllM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqQ/K96BIeHKudNxbS1/AVwuqGcHZ8k0n+OFKMa0UNMbwGwbDsNHMTp GiNdrM3S4EscjUKwfjcQWggTnKYUh1FDNAoIl37SLKXZtTYng8lOlrSnP68O6jN/ sBttJwxRiigIHXnBGAdejKhfFM1Iw4yhDJ2QBe30ZfBQfvQzdxo4qOIn+umV8DNp y/w7ztMh26fl+KeTrrZPe2nqAWdbV8KY8ETUMUhruGqMQELQzHRyy+Tb7uINEkRc xcliAkoZ1YvmId6wb04Bi6QCRG8stnb19aEy0LwP9bSrT54bekJwN9okab7HubKe 9KPvBInbZ7ByJRz38XGqAbJY1A4NkKk= -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:51 2025 by rpki-client