$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa File: cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa (raw, json) Hash identifier: IjvKG252bpFN4SkhA2wDIfkXsvNhAebuhqGHCG/EKYo= Subject key identifier: ED:02:7E:4E:B0:7E:FB:3D:16:3A:16:C7:94:D2:35:F7:40:1F:58:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC9E30AEDC03D8A1CC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396608 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:9e:30:ae:dc:03:d8:a1:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=988477c0-bb2f-4de2-a3d4-41d830df8a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:51:e8:34:8a:f3:cd:e6:7c:3d:dd:a9:b9: 8d:e0:99:06:85:65:27:f9:c1:6a:e2:83:7c:bd:7e: 92:7e:00:77:6e:47:1c:75:d3:24:f4:63:19:a8:a3: 79:40:cf:70:bd:83:e7:18:6b:21:7c:94:a8:40:2c: 75:8f:cc:a6:5c:37:9a:d5:ea:4d:01:9a:7c:56:0c: 8e:55:b9:fa:04:5f:0e:81:4e:81:22:26:9e:9e:3c: 34:bf:13:12:34:ab:71:5b:f8:b9:42:8b:d7:ba:9c: bf:f8:47:28:55:0f:d0:ab:5f:93:bb:53:52:4e:f0: 04:71:b6:29:82:c7:9e:71:5c:52:1f:02:b9:b5:81: 66:18:de:fe:66:00:ed:14:8b:02:62:22:76:02:78: 48:d9:38:37:f5:e0:cb:8c:c7:58:dd:3c:48:86:c4: 98:a9:b5:ba:16:e6:59:36:b3:a7:35:b8:4a:c6:9d: c4:42:45:86:83:ab:fc:57:e9:5a:8f:40:57:18:e3: c8:1a:60:a9:8a:ea:e6:59:2c:72:7a:a7:83:3a:98: 2f:1f:24:84:58:9a:3d:21:8e:82:20:d6:0e:16:9c: d9:c1:f7:43:8e:e1:55:44:06:32:f6:1f:2e:42:b4: 59:f8:bf:5e:91:a1:3e:29:ca:69:42:ae:4a:64:1f: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:02:7E:4E:B0:7E:FB:3D:16:3A:16:C7:94:D2:35:F7:40:1F:58:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0e:0f:0a:34:a2:d5:e5:f1:8d:49:02:f6:31:5c:2f:72:29: 74:bf:87:b1:e6:67:9e:5a:de:6e:e9:81:46:34:7b:56:96:ec: 3d:4b:63:5d:a7:eb:e1:ab:e3:46:06:44:de:25:5a:ad:01:b6: c3:f3:aa:97:22:bf:a2:6c:fd:c6:ce:e1:f8:ab:22:47:eb:d1: 66:f9:8b:07:d0:b1:62:b8:f4:9e:bf:16:de:8b:e9:2b:68:0f: 0b:04:57:54:71:e0:88:ee:ca:da:b2:99:33:a1:30:13:fa:ca: 1c:bb:f2:2a:b4:a4:84:93:eb:ff:fa:6b:bf:88:8a:bf:5a:ac: 27:b3:d1:bf:9a:d4:79:41:c1:cd:13:4d:f1:7e:f7:4c:39:d9: a7:ca:4d:c1:7b:dd:53:c1:3a:b4:24:ec:45:bd:c7:74:67:8d: fa:f0:a1:db:4b:51:71:a8:48:16:3d:af:36:a0:09:f6:91:79: f6:a2:20:72:72:ec:b9:be:86:18:09:5a:1e:81:5f:4a:ef:d9: 71:4f:25:6d:45:4f:a6:5d:37:e7:77:bc:fa:c9:84:68:85:c8: 12:0b:45:9a:62:31:ce:f4:2b:69:5b:73:76:73:96:8a:d2:c0: e4:7e:44:63:b9:4c:af:10:86:30:0c:75:70:45:65:e5:16:00: 86:49:53:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MyeMK7cA9ihzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk OTg4NDc3YzAtYmIyZi00ZGUyLWEzZDQtNDFkODMwZGY4YTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD1R6DSK883mfD3dqbmN4JkGhWUn+cFq4oN8 vX6SfgB3bkccddMk9GMZqKN5QM9wvYPnGGshfJSoQCx1j8ymXDea1epNAZp8VgyO Vbn6BF8OgU6BIiaenjw0vxMSNKtxW/i5QovXupy/+EcoVQ/Qq1+Tu1NSTvAEcbYp gseecVxSHwK5tYFmGN7+ZgDtFIsCYiJ2AnhI2Tg39eDLjMdY3TxIhsSYqbW6FuZZ NrOnNbhKxp3EQkWGg6v8V+laj0BXGOPIGmCpiurmWSxyeqeDOpgvHySEWJo9IY6C INYOFpzZwfdDjuFVRAYy9h8uQrRZ+L9ekaE+KcppQq5KZB/mjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0Cfk6wfvs9FjoWx5TSNfdAH1hHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4YTkwNGMtNWJmYy0z ZmFmLWJjMTQtZjg4OTUyZmM3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAODwo0otXl8Y1JAvYxXC9yKXS/h7HmZ55a3m7pgUY0e1aW7D1LY12n 6+Gr40YGRN4lWq0BtsPzqpciv6Js/cbO4firIkfr0Wb5iwfQsWK49J6/Ft6L6Sto DwsEV1Rx4IjuytqymTOhMBP6yhy78iq0pIST6//6a7+Iir9arCez0b+a1HlBwc0T TfF+90w52afKTcF73VPBOrQk7EW9x3RnjfrwodtLUXGoSBY9rzagCfaRefaiIHJy 7Lm+hhgJWh6BX0rv2XFPJW1FT6ZdN+d3vPrJhGiFyBILRZpiMc70K2lbc3ZzlorS wOR+RGO5TK8QhjAMdXBFZeUWAIZJU9w= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:17 2025 by rpki-client