$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa File: dea0163b-a1dc-39da-b708-1302f54a1bf0.roa (raw, json) Hash identifier: zPABeLsw3b5WRNv67k6gKEqrNXm0EJuiE/RrNseD7DY= Subject key identifier: 75:36:36:1E:52:3A:FF:2C:BE:06:C9:D5:D4:3D:48:C0:38:30:39:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCC7E36C22D5C0E147A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396576 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cc:7e:36:c2:2d:5c:0e:14:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=9afefec3-033e-4508-82f3-d2f88baac107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:c8:61:95:26:ab:cd:03:dd:c9:0b:67:b3: 81:4e:e8:0d:2a:c8:8b:91:8b:3a:bf:33:34:3c:8d: e5:c6:4d:8e:53:35:cc:8f:e0:77:c9:7f:7b:14:a3: a7:98:84:11:1d:18:a5:5d:6b:85:c5:a6:17:5c:01: c5:6d:59:d8:7e:0e:02:63:0d:6f:94:7f:da:be:fd: 95:d4:8e:96:96:32:59:1d:34:2b:69:2e:31:4a:83: fd:25:89:20:f6:43:91:97:16:ae:4f:63:95:f3:d3: 04:e6:8d:6d:b6:f1:ae:86:15:48:21:e9:0f:e5:d8: 64:d0:cc:9c:ba:57:50:ea:c0:1a:c7:52:e9:7e:58: 28:5a:f8:08:88:fb:68:ed:8c:35:e2:f9:08:18:c7: 2d:c4:85:f3:4b:94:93:5f:d8:aa:10:59:3c:f0:a9: 05:e9:06:a7:12:2e:bb:db:5f:0f:99:62:6d:11:34: 34:0a:82:e9:7d:8b:e9:77:89:61:7c:92:c1:34:4c: 2c:9f:1e:73:95:87:c7:f7:51:4c:26:90:b7:57:7c: 5c:0a:67:e9:3e:80:3c:95:f9:85:ee:99:71:25:71: b8:34:0c:96:38:2d:af:d0:ca:f2:3f:72:1c:5e:32: 65:c0:c7:de:45:ed:9c:f5:55:6f:3b:e6:59:00:5e: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:36:36:1E:52:3A:FF:2C:BE:06:C9:D5:D4:3D:48:C0:38:30:39:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c2:74:6e:70:56:85:c3:02:51:a9:d0:73:08:1b:0e:12:27: e0:ab:4d:fd:82:d2:62:fa:c6:9a:92:19:01:4b:23:86:05:e8: 84:f8:e7:ff:6b:d5:ef:49:32:8d:57:3e:c7:82:59:40:e7:be: 46:6f:93:55:23:6d:d8:b3:c0:28:36:98:80:40:77:2e:46:13: bf:d2:f7:1d:9d:61:ea:fd:c3:88:b6:9c:1f:fc:a5:f2:80:e2: d8:4a:a0:31:2a:1c:8c:14:2c:f1:58:76:2a:8c:8b:c4:59:b4: d9:34:d9:46:b6:71:5c:04:56:68:31:66:1d:34:36:8c:9d:c7: b4:cb:4b:4b:62:73:8d:94:12:20:7a:78:3f:5f:01:bd:31:99: a5:98:39:a9:64:ad:06:5e:6f:ee:95:c8:ce:26:ae:47:68:cb: ac:a2:90:01:54:4d:f6:dd:51:1c:b7:98:ce:96:d7:93:18:4b: ee:c7:55:75:4d:fc:ff:77:b8:0a:fa:34:92:d6:18:e3:8d:95: 10:f3:c0:91:ad:fc:8a:6e:2c:04:5a:c9:46:7b:71:f1:c9:63: 55:b9:cc:d0:76:c6:dd:3b:79:68:c9:50:d5:73:bb:74:22:79: 7f:02:42:b0:ff:1e:e8:43:f3:b1:2a:19:ef:1c:82:66:51:62: 6c:c2:b6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mx+NsItXA4UegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk OWFmZWZlYzMtMDMzZS00NTA4LTgyZjMtZDJmODhiYWFjMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs7IYZUmq80D3ckLZ7OBTugNKsiLkYs6vzM0 PI3lxk2OUzXMj+B3yX97FKOnmIQRHRilXWuFxaYXXAHFbVnYfg4CYw1vlH/avv2V 1I6WljJZHTQraS4xSoP9JYkg9kORlxauT2OV89ME5o1ttvGuhhVIIekP5dhk0Myc uldQ6sAax1LpflgoWvgIiPto7Yw14vkIGMctxIXzS5STX9iqEFk88KkF6QanEi67 218PmWJtETQ0CoLpfYvpd4lhfJLBNEwsnx5zlYfH91FMJpC3V3xcCmfpPoA8lfmF 7plxJXG4NAyWOC2v0MryP3IcXjJlwMfeRe2c9VVvO+ZZAF5gKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU2Nh5SOv8svgbJ1dQ9SMA4MDk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVhMDE2M2ItYTFkYy0z OWRhLWI3MDgtMTMwMmY1NGExYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXCdG5wVoXDAlGp0HMIGw4SJ+CrTf2C0mL6xpqSGQFLI4YF6IT45/9r 1e9JMo1XPseCWUDnvkZvk1UjbdizwCg2mIBAdy5GE7/S9x2dYer9w4i2nB/8pfKA 4thKoDEqHIwULPFYdiqMi8RZtNk02Ua2cVwEVmgxZh00Noydx7TLS0tic42UEiB6 eD9fAb0xmaWYOalkrQZeb+6VyM4mrkdoy6yikAFUTfbdURy3mM6W15MYS+7HVXVN /P93uAr6NJLWGOONlRDzwJGt/IpuLARayUZ7cfHJY1W5zNB2xt07eWjJUNVzu3Qi eX8CQrD/HuhD87EqGe8cgmZRYmzCtpA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:21 2025 by rpki-client