$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa File: e11d5d20-c81c-3d60-a54b-f3047cd42608.roa (raw, json) Hash identifier: 25Ck+7mcUCojIRSjPr1PM3/DO8drW+IU2bYNCZzixvw= Subject key identifier: 31:58:8D:FE:BB:8C:07:5F:28:FE:47:29:7D:21:5D:0E:40:76:E9:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCD06D13BA6C1DD53E800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396541 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cd:06:d1:3b:a6:c1:dd:53:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=c63ce10c-7ddd-4faa-b668-140bc0f8ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b4:34:00:d4:56:dc:e7:0c:45:c4:35:1f:d9: 27:66:78:f6:cb:bc:1b:55:25:3f:ea:22:58:09:65: 79:29:0e:70:44:d2:e8:45:51:4c:7f:1a:30:61:98: 9c:4d:78:94:f7:6d:e1:c7:f3:40:fd:e8:32:51:96: ea:dd:01:30:4e:f9:1d:ff:30:17:3e:0e:88:56:6a: c2:b5:81:ec:f6:d8:92:9c:10:51:9f:43:67:88:a3: 56:66:7e:9c:bb:76:7a:64:cc:7b:54:5c:0e:4d:8d: 72:9f:b6:83:31:89:72:e6:32:43:e8:d9:f8:20:c0: 1a:fd:54:e3:c5:56:56:df:21:bc:d2:4a:f9:f6:7c: dc:a0:6f:3e:0b:a0:94:c6:16:bd:cd:d4:15:06:5a: 48:28:f7:ad:db:dc:a8:a7:de:63:07:e1:9b:94:59: e3:79:8d:6e:2d:b1:27:e5:70:c1:74:90:20:21:7d: c9:a6:c4:de:ac:94:4e:03:fd:36:ff:49:0d:93:39: 61:74:e5:5c:4d:3e:c3:1b:11:56:6a:91:b9:79:27: de:ae:ec:33:2a:5c:f4:bc:00:ed:1a:f1:da:f8:7b: f9:62:9a:f1:de:8a:e0:56:7c:a8:d9:99:08:56:fd: 44:fa:1e:54:ae:f0:b3:fc:d6:02:da:f1:2a:9f:bf: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:58:8D:FE:BB:8C:07:5F:28:FE:47:29:7D:21:5D:0E:40:76:E9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:72:43:91:56:e3:62:3d:c3:2b:b3:29:d5:37:9f:e2:12:8c: 5d:d6:8d:9b:af:79:87:9b:1d:01:25:16:79:2e:75:e5:7c:cb: 1a:c7:5e:f5:9b:3b:72:38:33:8c:b6:4a:68:11:82:48:de:a7: 39:17:10:06:07:19:df:32:6f:d7:b2:ae:37:01:ee:14:48:e3: 9c:9f:56:ef:1a:30:86:62:30:7c:8e:7c:69:5a:f7:c7:fa:54: 6e:da:cf:f3:67:99:cd:9c:8e:cd:83:a3:95:93:61:3e:48:2f: 54:27:a3:94:01:7a:1e:8e:a6:57:d3:1e:38:da:a2:11:35:ac: 21:de:aa:39:7c:e3:4f:a1:93:41:74:18:70:a6:5f:df:cf:19: a9:59:53:3a:eb:e0:1d:1e:94:72:ab:ac:bb:a9:08:c6:e7:71: 00:41:87:85:c5:3a:8b:48:33:4e:53:30:81:06:af:1c:e5:a4: 40:83:55:35:88:13:c5:95:02:15:1e:77:e6:71:2c:1c:03:0e: 84:55:f5:ec:a9:30:3d:90:79:6e:a3:21:2d:18:76:ad:e2:47: 9c:7b:88:50:ba:1c:a1:19:d3:22:97:29:03:27:10:1c:22:9c: ed:50:87:dd:13:49:ae:68:e3:e4:da:4f:43:27:e5:5a:49:ec: b9:5b:e6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M0G0Tumwd1T6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk YzYzY2UxMGMtN2RkZC00ZmFhLWI2NjgtMTQwYmMwZjhlZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rQ0ANRW3OcMRcQ1H9knZnj2y7wbVSU/6iJY CWV5KQ5wRNLoRVFMfxowYZicTXiU923hx/NA/egyUZbq3QEwTvkd/zAXPg6IVmrC tYHs9tiSnBBRn0NniKNWZn6cu3Z6ZMx7VFwOTY1yn7aDMYly5jJD6Nn4IMAa/VTj xVZW3yG80kr59nzcoG8+C6CUxha9zdQVBlpIKPet29yop95jB+GblFnjeY1uLbEn 5XDBdJAgIX3JpsTerJROA/02/0kNkzlhdOVcTT7DGxFWapG5eSferuwzKlz0vADt GvHa+Hv5Yprx3orgVnyo2ZkIVv1E+h5UrvCz/NYC2vEqn7/SuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFYjf67jAdfKP5HKX0hXQ5AduksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTExZDVkMjAtYzgxYy0z ZDYwLWE1NGItZjMwNDdjZDQyNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFyQ5FW42I9wyuzKdU3n+ISjF3WjZuveYebHQElFnkudeV8yxrHXvWb O3I4M4y2SmgRgkjepzkXEAYHGd8yb9eyrjcB7hRI45yfVu8aMIZiMHyOfGla98f6 VG7az/Nnmc2cjs2Do5WTYT5IL1Qno5QBeh6OplfTHjjaohE1rCHeqjl840+hk0F0 GHCmX9/PGalZUzrr4B0elHKrrLupCMbncQBBh4XFOotIM05TMIEGrxzlpECDVTWI E8WVAhUed+ZxLBwDDoRV9eypMD2QeW6jIS0Ydq3iR5x7iFC6HKEZ0yKXKQMnEBwi nO1Qh90TSa5o4+TaT0Mn5VpJ7Llb5jQ= -----END CERTIFICATE-----Generated at Wed Jul 23 17:26:11 2025 by rpki-client