$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa File: e9d29a66-129c-3106-a027-48db35daf422.roa (raw, json) Hash identifier: JWHwfJZ9+6VST3UPn5493Zx1ovN2SAj//I+R7z0MBbU= Subject key identifier: DF:F9:31:A2:F9:85:04:32:2D:34:08:EC:EB:4A:67:D6:C9:D0:6A:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCBF5111D4DBAEA3C3080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa Signing time: Thu 10 Jul 2025 12:42:39 +0000 ROA not before: Thu 10 Jul 2025 12:42:39 +0000 ROA not after: Wed 08 Oct 2025 12:42:39 +0000 asID: 396597 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:f5:11:1d:4d:ba:ea:3c:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:39 2025 GMT Not After : Oct 8 12:42:39 2025 GMT Subject: CN=68b89332-cce1-49e0-8642-7aa8c9989584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:35:ed:6d:7e:1e:ef:6b:db:ef:bd:35:c1: 1a:4e:c4:ed:12:eb:e7:71:b7:b6:e1:9c:e4:da:f1: f4:bb:14:c8:41:ed:4c:77:f3:ea:bd:99:be:51:34: f1:a2:d9:8c:35:ad:ee:a8:cc:35:ca:5f:75:dd:b3: 48:45:04:16:1c:cb:b4:dd:c7:e8:b3:67:30:47:4d: 48:8f:55:9e:2a:ea:a4:e5:18:03:a5:84:14:fd:ca: 1a:53:2c:01:14:a5:fc:c8:a5:da:ef:0e:8e:64:d3: 42:a7:46:b3:da:a6:14:3d:24:76:02:1e:a8:9b:68: 1a:79:b3:24:b2:b6:16:a9:6b:ee:a5:04:b6:6b:07: 86:41:d3:35:68:a7:e3:b3:8e:bd:78:99:03:28:e8: 26:be:d1:82:ad:ed:bb:52:f2:a9:1a:0b:d8:28:8e: 24:e7:dd:81:96:e4:db:28:98:72:30:93:b0:2a:44: 26:a3:ec:47:bd:86:ee:fa:51:41:69:96:22:8b:d7: 3d:fc:bf:aa:0c:0b:de:0f:c3:8d:34:00:84:3f:f4: 7a:2e:f9:9f:ec:0b:c1:14:44:51:3d:5a:e0:7a:d0: 07:aa:db:e1:c4:31:e9:45:cb:c0:05:b2:9f:f9:94: 51:0e:e8:8f:63:3f:32:3b:0d:aa:fc:34:83:44:45: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F9:31:A2:F9:85:04:32:2D:34:08:EC:EB:4A:67:D6:C9:D0:6A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ef:41:29:d2:c5:86:bf:c1:82:bb:de:44:28:3d:7d:0c:53: 1d:62:86:76:26:48:e1:78:37:37:89:96:25:b2:e0:36:2b:85: 9a:98:fd:67:d9:6d:41:43:97:6b:d8:eb:17:eb:74:3a:fb:0c: 32:97:7c:51:5f:88:b6:23:cb:6f:6e:f3:7e:bd:43:8b:1b:65: c5:7f:05:54:98:a4:a5:cc:b2:e4:2e:3a:8f:fb:3e:b0:88:c3: db:d8:4e:2b:e3:e1:fc:b5:4e:23:10:5e:c5:d3:53:26:c9:a0: 39:f1:86:43:e9:d8:53:f1:bf:30:db:eb:0e:3a:d5:6a:aa:0d: 74:34:3a:0f:60:1a:82:43:c7:7a:34:dc:be:d4:ac:1f:f7:e5: 79:89:97:1b:2f:fd:80:66:a9:ae:5a:e3:26:fd:69:74:3c:f4: 72:5f:ee:3a:ce:51:cf:a5:82:0a:bb:18:ee:53:d8:ac:6d:c3: 73:ac:c5:fb:b4:ec:f6:a2:eb:a2:21:e2:a3:bd:72:3b:77:be: db:1b:2a:85:87:07:40:b3:7f:74:25:78:9f:77:2a:3b:b2:5c: fb:71:63:d9:ce:05:9d:70:f0:e8:bc:01:2e:41:af:6b:54:1f: 8f:81:c7:6c:f5:59:49:32:dd:ed:d0:d4:4f:a8:ab:4e:4a:d4: a6:03:f4:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43Mv1ER1Nuuo8MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOVoXDTI1MTAwODEyNDIzOVowLzEtMCsGA1UEAxMk NjhiODkzMzItY2NlMS00OWUwLTg2NDItN2FhOGM5OTg5NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTE17W1+Hu9r2++9NcEaTsTtEuvncbe24Zzk 2vH0uxTIQe1Md/PqvZm+UTTxotmMNa3uqMw1yl913bNIRQQWHMu03cfos2cwR01I j1WeKuqk5RgDpYQU/coaUywBFKX8yKXa7w6OZNNCp0az2qYUPSR2Ah6om2gaebMk srYWqWvupQS2aweGQdM1aKfjs469eJkDKOgmvtGCre27UvKpGgvYKI4k592BluTb KJhyMJOwKkQmo+xHvYbu+lFBaZYii9c9/L+qDAveD8ONNACEP/R6Lvmf7AvBFERR PVrgetAHqtvhxDHpRcvABbKf+ZRRDuiPYz8yOw2q/DSDREWrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/5MaL5hQQyLTQI7OtKZ9bJ0GqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTlkMjlhNjYtMTI5Yy0z MTA2LWEwMjctNDhkYjM1ZGFmNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvvQSnSxYa/wYK73kQoPX0MUx1ihnYmSOF4NzeJliWy4DYrhZqY/WfZ bUFDl2vY6xfrdDr7DDKXfFFfiLYjy29u8369Q4sbZcV/BVSYpKXMsuQuOo/7PrCI w9vYTivj4fy1TiMQXsXTUybJoDnxhkPp2FPxvzDb6w461WqqDXQ0Og9gGoJDx3o0 3L7UrB/35XmJlxsv/YBmqa5a4yb9aXQ89HJf7jrOUc+lggq7GO5T2Kxtw3Osxfu0 7Pai66Ih4qO9cjt3vtsbKoWHB0Czf3QleJ93KjuyXPtxY9nOBZ1w8Oi8AS5Br2tU H4+Bx2z1WUky3e3Q1E+oq05K1KYD9Aw= -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:05 2025 by rpki-client