$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa File: ed339504-718c-35d3-bec2-47a590c70f2c.roa (raw, json) Hash identifier: CLKpuEi3AAiw7ukf2k195xJzsyUORTmZiyTu0vhFuBM= Subject key identifier: F1:EB:69:F7:41:25:AA:E5:FD:DC:66:A5:B8:93:18:6E:B4:C2:DB:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE7DF7366F7E754DC780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 36623 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:7d:f7:36:6f:7e:75:4d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=ea4babc0-09ff-4471-961a-248475fbc88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:74:39:b0:94:57:5b:89:cb:17:5e:19:46: 86:0a:de:22:b0:e9:79:d2:a0:c2:ae:e9:8a:49:44: 88:8b:16:10:8b:c7:6a:50:b6:60:88:40:c9:2e:2d: 40:9f:63:2f:2a:07:7e:1b:da:fc:11:69:57:64:f6: d0:62:38:98:91:72:7f:5c:5b:aa:ad:57:87:dc:29: bd:91:00:59:24:25:92:70:3d:4d:ce:78:b4:69:7f: 76:16:6c:01:37:6c:5f:0e:78:00:63:93:a7:57:5c: 69:71:a4:86:53:72:02:e3:63:91:53:ee:99:52:f9: fd:74:49:6c:fc:08:4b:24:42:48:ca:37:d9:57:0b: 43:84:7d:29:3d:f3:fc:ff:6b:0b:e9:03:67:46:65: e9:8b:39:da:34:cf:e2:33:87:5e:c6:31:71:f4:2e: bd:42:1f:3b:27:d2:93:0c:f0:fb:94:c9:83:c8:a3: 31:96:10:47:66:36:70:0b:f7:1d:f8:5e:05:49:c7: 64:f0:59:35:2d:e1:31:a2:f0:78:dd:5f:ac:d6:be: 32:db:27:b6:9b:1b:3c:81:c2:55:c5:66:db:52:ce: 01:9b:e4:06:38:7f:2f:1d:ca:b6:c0:a0:fc:bc:db: 4e:5b:96:1c:46:47:50:03:a8:f0:83:17:47:6b:4a: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:69:F7:41:25:AA:E5:FD:DC:66:A5:B8:93:18:6E:B4:C2:DB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:24:11:31:06:1d:6c:18:ae:60:6b:1d:72:b3:fe:4c:79:6b: 3d:1c:c7:60:90:d3:62:54:26:ed:55:53:3b:9e:fe:ca:fa:1e: 00:ea:4f:9a:87:c0:55:97:6a:c4:6f:4e:50:df:e6:33:fc:2a: c8:44:2d:4d:5a:e6:6b:d2:d1:33:b3:91:18:13:52:72:76:53: 94:b2:f7:ae:84:b7:f5:95:bf:d8:fe:9a:e0:28:07:90:de:07: d4:12:d3:f1:a8:23:00:7d:2f:df:75:0a:9a:06:38:19:77:f0: bf:50:36:3a:23:17:3b:ce:82:0e:43:50:63:be:27:20:24:89: 56:72:70:f9:1f:c1:8e:9f:49:99:85:65:16:1a:a9:c7:31:b8: 68:95:40:01:1d:85:0c:98:ba:7b:78:4e:05:c0:17:30:cb:02: 69:ca:3b:f9:ef:60:dd:e7:e2:20:af:de:76:1a:2b:ab:f5:98: b1:44:81:a5:e2:31:a4:49:5b:66:3d:85:6a:0b:14:15:7a:b1: 9e:57:41:0a:3b:ed:24:c0:4d:32:26:18:1d:33:b7:49:ee:c8: 31:99:61:82:49:c0:65:a7:43:24:49:9d:33:37:3e:ee:8a:f2: 68:cb:9b:d2:91:99:a1:b3:5e:bd:5d:c2:a9:09:dc:ac:db:70: 13:6a:21:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M599zZvfnVNx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk ZWE0YmFiYzAtMDlmZi00NDcxLTk2MWEtMjQ4NDc1ZmJjODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaR0ObCUV1uJyxdeGUaGCt4isOl50qDCrumK SUSIixYQi8dqULZgiEDJLi1An2MvKgd+G9r8EWlXZPbQYjiYkXJ/XFuqrVeH3Cm9 kQBZJCWScD1Nzni0aX92FmwBN2xfDngAY5OnV1xpcaSGU3IC42ORU+6ZUvn9dEls /AhLJEJIyjfZVwtDhH0pPfP8/2sL6QNnRmXpiznaNM/iM4dexjFx9C69Qh87J9KT DPD7lMmDyKMxlhBHZjZwC/cd+F4FScdk8Fk1LeExovB43V+s1r4y2ye2mxs8gcJV xWbbUs4Bm+QGOH8vHcq2wKD8vNtOW5YcRkdQA6jwgxdHa0o7PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHrafdBJarl/dxmpbiTGG60wttGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQzMzk1MDQtNzE4Yy0z NWQzLWJlYzItNDdhNTkwYzcwZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgkETEGHWwYrmBrHXKz/kx5az0cx2CQ02JUJu1VUzue/sr6HgDqT5qH wFWXasRvTlDf5jP8KshELU1a5mvS0TOzkRgTUnJ2U5Sy966Et/WVv9j+muAoB5De B9QS0/GoIwB9L991CpoGOBl38L9QNjojFzvOgg5DUGO+JyAkiVZycPkfwY6fSZmF ZRYaqccxuGiVQAEdhQyYunt4TgXAFzDLAmnKO/nvYN3n4iCv3nYaK6v1mLFEgaXi MaRJW2Y9hWoLFBV6sZ5XQQo77STATTImGB0zt0nuyDGZYYJJwGWnQyRJnTM3Pu6K 8mjLm9KRmaGzXr1dwqkJ3KzbcBNqISM= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:17 2025 by rpki-client