$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa File: f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa (raw, json) Hash identifier: xGY1R/B2wqV7Xgxo+/JchlUdc8vGx50EsLe/UwTIGnM= Subject key identifier: DB:F0:70:9A:44:6A:C0:21:86:07:13:EA:E7:8A:BF:C2:EA:56:28:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCB5D3C858909D4A3DCE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa Signing time: Thu 10 Jul 2025 12:42:38 +0000 ROA not before: Thu 10 Jul 2025 12:42:38 +0000 ROA not after: Wed 08 Oct 2025 12:42:38 +0000 asID: 396572 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:cb:5d:3c:85:89:09:d4:a3:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:38 2025 GMT Not After : Oct 8 12:42:38 2025 GMT Subject: CN=640fe4c2-e5af-457a-b17d-5b476a0e8535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:7b:be:11:4d:fe:ae:26:5d:36:e4:44:5d: ef:39:ca:7b:8a:e8:3a:03:b6:96:75:b7:1a:51:f4: 58:63:99:16:54:75:5f:81:6b:8c:37:d0:95:4d:9f: 3d:a3:99:70:c7:d2:06:d5:4c:12:90:b3:71:9a:fa: dc:cd:8f:4e:8e:24:70:72:50:56:fe:30:57:94:14: d5:13:6c:bc:d6:21:58:0b:93:88:e9:e7:db:5b:b2: de:29:74:2a:c1:27:8c:c4:9f:88:e1:12:38:da:0a: 99:e9:a6:0a:3c:e5:cd:c8:83:c3:0b:8a:e4:05:21: 1c:80:3a:8b:60:d5:88:0d:85:ba:82:dd:45:b4:9d: 33:b8:fb:78:bf:06:1e:0c:b3:62:c8:67:46:8b:01: 9a:33:aa:ee:ce:a8:24:cb:68:fe:09:7e:af:ea:e5: 64:f3:ca:e1:f6:77:0d:97:58:09:50:46:6b:af:27: e7:31:c0:ab:2a:c0:e7:42:63:1a:60:df:de:b9:44: 2f:9b:12:07:82:7b:1f:be:b2:d9:a8:5b:00:7f:ac: ac:fb:94:db:5c:e7:24:82:d8:c5:38:42:e3:62:d9: 1f:34:a7:de:a4:e9:9c:11:24:13:93:da:8c:8a:4a: 3e:e9:16:8c:36:4d:e4:d2:e9:79:a0:d6:f4:e8:39: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:70:9A:44:6A:C0:21:86:07:13:EA:E7:8A:BF:C2:EA:56:28:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f3:e2:80:1d:30:5d:fb:41:6e:96:b1:23:69:76:fd:0e:67: 29:9b:ea:e5:7b:0b:a1:72:1e:1a:4a:18:07:88:75:17:c1:62: 37:ce:2a:c8:2a:da:a9:51:55:2b:0e:c4:d6:48:1d:ae:b4:01: c8:be:29:33:fa:68:56:84:11:06:f5:75:45:18:38:a2:91:af: 28:7c:34:90:08:c6:f5:d6:c2:60:d4:96:4d:88:c1:7c:f6:e7: 18:a2:59:b1:33:ca:4d:ef:3d:40:d8:66:2f:75:e9:09:ec:c5: 0a:a0:2e:00:16:3f:58:5c:15:e6:d0:94:1c:29:be:31:86:e1: ad:59:31:67:a7:1f:9b:5b:1f:4f:28:58:07:8a:ba:c0:ef:fb: 2b:60:5b:7d:cf:cc:e9:3c:a0:2e:ab:42:92:cc:32:73:f5:2c: cf:fb:b9:a3:ac:06:f6:6a:d5:f2:f0:9c:e1:7d:12:3f:b5:03: 8f:ac:32:f0:43:8d:27:00:b8:3c:2f:f7:21:fb:b1:19:19:b3: 84:45:9b:45:d5:ab:d3:3e:65:95:c7:6a:37:e3:3f:66:88:cc: 45:1c:fa:e9:f0:0f:3e:ab:5e:cd:0b:4d:7c:5f:e1:f1:d3:1a: 9c:aa:01:2b:ef:98:a6:49:07:aa:99:4f:f9:f9:55:57:93:4a: f3:24:f8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43MtdPIWJCdSj3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDIzOFoXDTI1MTAwODEyNDIzOFowLzEtMCsGA1UEAxMk NjQwZmU0YzItZTVhZi00NTdhLWIxN2QtNWI0NzZhMGU4NTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSV7vhFN/q4mXTbkRF3vOcp7iug6A7aWdbca UfRYY5kWVHVfgWuMN9CVTZ89o5lwx9IG1UwSkLNxmvrczY9OjiRwclBW/jBXlBTV E2y81iFYC5OI6efbW7LeKXQqwSeMxJ+I4RI42gqZ6aYKPOXNyIPDC4rkBSEcgDqL YNWIDYW6gt1FtJ0zuPt4vwYeDLNiyGdGiwGaM6ruzqgky2j+CX6v6uVk88rh9ncN l1gJUEZrryfnMcCrKsDnQmMaYN/euUQvmxIHgnsfvrLZqFsAf6ys+5TbXOckgtjF OELjYtkfNKfepOmcESQTk9qMiko+6RaMNk3k0ul5oNb06Dm9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvwcJpEasAhhgcT6ueKv8LqViiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdlNTE0ZjAtYmM4NS0z OWUzLTllNzMtMTFlYmJhN2E2NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrz4oAdMF37QW6WsSNpdv0OZymb6uV7C6FyHhpKGAeIdRfBYjfOKsgq 2qlRVSsOxNZIHa60Aci+KTP6aFaEEQb1dUUYOKKRryh8NJAIxvXWwmDUlk2IwXz2 5xiiWbEzyk3vPUDYZi916QnsxQqgLgAWP1hcFebQlBwpvjGG4a1ZMWenH5tbH08o WAeKusDv+ytgW33PzOk8oC6rQpLMMnP1LM/7uaOsBvZq1fLwnOF9Ej+1A4+sMvBD jScAuDwv9yH7sRkZs4RFm0XVq9M+ZZXHajfjP2aIzEUc+unwDz6rXs0LTXxf4fHT GpyqASvvmKZJB6qZT/n5VVeTSvMk+MA= -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:40 2025 by rpki-client