$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb02344d-8538-31ff-bf5f-d82e3afbf8b9.roa File: fb02344d-8538-31ff-bf5f-d82e3afbf8b9.roa (raw, json) Hash identifier: Tr/m45iqE/Cr9FU7qEqrfmO5/3JTrWRJv0h+WD2uwtM= Subject key identifier: A1:90:7A:D7:EC:52:83:72:C7:5D:6A:64:92:41:25:BA:8F:08:E7:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCCE8F4DD75025D63A0480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb02344d-8538-31ff-bf5f-d82e3afbf8b9.roa Signing time: Thu 10 Jul 2025 12:42:40 +0000 ROA not before: Thu 10 Jul 2025 12:42:40 +0000 ROA not after: Wed 08 Oct 2025 12:42:40 +0000 asID: 396827 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:ce:8f:4d:d7:50:25:d6:3a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:40 2025 GMT Not After : Oct 8 12:42:40 2025 GMT Subject: CN=2cc5044b-c894-4318-99ae-3e1afc7fb73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:0a:c4:f2:4c:2e:39:d1:dd:db:ac:63:0a: 50:4b:61:f0:96:93:58:34:53:13:ff:de:f6:e0:52: ff:48:be:4c:bb:5c:08:00:92:46:d7:fa:89:85:71: 88:d6:64:87:cc:c9:11:30:b0:89:45:a6:dd:d2:9f: 28:2c:1a:6f:db:10:36:12:e4:5a:14:65:d1:bd:a2: 65:ca:52:67:0c:b7:ca:83:d8:93:87:fb:ba:36:56: 29:7a:2f:42:c9:8a:18:51:63:17:82:05:84:b1:67: 67:ca:ba:a2:e9:23:7c:e3:a8:54:b9:52:fd:be:c3: 91:07:99:f8:ef:3e:64:2d:fd:70:1f:c4:5f:9a:e7: 00:bd:ea:ff:a7:61:e9:de:3b:0e:32:5c:3b:4a:01: 6b:ae:67:99:16:84:10:55:30:a0:3f:bb:9a:aa:ad: 6a:11:9f:fa:b4:3d:85:46:d5:a3:48:9e:8c:a9:d7: 76:5c:01:e3:cf:35:44:f3:c0:7f:28:60:0e:04:39: 6a:40:14:e7:b8:46:ee:65:06:72:f3:ac:d9:d7:67: 67:9d:2f:07:60:0e:a2:6f:84:8f:38:de:0c:77:ee: c7:02:50:03:09:1d:d7:0a:d2:2e:7f:0f:d7:b3:ad: c1:74:67:02:18:1d:4c:d6:5b:f2:17:9f:80:da:37: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:7A:D7:EC:52:83:72:C7:5D:6A:64:92:41:25:BA:8F:08:E7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb02344d-8538-31ff-bf5f-d82e3afbf8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:13:e7:6e:3f:f3:6d:7f:95:60:42:db:f8:05:3b:67:8e:83: cf:80:f0:27:4b:45:5b:fe:3f:ab:58:4e:00:4e:41:10:1c:c2: 0a:67:05:6a:ad:dd:34:ef:47:65:d1:c2:4b:e6:61:dc:5c:37: c2:7b:2f:43:c9:20:62:fd:ab:fa:0f:fd:58:71:88:7c:4e:14: 93:56:11:a6:bd:01:7b:30:3e:45:36:a8:da:80:cd:17:84:dc: 3e:38:a7:dd:37:8f:d2:13:3c:37:13:fb:4e:50:c0:b5:ea:91: e0:25:b8:c3:f1:fa:3f:98:33:f2:1a:c3:dc:aa:1c:0e:40:19: e9:d0:7f:4f:a0:04:5b:9b:5f:df:9f:b7:46:52:59:24:e0:30: e6:ab:ac:21:b8:76:db:62:a3:b8:8e:61:5f:41:8a:79:56:c5: af:fb:fb:db:db:a6:1c:17:71:cd:ab:83:a4:f0:b5:12:5c:db: 92:b5:d5:5f:24:b9:f1:5c:af:74:02:c5:41:9c:3a:11:c3:1b: c3:2c:d4:b0:cd:f1:2f:e1:5b:52:cc:1f:48:7e:0e:ff:7e:92: 31:42:08:00:9b:07:37:61:1b:1d:60:5a:10:4f:0c:26:73:4d: 9d:37:21:8d:a0:8c:fa:c7:92:ca:de:c8:d1:6d:a3:d6:32:6b: be:cc:f4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M6PTddQJdY6BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk MmNjNTA0NGItYzg5NC00MzE4LTk5YWUtM2UxYWZjN2ZiNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMMKxPJMLjnR3dusYwpQS2HwlpNYNFMT/972 4FL/SL5Mu1wIAJJG1/qJhXGI1mSHzMkRMLCJRabd0p8oLBpv2xA2EuRaFGXRvaJl ylJnDLfKg9iTh/u6NlYpei9CyYoYUWMXggWEsWdnyrqi6SN846hUuVL9vsORB5n4 7z5kLf1wH8RfmucAver/p2Hp3jsOMlw7SgFrrmeZFoQQVTCgP7uaqq1qEZ/6tD2F RtWjSJ6Mqdd2XAHjzzVE88B/KGAOBDlqQBTnuEbuZQZy86zZ12dnnS8HYA6ib4SP ON4Md+7HAlADCR3XCtIufw/Xs63BdGcCGB1M1lvyF5+A2jcfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGQetfsUoNyx11qZJJBJbqPCOfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIwMjM0NGQtODUzOC0z MWZmLWJmNWYtZDgyZTNhZmJmOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsT524/821/lWBC2/gFO2eOg8+A8CdLRVv+P6tYTgBOQRAcwgpnBWqt 3TTvR2XRwkvmYdxcN8J7L0PJIGL9q/oP/VhxiHxOFJNWEaa9AXswPkU2qNqAzReE 3D44p903j9ITPDcT+05QwLXqkeAluMPx+j+YM/Iaw9yqHA5AGenQf0+gBFubX9+f t0ZSWSTgMOarrCG4dttio7iOYV9BinlWxa/7+9vbphwXcc2rg6TwtRJc25K11V8k ufFcr3QCxUGcOhHDG8Ms1LDN8S/hW1LMH0h+Dv9+kjFCCACbBzdhGx1gWhBPDCZz TZ03IY2gjPrHksreyNFto9Yya77M9FQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:24 2025 by rpki-client