$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa File: fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa (raw, json) Hash identifier: XZnqK113+zPdnbP1F9PYPF1svo+o2gCDlyXMWIzLr0o= Subject key identifier: 67:33:81:3B:6F:48:C7:7C:44:87:0B:B6:8E:3D:F8:7E:A4:00:45:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A78DCD031C65A2B630EA15700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa Signing time: Thu 10 Jul 2025 12:42:41 +0000 ROA not before: Thu 10 Jul 2025 12:42:41 +0000 ROA not after: Wed 08 Oct 2025 12:42:41 +0000 asID: 396573 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:dc:d0:31:c6:5a:2b:63:0e:a1:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 10 12:42:41 2025 GMT Not After : Oct 8 12:42:41 2025 GMT Subject: CN=1c42ca81-8050-4345-b562-0311d2e7a7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:a7:e9:07:de:82:27:c8:00:2b:1a:1d:2a: 45:20:d9:53:21:07:3e:79:c8:d7:f0:b6:3e:81:f5: 96:af:a8:64:a3:ef:76:09:a6:39:85:a8:52:1a:20: f5:5b:a0:14:ab:98:26:1b:20:26:57:d8:32:b1:7c: 61:27:9a:4d:83:a3:26:eb:30:24:1e:a3:51:43:69: e9:fd:2d:d3:f2:dd:2c:9b:93:73:80:57:82:47:f8: 5f:59:17:6c:20:ca:11:f8:47:0a:82:1f:21:20:8c: 6e:86:61:db:6a:03:87:53:dd:ef:b9:f5:85:0c:4c: ac:19:73:dd:2e:c9:f5:05:e2:6b:91:5a:75:74:e3: d8:9f:cf:5e:a5:cc:b1:4d:a7:08:eb:2e:76:ba:7e: b7:3a:ab:c3:8d:7e:08:cd:6f:df:8d:c8:14:ae:ad: 4c:ea:b7:0b:ee:4e:08:b7:d6:6e:bd:4f:57:02:0e: ab:f6:ba:a1:b4:7f:6e:47:4f:61:5e:c0:8a:46:38: ed:6c:65:1e:00:ca:51:db:e2:49:34:e9:d4:99:b2: 50:a6:f5:7f:d9:28:13:85:36:3f:42:86:d9:65:50: 68:d1:b7:d0:6b:ed:98:3e:b5:29:24:6a:9f:3c:b4: 6a:c3:2c:21:bc:6b:43:9a:9e:b3:ba:c7:e9:f8:a5: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:33:81:3B:6F:48:C7:7C:44:87:0B:B6:8E:3D:F8:7E:A4:00:45:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a8:ab:35:a9:92:12:39:58:c5:69:f1:45:9b:b8:6f:69:2f: a1:b7:95:65:cb:30:bb:a6:91:5b:f2:2e:1e:04:05:9e:5b:7f: 1f:30:f3:ab:0f:e3:fa:3f:16:94:c6:a8:ce:64:92:a1:9c:ee: aa:86:17:54:52:68:75:5b:da:f0:0d:f9:18:eb:1f:5a:24:08: ad:79:a5:6f:d1:ba:a4:a8:fe:f4:5b:3e:88:9c:5c:b2:5e:01: c5:43:b3:92:ed:c4:3a:77:4b:dd:53:de:19:70:62:41:f4:03: d6:3b:70:6c:6c:7b:be:a6:fa:3e:9a:23:0f:23:21:86:95:7e: 9c:87:ac:1d:c1:35:56:5d:6b:76:cd:8b:34:ed:52:c1:73:bc: 7f:b8:08:4c:e3:79:8b:48:9d:0d:0b:cd:6e:f7:23:e7:ea:95: a7:bf:b0:ed:08:b0:9d:d2:dc:42:87:27:ef:fd:9b:16:ed:c6: 4e:89:d7:9f:26:ec:b6:e1:ea:b0:ed:ac:4d:54:ef:f2:34:f9: e4:59:81:48:a8:dc:73:91:45:6a:ab:8e:e9:52:48:21:9b:c4: 32:08:5c:b0:f3:1e:10:00:b7:43:73:05:be:ef:5f:3a:cd:7e: b6:96:09:cf:9e:3f:1f:66:79:d7:a5:a2:12:ca:70:9e:c4:b9: 63:54:61:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43NAxxlorYw6hVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcxMDEyNDI0MVoXDTI1MTAwODEyNDI0MVowLzEtMCsGA1UEAxMk MWM0MmNhODEtODA1MC00MzQ1LWI1NjItMDMxMWQyZTdhN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKyn6QfegifIACsaHSpFINlTIQc+ecjX8LY+ gfWWr6hko+92CaY5hahSGiD1W6AUq5gmGyAmV9gysXxhJ5pNg6Mm6zAkHqNRQ2np /S3T8t0sm5NzgFeCR/hfWRdsIMoR+EcKgh8hIIxuhmHbagOHU93vufWFDEysGXPd Lsn1BeJrkVp1dOPYn89epcyxTacI6y52un63OqvDjX4IzW/fjcgUrq1M6rcL7k4I t9ZuvU9XAg6r9rqhtH9uR09hXsCKRjjtbGUeAMpR2+JJNOnUmbJQpvV/2SgThTY/ QobZZVBo0bfQa+2YPrUpJGqfPLRqwywhvGtDmp6zusfp+KWpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGczgTtvSMd8RIcLto49+H6kAEUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM3MjhjYTUtZmU0Zi0z ODc5LWIzYWItZjMwMGE1ZjBlM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmoqzWpkhI5WMVp8UWbuG9pL6G3lWXLMLumkVvyLh4EBZ5bfx8w86sP 4/o/FpTGqM5kkqGc7qqGF1RSaHVb2vAN+RjrH1okCK15pW/RuqSo/vRbPoicXLJe AcVDs5LtxDp3S91T3hlwYkH0A9Y7cGxse76m+j6aIw8jIYaVfpyHrB3BNVZda3bN izTtUsFzvH+4CEzjeYtInQ0LzW73I+fqlae/sO0IsJ3S3EKHJ+/9mxbtxk6J158m 7Lbh6rDtrE1U7/I0+eRZgUio3HORRWqrjulSSCGbxDIIXLDzHhAAt0NzBb7vXzrN fraWCc+ePx9medelohLKcJ7EuWNUYXQ= -----END CERTIFICATE-----Generated at Wed Jul 23 11:48:20 2025 by rpki-client