$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa File: 06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa (raw, json) Hash identifier: wmZm+4KhhylMh63nGB/zMOK/zVa+Wog9t6M1FM8MdgA= Subject key identifier: EB:B1:CB:9B:F6:1A:39:2A:C6:19:D2:B9:8E:92:46:F1:E7:2B:D6:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B0CDC16F5DC087445B78D2380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 198.41.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:16:f5:dc:08:74:45:b7:8d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=a49aaa6c-73a7-4d06-b4b1-d5855a2f8b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:35:95:2c:64:b4:de:25:c7:a0:0c:77:45: 0a:c8:76:9d:f7:ac:41:4f:8a:d7:60:35:78:03:b3: df:28:9b:7b:73:41:27:fb:05:12:31:5b:e1:d8:5e: 50:02:fb:00:a7:5e:42:d4:02:5a:b0:d5:ff:46:5e: e0:ee:02:54:2c:e5:87:35:bc:58:0f:4a:5d:d8:0f: e0:b5:4c:0d:20:db:23:cb:99:bf:60:f6:43:7d:d8: c0:0b:a6:0e:dc:34:7c:ee:cc:db:3e:ab:f9:0c:85: 35:0d:68:a5:54:0d:4c:f7:f6:69:e1:f0:69:23:57: 26:a2:2d:f2:dc:a1:07:db:68:c0:69:e1:eb:24:ec: da:57:ac:26:3e:34:f6:2a:7c:74:57:17:f0:8b:d2: c0:6d:02:f1:b5:96:a0:91:49:99:b4:8b:22:18:8f: 0f:9b:ca:40:c2:d2:a3:30:62:6b:95:7e:b9:2d:88: ab:85:9e:c9:f8:f4:78:ba:db:28:1c:0d:32:fd:a9: 5d:0b:9f:ea:7e:97:e1:96:3e:2e:66:fa:56:94:e3: 21:4e:8d:0b:d1:6b:c7:1b:ba:2e:58:5a:88:69:25: 57:ce:53:50:16:10:34:e9:20:7b:1e:9b:71:7c:a9: 47:57:e7:11:98:17:24:a8:7e:1b:12:bc:5d:40:8d: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:CB:9B:F6:1A:39:2A:C6:19:D2:B9:8E:92:46:F1:E7:2B:D6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06f0edf4-50e6-3949-9a21-f6bb0d2f0313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:74:f3:ee:6a:7f:21:14:76:10:af:28:40:63:65:83:90:f3: a6:e3:80:83:f6:9a:8c:31:22:01:16:9a:ca:a6:66:d9:84:fa: bd:c5:1f:08:e8:5e:50:a3:bd:5a:a2:54:71:9c:93:74:86:7e: f0:53:10:47:dd:63:d0:d1:97:d2:b3:6a:f1:12:27:ab:b9:5b: 1f:3c:16:27:02:6e:33:aa:90:93:01:88:dd:a2:9c:a3:83:36: ef:ab:5e:63:fc:bd:54:9b:36:ab:be:de:0a:05:9a:5a:bc:46: 19:1f:54:81:69:67:e9:4d:88:2f:4f:e4:47:7f:86:a4:05:8b: 54:6c:f8:6a:ec:cf:21:77:d0:d3:20:7d:85:2f:80:5e:7f:da: fb:2f:6b:ec:d3:2a:04:44:b6:0a:55:f6:4f:23:d7:2f:dd:6f: b4:f0:0f:a5:95:89:df:5c:ad:be:3c:82:6d:d6:72:dc:5c:47: 0c:69:89:53:3c:a0:79:38:5e:d7:00:3e:2e:0e:3a:c3:0c:f5: da:0d:b7:6a:59:8d:02:9f:27:8d:36:ba:e4:81:6a:08:d3:cc: fb:cf:6c:49:e2:b3:b2:cc:d2:be:7b:61:41:eb:f3:02:db:bb: 19:8f:00:f0:9a:70:91:7e:f7:12:03:53:aa:8b:3b:57:27:73: 03:28:cb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3Bb13Ah0RbeNI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YTQ5YWFhNmMtNzNhNy00ZDA2LWI0YjEtZDU4NTVhMmY4YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MM1lSxktN4lx6AMd0UKyHad96xBT4rXYDV4 A7PfKJt7c0En+wUSMVvh2F5QAvsAp15C1AJasNX/Rl7g7gJULOWHNbxYD0pd2A/g tUwNINsjy5m/YPZDfdjAC6YO3DR87szbPqv5DIU1DWilVA1M9/Zp4fBpI1cmoi3y 3KEH22jAaeHrJOzaV6wmPjT2Knx0Vxfwi9LAbQLxtZagkUmZtIsiGI8Pm8pAwtKj MGJrlX65LYirhZ7J+PR4utsoHA0y/aldC5/qfpfhlj4uZvpWlOMhTo0L0WvHG7ou WFqIaSVXzlNQFhA06SB7HptxfKlHV+cRmBckqH4bErxdQI0jhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuxy5v2GjkqxhnSuY6SRvHnK9YdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDZmMGVkZjQtNTBlNi0z OTQ5LTlhMjEtZjZiYjBkMmYwMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt08+5qfyEUdhCvKEBjZYOQ86bjgIP2mowxIgEWmsqmZtmE+r3FHwjo XlCjvVqiVHGck3SGfvBTEEfdY9DRl9KzavESJ6u5Wx88FicCbjOqkJMBiN2inKOD Nu+rXmP8vVSbNqu+3goFmlq8RhkfVIFpZ+lNiC9P5Ed/hqQFi1Rs+GrszyF30NMg fYUvgF5/2vsva+zTKgREtgpV9k8j1y/db7TwD6WVid9crb48gm3WctxcRwxpiVM8 oHk4XtcAPi4OOsMM9doNt2pZjQKfJ402uuSBagjTzPvPbEnis7LM0r57YUHr8wLb uxmPAPCacJF+9xIDU6qLO1cncwMoyyQ= -----END CERTIFICATE-----Generated at Thu Sep 11 02:59:04 2025 by rpki-client