$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa File: 0a1d17be-d951-336b-89c6-34210e530519.roa (raw, json) Hash identifier: TsVC2Z9MYRD7dOkTw/steXHLgsz/Q0qswYyIdLpic0Q= Subject key identifier: 09:23:99:65:4F:C6:7B:0A:E9:7F:83:E2:84:29:D5:76:66:2E:A7:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628407339EF4946AE6DC2CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396592 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:07:33:9e:f4:94:6a:e6:dc:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=05e9aabe-3b0f-45a6-9709-703e5dded2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:a7:ed:33:8c:e8:4e:26:df:c9:1e:85:6d: 50:78:5c:aa:c7:44:b8:f6:59:bc:70:13:a7:17:36: cb:09:d8:3a:d4:ea:a9:03:ce:67:27:7e:be:99:6b: cc:f0:28:80:2d:82:8c:4a:27:04:66:54:c5:37:25: 99:f8:52:20:29:d6:48:aa:0a:aa:08:6d:29:bd:4c: c5:38:27:7d:38:f5:5d:b1:f7:b5:6b:5a:a6:1a:42: d6:a5:f6:15:bc:2d:b6:cd:8c:86:f0:e6:f5:b3:14: b5:ff:da:4e:0d:7b:70:3c:7e:47:4d:90:d8:5d:53: 58:ae:00:89:44:1d:84:ab:ed:61:8f:a0:bb:51:cd: 44:92:e9:6e:11:cd:37:8f:8c:b4:34:be:b6:82:dd: 28:52:02:f4:88:c5:b4:24:ff:ca:26:3d:37:db:b0: da:ba:0c:52:61:3f:b5:2d:f3:be:e4:0f:17:2c:59: a6:11:4f:f2:db:a7:6f:09:d0:8a:c0:6d:db:18:f0: 1e:ed:61:06:e2:54:c4:d4:78:12:63:bb:76:37:b5: 22:35:da:37:6a:26:16:7e:95:77:4e:2e:db:73:89: 1e:cc:75:8c:f8:c1:64:e1:56:44:32:c9:d4:73:7b: 42:49:56:39:34:b5:87:0d:a7:17:f6:5a:2a:1e:de: 4b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:99:65:4F:C6:7B:0A:E9:7F:83:E2:84:29:D5:76:66:2E:A7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2a:54:e6:c9:76:47:73:e3:cb:c1:b6:56:70:8e:3d:71:65: 76:c3:63:3f:86:97:81:1e:11:d0:bf:0b:83:d5:a9:c1:79:4b: 3b:15:26:28:9c:5d:b8:0f:4e:68:cb:ec:5f:12:9a:c6:34:93: 28:a1:f7:3d:a4:d9:a8:1c:ed:97:10:ec:92:fa:4d:66:5e:97: 62:a1:16:a5:0b:14:d6:f6:15:5a:a2:6e:56:83:9c:81:84:2e: 1d:9d:5e:e1:60:3f:38:0e:20:0a:d3:65:0c:ee:67:bc:df:ce: 90:65:13:7b:7e:39:a8:da:41:5d:3b:7f:a2:f3:6f:1f:af:da: 4f:26:ff:9d:7a:77:c6:11:e8:b5:33:3e:f4:3f:aa:b2:2a:cc: 7a:ff:0e:aa:af:13:d7:69:08:69:f6:5d:73:6f:4e:9a:94:21: c9:91:ba:94:be:02:ef:50:ad:5c:49:23:06:d6:20:68:5d:81: 16:6f:e7:e1:4a:ca:6f:0b:3d:ad:01:72:bb:f2:0e:ce:ec:fc: 97:ba:ed:5f:2c:35:99:79:09:dd:d7:02:dc:9a:b1:fc:5b:97: de:32:33:70:22:6e:73:20:d3:cc:d9:b3:33:27:be:31:b0:5b: 72:3f:70:bb:53:88:0c:b4:e6:ec:49:7e:d6:5b:eb:fa:56:b2: d2:00:6d:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAcznvSUaubcLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MDVlOWFhYmUtM2IwZi00NWE2LTk3MDktNzAzZTVkZGVkMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx2n7TOM6E4m38kehW1QeFyqx0S49lm8cBOn FzbLCdg61OqpA85nJ36+mWvM8CiALYKMSicEZlTFNyWZ+FIgKdZIqgqqCG0pvUzF OCd9OPVdsfe1a1qmGkLWpfYVvC22zYyG8Ob1sxS1/9pODXtwPH5HTZDYXVNYrgCJ RB2Eq+1hj6C7Uc1EkuluEc03j4y0NL62gt0oUgL0iMW0JP/KJj0327DaugxSYT+1 LfO+5A8XLFmmEU/y26dvCdCKwG3bGPAe7WEG4lTE1HgSY7t2N7UiNdo3aiYWfpV3 Ti7bc4kezHWM+MFk4VZEMsnUc3tCSVY5NLWHDacX9loqHt5LgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAkjmWVPxnsK6X+D4oQp1XZmLqeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGExZDE3YmUtZDk1MS0z MzZiLTg5YzYtMzQyMTBlNTMwNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWKlTmyXZHc+PLwbZWcI49cWV2w2M/hpeBHhHQvwuD1anBeUs7FSYo nF24D05oy+xfEprGNJMoofc9pNmoHO2XEOyS+k1mXpdioRalCxTW9hVaom5Wg5yB hC4dnV7hYD84DiAK02UM7me8386QZRN7fjmo2kFdO3+i828fr9pPJv+denfGEei1 Mz70P6qyKsx6/w6qrxPXaQhp9l1zb06alCHJkbqUvgLvUK1cSSMG1iBoXYEWb+fh SspvCz2tAXK78g7O7PyXuu1fLDWZeQnd1wLcmrH8W5feMjNwIm5zINPM2bMzJ74x sFtyP3C7U4gMtObsSX7WW+v6VrLSAG2e -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:41 2025 by rpki-client