$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa File: 1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa (raw, json) Hash identifier: dj47f8IJ5KFnNVN2lb2nR49nv3A8D62t0MrBazp7GSo= Subject key identifier: 4A:4F:BA:EF:9C:12:A8:AD:0F:AB:13:8C:0B:E3:52:B0:CB:F9:50:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628406F4BC2FCA99EA32FB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396826 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:f4:bc:2f:ca:99:ea:32:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=34e3f07d-db35-48a4-bba2-a5da4407c73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:76:62:de:82:68:09:f1:9a:1a:25:c6:1e:8a: 03:98:00:d2:5b:ce:4e:ee:b6:ec:4a:94:38:aa:d2: 9f:40:f2:b3:f8:1b:4f:de:14:da:f8:47:21:15:49: be:b6:eb:b5:67:13:7b:b4:1f:59:dc:5a:82:e8:06: 1c:04:ea:47:94:c0:98:d1:be:e2:8a:c1:1a:08:6b: 4b:7d:e2:5c:1b:d9:2f:31:80:02:d4:ad:9b:95:94: de:94:14:b8:64:a3:78:65:10:51:e2:c9:75:d0:97: a3:bb:12:fe:ba:8a:7f:03:11:a0:ca:d0:0e:00:2a: ce:10:cc:98:89:73:e9:ee:e3:79:08:8f:df:8a:f0: d8:29:97:d2:9c:52:c3:b1:88:3e:0b:b0:ce:89:f3: 04:a4:75:5b:0a:82:9a:a7:d5:4e:a2:df:b9:82:13: d5:b5:d4:c7:98:c1:7f:04:2a:29:9e:53:ad:18:b0: 60:75:1f:ea:49:e2:a8:1c:2b:92:1c:ad:97:48:41: f1:28:73:cb:6d:3b:3f:eb:fb:eb:88:a5:fe:7a:c4: f8:4c:b7:ad:7a:e6:2f:5f:7b:4a:17:67:a1:ed:12: 06:23:33:ed:f1:d6:2a:44:d2:bb:77:60:8f:03:47: fb:a4:db:84:d3:73:ff:49:a2:ac:e9:4a:80:82:bd: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:BA:EF:9C:12:A8:AD:0F:AB:13:8C:0B:E3:52:B0:CB:F9:50:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:13:e5:47:2d:10:96:04:23:39:3a:ba:c7:14:bc:e9:1b:72: 75:05:3a:e8:fc:bf:51:ad:69:6f:88:e4:fd:d6:12:c0:e8:5f: 55:e9:85:bf:96:bb:5b:10:9a:e4:9c:f7:e2:f2:cb:55:aa:b9: ff:94:fe:7a:3e:41:63:2a:7c:f9:b8:aa:93:ee:f7:a9:53:67: 0c:44:79:11:7f:37:42:25:79:62:ea:a0:37:6e:ca:89:d0:3d: 87:db:98:95:19:91:8d:c6:6c:98:30:4d:98:bf:6e:fe:ad:f0: 31:8e:ff:b7:25:50:13:26:b0:8f:fe:1d:91:c2:3b:36:e5:ae: f0:86:9a:c3:2c:f1:dd:de:f9:87:b7:ef:23:5f:bb:73:f5:c3: b1:5a:e7:31:d8:d6:00:2a:22:9d:13:41:1e:cc:bb:55:89:ed: e2:0d:9a:23:28:56:2b:f0:f3:97:25:f6:7d:7f:0e:44:e8:94: 5c:f0:02:63:c4:8f:4a:1f:f0:ac:a9:0a:ff:2d:07:c2:87:00: 6b:0e:83:73:59:43:be:7f:6b:b5:36:81:21:1d:16:76:e5:ed: a0:30:f1:ef:f5:dc:ec:63:aa:49:47:af:41:22:c5:60:ff:23: d9:b4:5c:87:e2:64:26:97:37:e8:f5:46:7e:e0:ff:d8:d8:49: be:33:a7:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAb0vC/Kmeoy+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MzRlM2YwN2QtZGIzNS00OGE0LWJiYTItYTVkYTQ0MDdjNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHZi3oJoCfGaGiXGHooDmADSW85O7rbsSpQ4 qtKfQPKz+BtP3hTa+EchFUm+tuu1ZxN7tB9Z3FqC6AYcBOpHlMCY0b7iisEaCGtL feJcG9kvMYAC1K2blZTelBS4ZKN4ZRBR4sl10JejuxL+uop/AxGgytAOACrOEMyY iXPp7uN5CI/fivDYKZfSnFLDsYg+C7DOifMEpHVbCoKap9VOot+5ghPVtdTHmMF/ BCopnlOtGLBgdR/qSeKoHCuSHK2XSEHxKHPLbTs/6/vriKX+esT4TLeteuYvX3tK F2eh7RIGIzPt8dYqRNK7d2CPA0f7pNuE03P/SaKs6UqAgr0uDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpPuu+cEqitD6sTjAvjUrDL+VAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE2MWEyM2EtOTg0NC0z NjJkLWI0ZWItNmI3ZjQzZjNjOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYE+VHLRCWBCM5OrrHFLzpG3J1BTro/L9RrWlviOT91hLA6F9V6YW/ lrtbEJrknPfi8stVqrn/lP56PkFjKnz5uKqT7vepU2cMRHkRfzdCJXli6qA3bsqJ 0D2H25iVGZGNxmyYME2Yv27+rfAxjv+3JVATJrCP/h2Rwjs25a7whprDLPHd3vmH t+8jX7tz9cOxWucx2NYAKiKdE0EezLtVie3iDZojKFYr8POXJfZ9fw5E6JRc8AJj xI9KH/CsqQr/LQfChwBrDoNzWUO+f2u1NoEhHRZ25e2gMPHv9dzsY6pJR69BIsVg /yPZtFyH4mQmlzfo9UZ+4P/Y2Em+M6d0 -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:49 2025 by rpki-client