$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa File: 321b1d50-0cd2-33bb-b9f8-5d9196825799.roa (raw, json) Hash identifier: ge245L3Ycqxx/JPg+GGbHzSMEf9kMJtTQcVJItFaSOM= Subject key identifier: 0A:8A:7F:BF:0F:D4:D1:14:5A:4C:86:81:14:3C:4A:4F:E3:ED:08:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628406C2DED55200B6FADFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396545 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:c2:de:d5:52:00:b6:fa:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=27cf364b-5a1c-4ba3-b3ee-9e07368771f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:59:25:9b:d0:22:17:5d:6a:5a:72:83:6a: 88:5c:05:e9:fb:54:a2:a1:b1:3d:68:2b:ac:63:56: 6b:79:71:6e:63:11:44:60:fe:48:32:2e:b8:f6:0d: b2:26:78:f2:c3:4a:66:c5:8e:3a:27:38:bd:b6:ea: ae:ca:e3:9a:3e:82:14:99:59:43:e9:09:25:be:a8: b0:63:4e:bd:c5:29:f4:f7:66:20:ee:0c:1b:e0:0b: 0f:60:17:73:ac:16:ea:04:90:3e:16:de:ea:e2:f2: d3:dd:8a:2e:8c:91:a1:f1:c1:44:f0:49:42:d5:ac: 44:8e:51:ea:b1:31:3a:0a:77:e1:db:d6:19:c3:8f: 76:50:19:62:d9:fe:35:e7:0b:0d:f6:63:fb:3e:1e: 6a:4d:13:6f:b5:73:54:b3:4e:78:bf:40:2f:0b:b1: b8:b2:84:24:e0:07:d0:ce:ea:0e:98:fe:eb:41:67: 71:be:d8:be:8d:0a:27:cd:df:7a:42:51:57:c3:3c: 89:6e:67:d5:f4:8a:1e:bc:bf:8d:e2:f2:7f:6d:f1: d2:ef:6e:6e:f3:dd:0e:50:1c:b5:74:e2:b3:ed:26: 80:30:2c:da:33:db:ba:c5:ad:f9:a9:bb:20:78:51: 72:2b:d4:d1:8f:26:11:a5:62:12:01:00:6d:48:99: 6b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:7F:BF:0F:D4:D1:14:5A:4C:86:81:14:3C:4A:4F:E3:ED:08:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:77:1d:fa:89:cf:89:46:db:5c:b4:47:97:9c:e5:c6:59:e8: 0b:ec:c4:ef:6c:08:43:70:cb:18:3d:4a:ac:91:4b:d5:d6:3f: 77:09:43:bf:0d:93:66:21:6d:29:d3:3b:bc:ab:55:8b:ac:a4: 50:9f:b6:82:e2:be:da:5b:0f:a3:42:a6:c3:e2:88:11:44:d3: b5:19:54:7b:6f:fd:4f:98:7f:93:69:24:5a:ee:23:15:1c:77: 86:6e:8d:a7:74:ad:70:8a:73:f6:1d:3a:2c:36:25:03:f9:91: 52:b3:3e:23:9b:f6:fc:23:eb:2a:f4:b0:00:65:85:f6:d3:ef: 7e:a7:ca:f5:c5:d0:c3:ee:da:e6:d4:c0:b1:c8:b1:49:2d:43: 47:29:e6:b0:14:5b:75:da:03:30:db:67:4d:d3:b4:56:d4:43: 15:ee:09:93:a3:46:49:0c:d8:47:e4:90:1d:b9:4b:23:84:f4: a0:e6:57:96:9c:e8:db:c3:0d:db:a2:6e:26:35:10:a0:57:f4: bc:24:1c:b8:ce:cc:e7:e4:39:4f:cc:b4:f3:84:0e:cd:7b:93: ad:31:3a:2b:5a:f0:f6:8a:a2:47:6c:2a:c3:e6:2f:6d:90:02: 68:46:61:54:08:29:e2:02:75:95:d1:51:39:48:95:cd:c4:c2: a5:33:e0:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAbC3tVSALb638AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MjdjZjM2NGItNWExYy00YmEzLWIzZWUtOWUwNzM2ODc3MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ1ZJZvQIhddalpyg2qIXAXp+1SiobE9aCus Y1ZreXFuYxFEYP5IMi649g2yJnjyw0pmxY46Jzi9tuquyuOaPoIUmVlD6Qklvqiw Y069xSn092Yg7gwb4AsPYBdzrBbqBJA+Ft7q4vLT3YoujJGh8cFE8ElC1axEjlHq sTE6Cnfh29YZw492UBli2f415wsN9mP7Ph5qTRNvtXNUs054v0AvC7G4soQk4AfQ zuoOmP7rQWdxvti+jQonzd96QlFXwzyJbmfV9IoevL+N4vJ/bfHS725u890OUBy1 dOKz7SaAMCzaM9u6xa35qbsgeFFyK9TRjyYRpWISAQBtSJlrbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAqKf78P1NEUWkyGgRQ8Sk/j7QjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzIxYjFkNTAtMGNkMi0z M2JiLWI5ZjgtNWQ5MTk2ODI1Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5dx36ic+JRttctEeXnOXGWegL7MTvbAhDcMsYPUqskUvV1j93CUO/ DZNmIW0p0zu8q1WLrKRQn7aC4r7aWw+jQqbD4ogRRNO1GVR7b/1PmH+TaSRa7iMV HHeGbo2ndK1winP2HTosNiUD+ZFSsz4jm/b8I+sq9LAAZYX20+9+p8r1xdDD7trm 1MCxyLFJLUNHKeawFFt12gMw22dN07RW1EMV7gmTo0ZJDNhH5JAduUsjhPSg5leW nOjbww3bom4mNRCgV/S8JBy4zszn5DlPzLTzhA7Ne5OtMTorWvD2iqJHbCrD5i9t kAJoRmFUCCniAnWV0VE5SJXNxMKlM+CY -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:51 2025 by rpki-client