$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa File: 3893d1e1-2218-38f4-82f9-5af50426a787.roa (raw, json) Hash identifier: DIKerGZ9isWQ2IW+O4iscvxeAgrAfpTopV36bZH/MNM= Subject key identifier: 25:D2:0B:9C:25:9B:E0:A9:C3:F6:CB:01:90:2A:00:A1:1E:A8:4E:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628407272E2208167A191D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396589 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:07:27:2e:22:08:16:7a:19:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=96b4296c-6453-45ba-9f5a-3f1199c60f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:02:c0:5d:cc:2d:4e:74:da:ac:fe:9a:78:70: 76:38:c7:07:ae:ca:b4:25:ac:3e:b9:e1:8a:18:8c: b7:ff:c8:b7:d1:97:4a:aa:fc:b6:fc:d2:94:39:e7: 6d:65:0b:01:50:a3:69:09:30:a0:aa:14:f4:f2:a1: f4:cf:a0:dc:b8:23:68:4a:52:cb:c6:91:83:39:72: b9:cd:18:73:5c:fa:52:73:58:a1:60:0f:e8:9e:c4: ae:a0:08:fc:53:de:cb:21:46:55:5b:30:5f:81:01: 94:a6:96:d1:b0:01:c0:e8:59:95:df:d0:86:10:2b: 7d:85:a2:8b:bc:55:7f:4e:7f:56:b5:a9:df:f8:24: 02:5f:ac:56:e2:d0:90:44:eb:af:37:a9:bb:af:55: 4a:c3:75:49:60:87:9a:e0:19:37:ff:35:21:10:0e: 17:7f:41:a6:1e:57:84:db:dc:21:4f:b5:d3:1c:57: 2a:af:62:20:ac:5e:8e:31:51:5f:09:f4:90:c7:76: 57:e3:4e:86:81:34:ff:48:2a:97:8c:00:16:d4:79: 0f:95:8e:da:3f:00:88:93:ee:d2:34:84:d3:fe:0f: 12:75:d3:91:c0:81:00:e0:17:b6:50:7c:3b:35:af: 01:b3:d5:65:01:13:e0:81:eb:79:9b:0f:e0:bb:8a: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D2:0B:9C:25:9B:E0:A9:C3:F6:CB:01:90:2A:00:A1:1E:A8:4E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:32:15:09:c5:e5:c0:9f:ab:4c:5d:e8:e1:d0:13:33:80:0a: 36:e3:b8:41:b2:02:7a:03:67:b2:76:2a:d7:d3:98:e9:d7:c2: 3e:c8:40:9f:50:e3:7f:54:ad:d0:76:79:28:4b:f8:0c:40:cf: 7d:b4:78:41:7d:0d:51:8a:d8:0d:89:ea:ec:35:02:e6:c2:06: 97:b8:10:c5:ae:31:0e:5b:54:56:5b:2d:ee:4f:6a:15:bc:7a: 0c:90:8c:d6:c2:27:54:ca:a7:0b:93:5f:53:73:60:2f:a9:42: 58:2e:3c:1d:dc:25:e4:5a:8b:3e:e7:18:f4:54:65:71:26:bf: 33:22:52:61:dd:db:10:15:13:66:95:49:cd:69:cc:e1:53:d2: 47:44:5b:12:1d:3f:77:f1:48:2e:c9:4c:cf:1d:aa:9a:5e:da: 0c:31:da:ff:86:e2:d0:c3:27:3d:d4:0a:6c:7e:79:e6:fd:2c: 30:02:ab:9c:3b:30:5c:aa:65:fd:70:5d:3c:6e:9f:fb:79:66: fc:06:c6:af:ae:71:73:39:41:0d:ac:29:1d:fd:26:65:c5:52: 9b:aa:4b:5a:b5:87:85:b1:68:b8:15:9a:0d:af:f6:0c:62:7f: 00:f5:55:c4:a7:d7:f8:ac:5b:3d:01:9d:b0:35:83:19:53:6d: ff:f0:5a:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAcnLiIIFnoZHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk OTZiNDI5NmMtNjQ1My00NWJhLTlmNWEtM2YxMTk5YzYwZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgLAXcwtTnTarP6aeHB2OMcHrsq0Jaw+ueGK GIy3/8i30ZdKqvy2/NKUOedtZQsBUKNpCTCgqhT08qH0z6DcuCNoSlLLxpGDOXK5 zRhzXPpSc1ihYA/onsSuoAj8U97LIUZVWzBfgQGUppbRsAHA6FmV39CGECt9haKL vFV/Tn9Wtanf+CQCX6xW4tCQROuvN6m7r1VKw3VJYIea4Bk3/zUhEA4Xf0GmHleE 29whT7XTHFcqr2IgrF6OMVFfCfSQx3ZX406GgTT/SCqXjAAW1HkPlY7aPwCIk+7S NITT/g8SddORwIEA4Be2UHw7Na8Bs9VlARPgget5mw/gu4rVIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCXSC5wlm+Cpw/bLAZAqAKEeqE6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg5M2QxZTEtMjIxOC0z OGY0LTgyZjktNWFmNTA0MjZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbMhUJxeXAn6tMXejh0BMzgAo247hBsgJ6A2eydirX05jp18I+yECf UON/VK3QdnkoS/gMQM99tHhBfQ1RitgNiersNQLmwgaXuBDFrjEOW1RWWy3uT2oV vHoMkIzWwidUyqcLk19Tc2AvqUJYLjwd3CXkWos+5xj0VGVxJr8zIlJh3dsQFRNm lUnNaczhU9JHRFsSHT938UguyUzPHaqaXtoMMdr/huLQwyc91Apsfnnm/SwwAquc OzBcqmX9cF08bp/7eWb8BsavrnFzOUENrCkd/SZlxVKbqktatYeFsWi4FZoNr/YM Yn8A9VXEp9f4rFs9AZ2wNYMZU23/8FqI -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:28 2025 by rpki-client