$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa File: 396a189c-7b29-340f-ba67-4b8d052017b8.roa (raw, json) Hash identifier: E0rKKV1+YrlZdkFXjsRTSvobMfwylSoU0LP0Kyk/K24= Subject key identifier: B6:74:6C:F6:81:2D:2A:3B:26:B9:AD:10:28:F8:B4:64:B8:B5:C5:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840C10D7E6F0F3A888C500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396611 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:10:d7:e6:f0:f3:a8:88:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=237dddb5-5cf0-48ee-b398-31974ebb719b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:e3:9f:68:16:9f:5a:a9:17:2e:72:da:31: 7b:db:84:d4:ea:fe:7d:98:c6:29:07:8d:28:03:99: 4d:fd:99:87:88:58:81:a2:45:72:42:bf:5c:03:b3: 47:df:e5:8f:95:5c:1b:48:1b:d6:43:f3:61:bb:7c: 73:ee:11:a9:95:16:fa:8f:0f:eb:74:f1:7d:13:ef: ac:21:51:8f:95:a6:46:1c:f0:e1:86:be:82:6b:51: a0:38:bd:eb:83:a7:de:3f:93:6c:0b:fe:ba:09:44: e8:81:01:39:76:33:02:c6:b6:f5:4b:ff:2d:43:27: 4a:71:54:6d:0f:ec:4a:82:18:63:55:ce:c0:3f:ee: b6:0d:45:21:25:49:c8:39:1f:89:bb:cf:cf:24:74: 99:c5:b2:7d:3d:b2:60:1c:24:22:fa:18:ef:62:90: 77:f6:19:ca:88:a2:bb:47:46:96:fd:63:70:0f:42: c0:ce:a6:65:c3:7a:1c:65:29:85:c4:9e:ff:7a:fb: 4a:1c:8e:57:14:d4:47:5d:0f:c6:d0:fe:08:73:9e: d2:26:1a:a5:aa:16:10:53:22:ce:67:07:69:d1:da: a9:bc:1e:a7:27:5b:ad:21:6b:90:84:85:cc:bc:91: bc:ce:4a:5b:24:9f:24:3a:20:a9:81:75:05:3d:a4: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:74:6C:F6:81:2D:2A:3B:26:B9:AD:10:28:F8:B4:64:B8:B5:C5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ed:b8:49:4d:b8:44:91:9e:f5:20:0c:8a:bc:d7:24:df:1d: 92:43:36:72:30:4e:68:67:e7:0c:aa:d0:a0:0d:f5:60:fd:6b: 56:bb:71:b0:23:af:e1:a8:e2:0d:0b:9d:ab:d1:85:ef:8e:c5: 9d:8f:81:31:5e:f3:13:30:e4:75:91:95:24:69:9a:60:bd:d9: be:df:83:bf:42:39:31:ce:dc:30:7c:4a:fc:cb:64:c0:f7:64: 95:46:08:15:9d:c7:52:26:f7:71:f5:94:c9:3e:e1:4a:c5:fc: 1e:1e:77:e2:fd:54:ea:8d:12:a0:f9:a6:0f:50:31:3a:75:63: ce:e6:8e:9d:32:46:78:a1:c6:12:e0:76:07:90:ad:0e:ea:8c: e2:d8:ca:55:dc:38:ca:6a:7d:bf:2e:c8:91:15:12:ee:68:9f: 30:06:69:d3:88:66:10:32:5b:89:44:90:b0:73:f8:ad:d4:96: bf:b4:29:f8:b3:fa:89:02:72:3a:50:71:76:1d:42:59:ed:98: 8a:79:ba:c7:ce:66:8c:f3:74:dd:73:1c:39:5d:bd:6d:19:cd: c6:e4:f1:fa:97:e5:8c:21:7c:35:54:84:db:fc:93:30:96:31: 86:35:45:c8:8a:dd:9e:c0:66:19:d5:3c:f2:79:8d:6a:31:88: 99:f5:3e:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAwQ1+bw86iIxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk MjM3ZGRkYjUtNWNmMC00OGVlLWIzOTgtMzE5NzRlYmI3MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Xjn2gWn1qpFy5y2jF724TU6v59mMYpB40o A5lN/ZmHiFiBokVyQr9cA7NH3+WPlVwbSBvWQ/Nhu3xz7hGplRb6jw/rdPF9E++s IVGPlaZGHPDhhr6Ca1GgOL3rg6feP5NsC/66CUTogQE5djMCxrb1S/8tQydKcVRt D+xKghhjVc7AP+62DUUhJUnIOR+Ju8/PJHSZxbJ9PbJgHCQi+hjvYpB39hnKiKK7 R0aW/WNwD0LAzqZlw3ocZSmFxJ7/evtKHI5XFNRHXQ/G0P4Ic57SJhqlqhYQUyLO Zwdp0dqpvB6nJ1utIWuQhIXMvJG8zkpbJJ8kOiCpgXUFPaR0bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZ0bPaBLSo7JrmtECj4tGS4tcUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk2YTE4OWMtN2IyOS0z NDBmLWJhNjctNGI4ZDA1MjAxN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM7bhJTbhEkZ71IAyKvNck3x2SQzZyME5oZ+cMqtCgDfVg/WtWu3Gw I6/hqOINC52r0YXvjsWdj4ExXvMTMOR1kZUkaZpgvdm+34O/QjkxztwwfEr8y2TA 92SVRggVncdSJvdx9ZTJPuFKxfweHnfi/VTqjRKg+aYPUDE6dWPO5o6dMkZ4ocYS 4HYHkK0O6ozi2MpV3DjKan2/LsiRFRLuaJ8wBmnTiGYQMluJRJCwc/it1Ja/tCn4 s/qJAnI6UHF2HUJZ7ZiKebrHzmaM83Tdcxw5Xb1tGc3G5PH6l+WMIXw1VITb/JMw ljGGNUXIit2ewGYZ1TzyeY1qMYiZ9T6t -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:19 2025 by rpki-client