$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa File: 43a7c405-ee0a-3c23-850e-06437fe7b730.roa (raw, json) Hash identifier: 1PZ37xIbUMzV2Ft+1IA9SVbbtQ0ScGer+9U9hvihzds= Subject key identifier: 4A:4C:F1:4A:ED:F0:CE:29:32:57:6E:0C:27:62:4D:A5:F6:E9:26:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840C034505006DEC8B7800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396555 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:03:45:05:00:6d:ec:8b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=339ca3bd-2dc4-4649-b8a2-06109e6debb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:4c:e1:37:76:ab:2b:ed:7b:1a:2e:6a:85: 43:c6:d2:0f:db:78:28:ed:60:c3:9d:5b:c1:0b:e8: f2:9f:4e:a5:cf:59:e7:f4:8f:5f:40:85:81:e6:cc: c1:21:ab:ec:0d:fd:2d:d7:a4:04:30:ca:05:51:a9: 02:14:58:b9:ea:7a:99:ef:c7:c1:eb:02:3e:a7:f6: 98:5e:ea:17:44:dd:ce:2a:db:3a:12:b1:44:d5:a3: b2:aa:4b:1f:fc:35:c0:76:10:f5:58:03:f0:da:09: 14:3e:5a:e1:63:ac:ad:10:04:fe:04:ca:9c:43:e8: 6c:8b:55:bc:fa:8d:34:65:5b:0b:8e:0d:f9:a3:75: 87:2e:44:ea:4b:4c:e7:2d:99:59:d4:54:17:d2:89: 31:5d:12:29:0f:cb:1c:dd:e7:b5:2e:2e:d0:5f:c8: 1c:2d:c3:90:ed:4c:34:2b:eb:b2:ae:36:90:c4:81: 80:53:53:10:d1:cb:07:44:b8:08:0e:94:aa:a6:52: 6b:5f:1b:72:ac:08:7f:e6:45:54:31:a5:5c:3a:72: 32:04:cb:69:09:a9:2b:0e:ef:a8:ec:e3:4b:0f:0f: c0:a4:e9:36:fd:c3:ed:b3:65:ad:13:b8:db:c5:37: 55:f2:ef:c5:fa:1e:c6:5e:64:45:2a:6c:96:e8:29: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:F1:4A:ED:F0:CE:29:32:57:6E:0C:27:62:4D:A5:F6:E9:26:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e6:9a:d8:4b:42:27:3b:37:42:75:48:b7:5a:65:17:fe:16: d7:96:ef:0a:6a:c6:cd:a5:4f:ad:3a:fc:18:4a:d1:ad:88:10: 5e:01:c7:88:4c:d2:2f:2d:2f:83:6e:c2:28:d6:77:0c:58:4b: d1:6b:c2:a5:4d:2a:ef:47:c5:96:bb:9a:32:d5:90:ef:22:62: 88:ac:a5:fd:9c:8d:b0:c4:a8:db:cf:a3:6c:20:b4:69:24:f0: 6d:6a:2a:f8:d8:89:ac:b7:6b:0c:00:46:19:c6:fb:2c:3c:7b: 56:be:4c:92:14:dc:10:31:c0:38:67:d4:1b:1a:c6:d2:1d:f9: 9f:70:a2:32:c5:b3:22:8b:6d:4d:ca:63:b2:70:bd:87:1b:74: 54:fc:de:4c:d7:60:79:cd:4f:d2:7b:7c:9a:7f:d6:b9:1f:29: 6b:46:37:4f:a1:fd:53:6f:49:64:21:33:20:8c:86:65:c5:62: b8:1a:98:d7:e7:f8:17:2f:94:b6:c3:dc:97:0b:cb:aa:08:df: a6:5a:7f:d5:e6:93:f2:36:07:cc:a7:87:d3:2d:54:68:45:2e: db:d7:f7:b7:62:fc:5f:d2:d3:f0:d2:bd:2f:7d:a3:a8:54:64: 26:b7:2c:95:56:af:de:3e:2d:64:8c:34:bd:f9:7b:a8:04:06: 16:46:6e:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAwDRQUAbeyLeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk MzM5Y2EzYmQtMmRjNC00NjQ5LWI4YTItMDYxMDllNmRlYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxJM4Td2qyvtexouaoVDxtIP23go7WDDnVvB C+jyn06lz1nn9I9fQIWB5szBIavsDf0t16QEMMoFUakCFFi56nqZ78fB6wI+p/aY XuoXRN3OKts6ErFE1aOyqksf/DXAdhD1WAPw2gkUPlrhY6ytEAT+BMqcQ+hsi1W8 +o00ZVsLjg35o3WHLkTqS0znLZlZ1FQX0okxXRIpD8sc3ee1Li7QX8gcLcOQ7Uw0 K+uyrjaQxIGAU1MQ0csHRLgIDpSqplJrXxtyrAh/5kVUMaVcOnIyBMtpCakrDu+o 7ONLDw/ApOk2/cPts2WtE7jbxTdV8u/F+h7GXmRFKmyW6Ck7MwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpM8Urt8M4pMlduDCdiTaX26SYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNhN2M0MDUtZWUwYS0z YzIzLTg1MGUtMDY0MzdmZTdiNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBP5prYS0InOzdCdUi3WmUX/hbXlu8KasbNpU+tOvwYStGtiBBeAceI TNIvLS+DbsIo1ncMWEvRa8KlTSrvR8WWu5oy1ZDvImKIrKX9nI2wxKjbz6NsILRp JPBtair42Imst2sMAEYZxvssPHtWvkySFNwQMcA4Z9QbGsbSHfmfcKIyxbMii21N ymOycL2HG3RU/N5M12B5zU/Se3yaf9a5HylrRjdPof1Tb0lkITMgjIZlxWK4GpjX 5/gXL5S2w9yXC8uqCN+mWn/V5pPyNgfMp4fTLVRoRS7b1/e3Yvxf0tPw0r0vfaOo VGQmtyyVVq/ePi1kjDS9+XuoBAYWRm6P -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:51 2025 by rpki-client