$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa File: 4d969e38-8862-3acc-8f97-40db9f1796e3.roa (raw, json) Hash identifier: UPYi4RmTLG4eBX5/jAK1nLiOlPUEDj5ohO6T7OuXVB4= Subject key identifier: FA:3C:5C:24:A4:9C:F6:B8:1A:20:79:AF:53:B5:CC:55:C2:00:E6:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628408F50996383323E3C280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396578 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:f5:09:96:38:33:23:e3:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=c93163fd-652f-47a3-b9af-d49d4dc98313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:a7:2e:ef:68:99:71:39:1a:af:c9:1d:5a: f2:8e:32:92:d1:b9:0c:58:78:45:86:43:43:13:55: 20:fd:65:39:76:ee:23:19:46:e6:a6:59:0c:00:68: 1f:70:2c:9e:32:f3:db:af:e3:23:1d:b1:38:1c:30: 23:d1:86:3a:b4:18:42:d4:d4:71:f7:18:4e:38:8c: 43:9b:7d:26:fa:5a:d1:bc:8e:b7:a3:3b:d1:0f:bf: be:78:d3:89:6e:89:e7:9a:90:39:d9:be:e5:97:aa: cb:f8:0d:94:20:6c:cf:c5:75:d1:3d:66:25:6c:6a: 20:8a:30:16:48:cf:74:77:f8:e3:a7:ad:ec:c6:7f: 6d:9a:67:f1:06:5f:80:75:79:82:06:71:fb:9c:46: ae:f2:97:27:ec:a4:2c:50:23:09:f9:7b:f1:99:f8: d8:16:7c:a5:34:79:64:db:d7:f6:07:3f:72:02:4c: 0a:92:07:1a:14:d0:8a:95:4d:45:b2:5e:1d:5b:17: fe:fe:c3:d8:71:16:45:db:3e:d7:16:3a:b2:6a:a0: e1:03:41:db:66:3d:7e:0b:b6:c6:ef:42:f9:70:88: 00:09:02:c5:36:6c:ce:ad:10:ba:4f:35:a0:72:79: 73:57:89:de:e2:56:46:06:95:4d:b4:c3:30:e6:b3: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:5C:24:A4:9C:F6:B8:1A:20:79:AF:53:B5:CC:55:C2:00:E6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ed:c1:21:0c:25:62:1f:b4:76:c1:ff:2c:6e:3e:f5:e6:c7: 4b:39:dc:fe:78:22:03:66:03:c7:46:9c:78:af:ce:21:f6:6f: 7e:ad:87:8c:44:c1:b3:62:a6:cc:a9:0f:97:7e:f5:54:71:da: ed:11:5f:c7:30:26:b4:3b:88:73:65:63:98:92:91:45:6c:18: e8:94:c1:1f:bb:be:41:65:5a:e0:3f:25:ef:2e:8a:fc:a8:87: ea:94:c6:33:a2:87:15:36:41:7c:e6:b5:bd:54:fd:7d:45:03: f1:2c:5a:57:54:88:0c:92:10:40:00:82:6e:f4:ab:7c:23:2b: 03:de:d3:66:9c:8d:43:f8:5e:7a:de:76:40:26:0f:94:61:aa: 1d:17:f5:49:bc:51:bc:f9:93:a8:18:41:68:15:72:6a:8d:14: 65:1a:68:a6:62:88:9f:7c:48:ce:1a:1c:3e:67:35:36:01:9e: 98:1f:85:c4:70:04:93:90:85:0b:66:67:64:a8:c1:06:b7:13: 42:64:ec:0e:00:6b:22:f4:37:0d:63:df:1b:13:9a:67:43:cd: 68:2b:de:a8:da:4f:02:a6:87:17:10:82:c5:bd:77:22:b2:4d: c2:2e:30:f8:05:69:0b:cf:31:d6:1f:bc:bc:0f:ca:77:01:ab: 26:e0:e7:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAj1CZY4MyPjwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk YzkzMTYzZmQtNjUyZi00N2EzLWI5YWYtZDQ5ZDRkYzk4MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvCnLu9omXE5Gq/JHVryjjKS0bkMWHhFhkND E1Ug/WU5du4jGUbmplkMAGgfcCyeMvPbr+MjHbE4HDAj0YY6tBhC1NRx9xhOOIxD m30m+lrRvI63ozvRD7++eNOJbonnmpA52b7ll6rL+A2UIGzPxXXRPWYlbGogijAW SM90d/jjp63sxn9tmmfxBl+AdXmCBnH7nEau8pcn7KQsUCMJ+XvxmfjYFnylNHlk 29f2Bz9yAkwKkgcaFNCKlU1Fsl4dWxf+/sPYcRZF2z7XFjqyaqDhA0HbZj1+C7bG 70L5cIgACQLFNmzOrRC6TzWgcnlzV4ne4lZGBpVNtMMw5rN8SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPo8XCSknPa4GiB5r1O1zFXCAOZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ5NjllMzgtODg2Mi0z YWNjLThmOTctNDBkYjlmMTc5NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA77cEhDCViH7R2wf8sbj715sdLOdz+eCIDZgPHRpx4r84h9m9+rYeM RMGzYqbMqQ+XfvVUcdrtEV/HMCa0O4hzZWOYkpFFbBjolMEfu75BZVrgPyXvLor8 qIfqlMYzoocVNkF85rW9VP19RQPxLFpXVIgMkhBAAIJu9Kt8IysD3tNmnI1D+F56 3nZAJg+UYaodF/VJvFG8+ZOoGEFoFXJqjRRlGmimYoiffEjOGhw+ZzU2AZ6YH4XE cASTkIULZmdkqMEGtxNCZOwOAGsi9DcNY98bE5pnQ81oK96o2k8CpocXEILFvXci sk3CLjD4BWkLzzHWH7y8D8p3Aasm4Odf -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:14 2025 by rpki-client