$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa File: 4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa (raw, json) Hash identifier: 1AfuOv7NLWCbiPY8nyYLWABTBZWxSmO+GnIP4FZOz8Y= Subject key identifier: A9:88:14:FC:F8:B8:5F:0A:E5:B6:6D:9F:EE:91:40:1F:F9:38:9F:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A9A377ECDD369120260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 36631 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:9a:37:7e:cd:d3:69:12:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=c3709e30-4c26-4337-9617-2b2291a5aae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:23:f3:ae:c6:fb:7c:24:f0:98:73:f9:48: 01:0f:57:be:9c:67:d5:02:00:8d:54:f2:0b:60:df: cf:ae:67:03:35:1b:eb:4f:34:bf:c9:0e:9c:77:dd: 35:38:dd:16:05:a9:a4:b9:aa:27:9e:77:22:23:3f: 5d:fc:5c:63:bf:cc:6b:a6:71:e2:e2:5e:85:80:0b: 60:75:cd:6d:98:82:2f:58:e6:a4:0e:a4:2c:1d:13: b9:e8:87:62:cd:e4:e2:ac:dd:58:c9:89:11:ce:fd: a7:de:0f:cf:a5:a6:26:1e:dc:c1:41:d0:8c:14:a5: 76:b6:f6:f2:f8:6a:21:33:ee:1c:81:ac:42:88:10: e1:b6:7c:d7:23:37:2f:7a:1e:da:3f:45:44:45:0e: 5f:70:e2:1a:b3:03:87:30:73:5c:2c:89:b9:0f:ae: 18:f5:85:a9:e0:5e:cf:73:97:ec:34:90:e6:e6:5c: 65:dd:2f:26:9a:6a:a6:82:44:b2:da:16:21:d8:73: 93:77:75:4e:0a:b0:dc:61:15:18:74:5d:00:33:e3: 0a:66:6c:8e:0a:77:fe:43:84:a3:18:3e:7a:29:85: dd:6b:1d:97:ff:c6:de:af:3e:6c:e4:da:19:28:10: 36:e3:ef:f5:ed:99:1a:db:06:76:bc:53:2e:78:0a: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:14:FC:F8:B8:5F:0A:E5:B6:6D:9F:EE:91:40:1F:F9:38:9F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4e:6b:82:c3:f4:b1:77:7e:7c:b2:24:91:b9:3f:5e:61:a9: c5:80:80:ae:3c:30:f5:1d:09:03:fb:66:7c:68:e6:23:3f:71: 5a:ef:57:95:5d:1f:57:af:16:1b:32:fd:a2:04:81:79:f3:35: 79:11:6b:56:83:28:ea:59:e0:e8:f8:29:3c:39:ad:a8:25:fc: 7f:ee:96:08:4a:ed:75:92:8d:26:c2:35:44:94:2c:1a:60:1f: 20:97:81:13:a3:42:08:89:c7:4d:35:96:66:59:41:97:9e:19: d0:a0:c2:91:41:10:d0:51:c8:f8:6c:3a:bb:95:a2:2c:ba:9d: cd:a1:4d:67:26:3e:3b:db:04:fd:5e:7b:30:f7:fb:6b:6d:d2: e7:af:b0:53:e0:bc:e8:4e:75:07:c9:2f:75:ae:a8:b9:f7:5c: 54:14:5d:f9:70:ff:7d:26:03:8a:fb:cb:53:82:c1:4a:5f:a7: 33:14:58:29:05:ee:bc:cc:98:60:87:1c:d7:2b:1c:52:bc:12: 87:6e:25:62:a5:3f:37:f8:30:9a:1d:b7:99:83:c9:30:07:5d: ee:96:2a:ca:ba:8b:3b:a4:cc:10:a6:e2:76:c7:ad:19:3f:0c: b9:39:5d:6f:ce:76:e4:18:80:33:f0:39:36:c6:0e:38:b9:51: 84:71:51:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAqaN37N02kSAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk YzM3MDllMzAtNGMyNi00MzM3LTk2MTctMmIyMjkxYTVhYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTEj867G+3wk8Jhz+UgBD1e+nGfVAgCNVPIL YN/PrmcDNRvrTzS/yQ6cd901ON0WBamkuaonnnciIz9d/Fxjv8xrpnHi4l6FgAtg dc1tmIIvWOakDqQsHRO56IdizeTirN1YyYkRzv2n3g/PpaYmHtzBQdCMFKV2tvby +GohM+4cgaxCiBDhtnzXIzcveh7aP0VERQ5fcOIaswOHMHNcLIm5D64Y9YWp4F7P c5fsNJDm5lxl3S8mmmqmgkSy2hYh2HOTd3VOCrDcYRUYdF0AM+MKZmyOCnf+Q4Sj GD56KYXdax2X/8berz5s5NoZKBA24+/17Zka2wZ2vFMueAp6BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKmIFPz4uF8K5bZtn+6RQB/5OJ9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmYTZlZDgtYmM4Mi0z ZWE1LWJmYzYtN2IyZjg2MDMzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdTmuCw/Sxd358siSRuT9eYanFgICuPDD1HQkD+2Z8aOYjP3Fa71eV XR9XrxYbMv2iBIF58zV5EWtWgyjqWeDo+Ck8Oa2oJfx/7pYISu11ko0mwjVElCwa YB8gl4ETo0IIicdNNZZmWUGXnhnQoMKRQRDQUcj4bDq7laIsup3NoU1nJj472wT9 Xnsw9/trbdLnr7BT4LzoTnUHyS91rqi591xUFF35cP99JgOK+8tTgsFKX6czFFgp Be68zJhghxzXKxxSvBKHbiVipT83+DCaHbeZg8kwB13ulirKuos7pMwQpuJ2x60Z Pwy5OV1vznbkGIAz8Dk2xg44uVGEcVHb -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:18 2025 by rpki-client