$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa File: 523ef6f6-d440-330b-aad0-be8d682f4c42.roa (raw, json) Hash identifier: NIjpM59JA5FEJHGdDJaHspMZlPKfNCOs/6KQIfoaMss= Subject key identifier: CD:48:3F:E6:18:CD:94:CB:33:72:25:BF:9C:11:8F:07:40:94:6C:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840DD4EEB044E774865E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 20431 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:d4:ee:b0:44:e7:74:86:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=667abe7a-826e-47e7-9adf-9989a6727cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:ed:89:dc:64:f8:09:7c:a5:c7:75:5a:ca: 2d:a1:bb:51:6d:28:25:7d:74:b5:12:45:08:ee:55: 08:33:f4:8b:8d:fe:10:35:d0:0a:1b:af:02:79:1e: 76:80:18:f4:3e:5e:12:8c:bf:58:3f:89:a7:ba:a6: 98:5c:36:52:e6:08:cd:87:53:ed:49:d0:46:de:44: 3b:27:9e:37:8a:7f:fe:0b:a2:3b:6e:a6:dc:6b:de: 79:50:c4:74:40:e9:1c:df:3b:cc:9e:e2:13:27:5d: 7b:b0:c4:c9:15:e1:0b:c2:2a:7b:fc:2c:d0:2a:da: 3c:7b:e3:cd:10:5e:df:7d:67:0b:61:f3:21:07:3a: 2d:98:dc:77:7b:0d:cc:b0:27:25:4a:ca:c9:24:2f: 39:dd:ee:28:ff:6f:96:94:f7:3e:13:54:5e:9e:27: 1d:9b:71:dd:83:38:e8:66:92:32:aa:73:ef:94:af: 6d:11:38:a0:94:82:95:06:2b:16:fd:5a:cc:a8:a4: d6:b5:70:70:14:33:d2:b5:61:1f:94:f5:2b:f5:3d: 29:1e:74:1b:7b:e0:16:e1:51:b9:1c:d3:46:28:0f: 73:48:10:9a:03:cb:1e:6c:1a:9c:be:00:13:e0:82: 91:0e:21:fc:03:2a:65:bf:50:22:53:a9:88:34:64: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:48:3F:E6:18:CD:94:CB:33:72:25:BF:9C:11:8F:07:40:94:6C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:67:48:48:14:4b:d8:45:f7:eb:d2:f1:ae:19:16:66:f3:3e: 51:2b:a1:d4:d0:91:7b:a0:64:61:91:d3:55:ae:2c:07:f9:44: 0b:82:fe:f8:a4:ed:02:09:bd:5d:3a:4b:16:b3:0f:4a:b6:c1: a7:8d:9b:96:5e:9a:4e:7f:29:23:97:b8:2a:da:fb:bb:ed:06: 8c:1f:eb:af:72:77:89:15:84:d3:9f:f3:7a:e6:52:49:ef:62: 7c:00:3c:e7:c7:ce:26:0b:8f:1d:3b:cc:69:b8:b4:a9:51:51: 3a:98:f2:50:6d:ba:d2:e1:06:a0:02:d5:2a:1c:e8:e4:d5:07: fc:0a:8b:14:09:95:e2:0b:cc:3e:89:b2:0c:57:ce:38:95:07: 75:79:9e:29:d3:75:10:02:4b:11:82:7d:75:28:9b:9d:81:b7: ed:2f:2e:93:4d:7c:bd:f0:63:af:b6:82:93:96:96:6a:d3:0e: 56:2a:d6:f1:32:e0:ef:32:08:81:8b:55:a9:ae:92:81:4a:87: 48:4a:25:13:19:9a:19:a4:ed:5a:21:ca:62:88:49:b2:df:06: 08:10:8c:90:6d:bc:9b:ba:42:e6:37:71:6e:ce:f6:26:2e:19: d8:2a:a8:d0:de:43:f2:92:0f:77:2b:72:16:b5:97:d0:86:76: 64:e2:55:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA3U7rBE53SGXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NjY3YWJlN2EtODI2ZS00N2U3LTlhZGYtOTk4OWE2NzI3Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmubtidxk+Al8pcd1WsotobtRbSglfXS1EkUI 7lUIM/SLjf4QNdAKG68CeR52gBj0Pl4SjL9YP4mnuqaYXDZS5gjNh1PtSdBG3kQ7 J543in/+C6I7bqbca955UMR0QOkc3zvMnuITJ117sMTJFeELwip7/CzQKto8e+PN EF7ffWcLYfMhBzotmNx3ew3MsCclSsrJJC853e4o/2+WlPc+E1Renicdm3Hdgzjo ZpIyqnPvlK9tETiglIKVBisW/VrMqKTWtXBwFDPStWEflPUr9T0pHnQbe+AW4VG5 HNNGKA9zSBCaA8sebBqcvgAT4IKRDiH8Ayplv1AiU6mINGR8XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM1IP+YYzZTLM3Ilv5wRjwdAlGz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTIzZWY2ZjYtZDQ0MC0z MzBiLWFhZDAtYmU4ZDY4MmY0YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzZ0hIFEvYRffr0vGuGRZm8z5RK6HU0JF7oGRhkdNVriwH+UQLgv74 pO0CCb1dOksWsw9KtsGnjZuWXppOfykjl7gq2vu77QaMH+uvcneJFYTTn/N65lJJ 72J8ADznx84mC48dO8xpuLSpUVE6mPJQbbrS4QagAtUqHOjk1Qf8CosUCZXiC8w+ ibIMV844lQd1eZ4p03UQAksRgn11KJudgbftLy6TTXy98GOvtoKTlpZq0w5WKtbx MuDvMgiBi1WprpKBSodISiUTGZoZpO1aIcpiiEmy3wYIEIyQbbybukLmN3FuzvYm LhnYKqjQ3kPykg93K3IWtZfQhnZk4lVo -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:43 2025 by rpki-client