$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa File: 543616ba-cc06-3c2a-9970-1fff991634b7.roa (raw, json) Hash identifier: zzZTGJ9KbACrEqQXEk4g1TXZo8O13TeY5JTDc+b+xOA= Subject key identifier: 59:74:45:8E:D9:BC:95:87:51:79:E9:D2:6D:D3:20:5A:51:B2:4A:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628408A5DE8207AAC6A4BB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 36626 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:a5:de:82:07:aa:c6:a4:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=16d5e0a2-bad6-4776-88fd-e6c1c5290588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:6c:58:1f:f7:ee:46:5a:2e:48:ee:1d:0f: 03:3f:12:5b:b7:cc:eb:0b:24:7f:4d:6f:ed:89:af: d4:98:f8:81:0d:9b:a6:5d:e7:a1:2d:2e:9c:2d:65: 61:dd:96:9e:ff:a1:bd:4f:b4:d5:4a:5c:60:a3:02: d1:8c:37:07:1a:a3:dd:d6:aa:20:80:61:0d:95:17: cd:b0:e5:e4:1c:b2:53:76:42:8d:b5:e5:68:be:0a: df:21:b9:af:aa:e0:de:3e:c0:0a:e2:f0:18:2f:83: c2:9e:70:bf:af:bd:bb:8d:82:67:11:db:88:b0:a1: 10:83:9d:8f:14:d4:06:eb:38:9a:a7:0a:45:a9:d7: 0b:58:1f:47:dc:9b:ef:dd:33:b8:5d:49:06:af:75: cf:c3:e9:57:78:d4:3b:aa:26:87:92:b2:7a:84:93: 99:4c:d9:9f:fa:7f:f3:fa:c6:b2:e5:8f:bb:d6:64: 5f:76:ba:79:97:af:6b:dc:06:15:18:47:5a:7a:59: 73:94:12:7b:54:40:90:fc:7d:4a:e2:0d:5c:ac:a6: 50:12:e6:e1:33:0c:8e:ea:fd:90:e3:32:9b:ab:5c: 46:09:70:2b:12:9d:78:5c:6c:5c:70:37:ab:17:0e: 80:8a:b8:98:3f:ef:71:2d:44:69:ee:01:82:04:6e: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:74:45:8E:D9:BC:95:87:51:79:E9:D2:6D:D3:20:5A:51:B2:4A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ee:84:e0:d1:3b:c7:7d:13:8a:14:9f:c1:15:70:fa:23:98: b7:a6:b3:54:f4:c5:18:58:63:f1:27:7d:63:f9:54:22:0f:b7: 6f:a7:e7:66:02:70:09:ba:20:7e:e7:0e:ca:a1:73:b3:c6:65: fa:27:4b:f9:2c:da:1c:af:fa:e4:4c:8a:04:5d:3a:84:21:cf: 58:95:33:1e:5b:18:98:0a:c1:de:97:05:27:54:5f:61:02:33: 86:e5:d5:b7:10:38:69:50:57:3e:6f:86:cb:5d:66:06:ff:79: 2e:db:c0:99:d1:00:58:2d:7e:67:5d:9d:b0:cd:da:b3:05:3f: a2:e8:0f:64:9d:b2:99:fa:f6:6b:48:3e:4d:be:b9:a3:89:19: 35:f0:b3:32:f1:62:86:9f:da:aa:0e:e1:bc:05:96:7f:c9:99: 9f:9e:fb:1d:4e:ef:06:a1:79:37:f7:cb:8d:d9:43:d5:80:46: e9:27:55:c4:f2:34:48:3e:cf:f5:db:dd:23:bd:25:67:17:bc: 52:a0:15:7f:e2:c9:2f:da:5f:ae:ec:50:e9:fd:7c:19:12:50: 8f:3f:48:39:25:9b:7e:3c:82:08:fc:69:29:cf:4b:5e:7d:2d: e7:af:90:0c:e4:24:b4:1b:d3:7e:43:8a:ef:12:73:db:4e:96: 6c:38:f9:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAil3oIHqsaku0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk MTZkNWUwYTItYmFkNi00Nzc2LTg4ZmQtZTZjMWM1MjkwNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc5sWB/37kZaLkjuHQ8DPxJbt8zrCyR/TW/t ia/UmPiBDZumXeehLS6cLWVh3Zae/6G9T7TVSlxgowLRjDcHGqPd1qoggGENlRfN sOXkHLJTdkKNteVovgrfIbmvquDePsAK4vAYL4PCnnC/r727jYJnEduIsKEQg52P FNQG6ziapwpFqdcLWB9H3Jvv3TO4XUkGr3XPw+lXeNQ7qiaHkrJ6hJOZTNmf+n/z +say5Y+71mRfdrp5l69r3AYVGEdaellzlBJ7VECQ/H1K4g1crKZQEubhMwyO6v2Q 4zKbq1xGCXArEp14XGxccDerFw6AiriYP+9xLURp7gGCBG62gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFl0RY7ZvJWHUXnp0m3TIFpRskpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzNjE2YmEtY2MwNi0z YzJhLTk5NzAtMWZmZjk5MTYzNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB47oTg0TvHfROKFJ/BFXD6I5i3prNU9MUYWGPxJ31j+VQiD7dvp+dm AnAJuiB+5w7KoXOzxmX6J0v5LNocr/rkTIoEXTqEIc9YlTMeWxiYCsHelwUnVF9h AjOG5dW3EDhpUFc+b4bLXWYG/3ku28CZ0QBYLX5nXZ2wzdqzBT+i6A9knbKZ+vZr SD5NvrmjiRk18LMy8WKGn9qqDuG8BZZ/yZmfnvsdTu8GoXk398uN2UPVgEbpJ1XE 8jRIPs/1290jvSVnF7xSoBV/4skv2l+u7FDp/XwZElCPP0g5JZt+PIII/Gkpz0te fS3nr5AM5CS0G9N+Q4rvEnPbTpZsOPkZ -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:43 2025 by rpki-client