$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa File: 599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa (raw, json) Hash identifier: vNt46ia6+yalfAsw/BVRk8akFmuKPZ/Vtuh4SzccZ10= Subject key identifier: A1:D2:09:B0:8F:EA:B1:7C:2C:1D:11:6C:E8:1E:01:96:4C:48:57:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840F7CD8D8008066819160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396562 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:7c:d8:d8:00:80:66:81:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=2361f51f-7b1c-4eb6-b3d2-0ecb3a7d9454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:6f:b7:47:81:b3:66:b4:51:a3:23:b2:72: 5a:47:8c:64:f2:a4:a5:5f:6b:87:ee:8f:5d:eb:97: 15:9a:61:d7:6f:83:50:3a:3b:dd:24:44:6e:7a:75: 9d:aa:97:36:d2:45:84:fb:9e:f9:a9:ec:fe:d1:9f: 28:18:e7:a9:6f:af:ca:6b:bc:b2:64:6d:c4:1e:e4: ad:9f:b2:2e:28:9e:05:b1:a7:fe:b6:ad:b9:85:54: c0:a2:82:fa:9d:d1:8c:0e:e7:28:f4:1a:fe:46:40: 72:27:ec:60:c6:3d:63:cf:d9:55:42:7c:db:90:e0: 8a:2c:04:04:fb:a0:7e:dc:30:d6:21:da:6b:46:c1: 24:a2:5e:94:59:4d:7f:77:c8:59:35:38:ba:35:b9: 0b:86:9d:e9:45:b7:68:6e:59:30:17:20:3b:32:53: c7:8a:44:58:ce:3c:84:46:f8:d2:cb:dd:28:72:85: a4:12:e5:e2:05:23:95:ca:86:74:3b:84:44:e8:11: 97:5f:ab:d5:c1:aa:f0:f1:3e:ef:2c:3c:5d:b6:13: 51:5c:7c:d5:68:10:45:d8:ca:9d:2f:1e:7f:70:5c: 86:ef:ee:3f:67:7f:b2:be:d8:c4:cd:b5:99:3e:70: 0c:7c:72:8c:a3:2a:37:16:fc:2a:3f:c9:77:15:c5: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D2:09:B0:8F:EA:B1:7C:2C:1D:11:6C:E8:1E:01:96:4C:48:57:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7b:d6:f4:84:7a:0f:56:92:8b:d6:e4:e5:08:5d:23:8b:1b: d7:25:27:b9:0d:19:28:4f:c8:6e:f6:37:4a:a6:9d:24:a4:eb: 56:4a:da:51:aa:a1:e3:c9:f1:18:94:03:76:d9:df:b9:b7:c1: 11:b0:02:3d:64:5d:c0:e5:f7:23:aa:a8:84:9f:7d:a7:18:17: ee:bc:87:89:60:b3:6c:26:ab:45:e7:92:b4:71:e1:ed:4d:d1: d6:b8:15:50:ad:28:e8:63:db:3c:de:fd:7b:42:96:4c:15:07: e6:ff:34:01:08:48:14:6b:6b:26:93:a4:b6:4f:b1:cc:9d:64: 9b:b9:67:6a:b5:ef:f1:ff:11:f8:e6:56:ac:a6:8b:c2:cb:be: c1:03:7c:d5:c3:5c:02:26:20:c4:b7:a1:15:75:a2:02:32:6c: ef:d3:23:9a:69:10:9c:72:c8:d3:05:a5:3b:0f:8a:c0:bb:37: 1c:57:b8:9d:f9:18:7c:7e:8d:09:6e:f7:99:13:22:9b:6f:ee: d2:d6:1c:ee:fc:0d:f2:b8:d6:d2:4b:09:fb:bd:ba:fd:5b:40: c6:ab:5b:4a:a1:40:94:29:ab:89:cc:7b:85:9b:62:2d:ef:9e: 38:58:18:79:fb:32:ad:64:6e:9c:f2:13:72:14:00:46:7f:d1: 68:7f:c4:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA982NgAgGaBkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk MjM2MWY1MWYtN2IxYy00ZWI2LWIzZDItMGVjYjNhN2Q5NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Nvt0eBs2a0UaMjsnJaR4xk8qSlX2uH7o9d 65cVmmHXb4NQOjvdJERuenWdqpc20kWE+575qez+0Z8oGOepb6/Ka7yyZG3EHuSt n7IuKJ4Fsaf+tq25hVTAooL6ndGMDuco9Br+RkByJ+xgxj1jz9lVQnzbkOCKLAQE +6B+3DDWIdprRsEkol6UWU1/d8hZNTi6NbkLhp3pRbdoblkwFyA7MlPHikRYzjyE RvjSy90ocoWkEuXiBSOVyoZ0O4RE6BGXX6vVwarw8T7vLDxdthNRXHzVaBBF2Mqd Lx5/cFyG7+4/Z3+yvtjEzbWZPnAMfHKMoyo3FvwqP8l3FcUddwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKHSCbCP6rF8LB0RbOgeAZZMSFeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk5NTg4ZmYtMTdkNS0z ZGM5LWFhYTctMjEyMmIxZWM1MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIe9b0hHoPVpKL1uTlCF0jixvXJSe5DRkoT8hu9jdKpp0kpOtWStpR qqHjyfEYlAN22d+5t8ERsAI9ZF3A5fcjqqiEn32nGBfuvIeJYLNsJqtF55K0ceHt TdHWuBVQrSjoY9s83v17QpZMFQfm/zQBCEgUa2smk6S2T7HMnWSbuWdqte/x/xH4 5laspovCy77BA3zVw1wCJiDEt6EVdaICMmzv0yOaaRCccsjTBaU7D4rAuzccV7id +Rh8fo0JbveZEyKbb+7S1hzu/A3yuNbSSwn7vbr9W0DGq1tKoUCUKauJzHuFm2It 7544WBh5+zKtZG6c8hNyFABGf9Fof8T9 -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:49 2025 by rpki-client