$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73e98277-8638-383d-a571-9461a741d0d6.roa File: 73e98277-8638-383d-a571-9461a741d0d6.roa (raw, json) Hash identifier: 4mxDEYAMR2jpXsDICR3Vxx8+EB9vezMoRsG5T1Lwyek= Subject key identifier: 28:FE:BD:D0:A3:DA:96:F8:3B:E5:72:37:54:22:3E:0F:C5:4B:23:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840F6EC8A847C30FB81500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73e98277-8638-383d-a571-9461a741d0d6.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396567 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:6e:c8:a8:47:c3:0f:b8:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=66efd621-596d-4f94-9fab-4ecc162c99a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:90:e4:b4:f8:06:ae:7a:a5:62:01:7e:52: c1:58:2f:a1:e5:cd:6f:08:33:69:bc:3c:5f:1e:ae: 4c:78:b3:5e:49:f0:5c:22:b6:d9:78:6c:86:a5:15: db:3b:bc:af:c8:73:49:88:43:cd:6e:7b:26:2f:a9: ff:c7:c6:6a:c1:50:6e:75:c8:48:af:d1:f7:22:ef: 20:9b:e1:e7:a8:85:10:75:0f:cc:b6:a9:91:21:8c: d5:e9:9f:90:a9:31:e9:5a:84:62:32:a9:21:53:87: 25:32:1d:9c:62:01:58:55:07:6d:d8:bb:79:2e:5a: 84:08:dd:42:53:de:b1:5f:ac:19:40:01:7e:3c:dd: 89:c5:8d:be:71:f9:0c:a9:91:27:16:fb:e3:12:24: b2:96:e5:4b:e8:bc:9f:be:3c:3c:48:69:4b:10:f5: ac:66:20:a5:c7:e0:5c:85:c4:c9:fa:ec:8a:14:59: 00:82:9f:c9:d2:51:1c:a1:3a:b9:7f:51:52:a8:ba: 20:d9:fe:8d:24:07:5d:00:3d:ce:fa:df:3c:93:ff: 28:2c:4e:04:89:9d:b4:d9:31:d3:66:8d:1e:48:02: a6:2a:f9:1f:1b:4e:0d:06:e9:71:6c:0d:7a:cc:81: 48:52:84:ab:0c:6c:2a:44:20:7b:79:a3:26:51:df: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:BD:D0:A3:DA:96:F8:3B:E5:72:37:54:22:3E:0F:C5:4B:23:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73e98277-8638-383d-a571-9461a741d0d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:59:3b:6a:b2:9a:dd:e6:56:70:27:13:b4:b1:ed:82:88:8e: 3a:f0:7f:65:e7:32:51:69:b5:a5:4f:f4:85:7d:58:1b:fd:b2: cb:e2:e1:cf:9a:66:eb:bb:97:a0:c6:56:06:06:f9:3a:0a:8b: 88:3b:08:34:d2:29:c1:d1:80:52:80:b6:3a:74:46:bc:d8:e9: f5:4b:22:c3:7c:0e:ee:13:88:41:93:8e:a8:c0:ae:72:0b:65: fa:cb:58:15:d8:a5:55:31:0f:5f:91:ea:d1:b2:e8:fa:77:67: 77:1a:d9:45:aa:1c:bb:80:9b:b0:d6:d8:88:ee:00:bb:48:af: 80:28:32:f3:f2:0c:b2:fb:a9:39:92:4c:06:53:47:a8:c9:ae: b0:e1:54:3a:dd:95:6e:10:53:84:64:b9:25:a7:2d:a2:77:be: 51:82:b1:5e:d6:d3:80:5c:fa:20:a1:7f:d6:e3:cb:48:8e:03: c1:5a:ce:98:0c:ad:f1:a4:d7:77:1b:eb:1d:2a:37:d3:85:1b: 9c:ce:f4:93:0a:15:58:02:a9:72:2b:38:eb:7b:dc:2c:a2:61: 9f:fe:a5:63:83:d4:37:7e:9b:3c:6a:35:f6:06:f4:31:90:e8: 9b:d2:6c:05:8a:3c:9c:9b:d7:19:ef:b8:6c:71:59:b8:09:c4: 34:bf:54:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA9uyKhHww+4FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk NjZlZmQ2MjEtNTk2ZC00Zjk0LTlmYWItNGVjYzE2MmM5OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU+Q5LT4Bq56pWIBflLBWC+h5c1vCDNpvDxf Hq5MeLNeSfBcIrbZeGyGpRXbO7yvyHNJiEPNbnsmL6n/x8ZqwVBudchIr9H3Iu8g m+HnqIUQdQ/MtqmRIYzV6Z+QqTHpWoRiMqkhU4clMh2cYgFYVQdt2Lt5LlqECN1C U96xX6wZQAF+PN2JxY2+cfkMqZEnFvvjEiSyluVL6Lyfvjw8SGlLEPWsZiClx+Bc hcTJ+uyKFFkAgp/J0lEcoTq5f1FSqLog2f6NJAddAD3O+t88k/8oLE4EiZ202THT Zo0eSAKmKvkfG04NBulxbA16zIFIUoSrDGwqRCB7eaMmUd81dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCj+vdCj2pb4O+VyN1QiPg/FSyMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzNlOTgyNzctODYzOC0z ODNkLWE1NzEtOTQ2MWE3NDFkMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWWTtqsprd5lZwJxO0se2CiI468H9l5zJRabWlT/SFfVgb/bLL4uHP mmbru5egxlYGBvk6CouIOwg00inB0YBSgLY6dEa82On1SyLDfA7uE4hBk46owK5y C2X6y1gV2KVVMQ9fkerRsuj6d2d3GtlFqhy7gJuw1tiI7gC7SK+AKDLz8gyy+6k5 kkwGU0eoya6w4VQ63ZVuEFOEZLklpy2id75RgrFe1tOAXPogoX/W48tIjgPBWs6Y DK3xpNd3G+sdKjfThRuczvSTChVYAqlyKzjre9wsomGf/qVjg9Q3fps8ajX2BvQx kOib0mwFijycm9cZ77hscVm4CcQ0v1Tr -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:46 2025 by rpki-client