$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa File: 7b28980a-5d28-3be0-806f-762cfd98334a.roa (raw, json) Hash identifier: 9hkrvodqnlcxk3LpQoUGQjuIqsbMLCs/4V3zsiiICFU= Subject key identifier: A6:E9:EF:EB:A9:1D:73:03:F7:F3:7E:1B:BA:42:6F:0D:E3:88:15:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628409AF8506D154D809A100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 25485 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:af:85:06:d1:54:d8:09:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=8fa6fa37-d593-4b71-8cdf-58aa22859594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:8b:0c:b2:64:76:0b:cf:ff:cf:d4:d6:13: 51:28:6b:9b:e6:61:f9:7f:0a:e3:1f:77:94:bd:ed: 81:91:4f:e1:f0:00:ac:66:27:a0:9a:e2:b0:7c:ec: 8f:54:b3:cd:00:0a:82:3c:a9:75:b0:d9:1a:96:ce: a5:6d:19:0f:b5:ef:11:a4:9e:2c:74:99:84:0f:df: b9:7e:95:ce:b2:47:71:69:11:c6:ee:6e:bd:ab:6e: d7:cd:4e:73:4a:c2:06:f2:3c:4f:26:97:36:08:1d: 1c:e8:c0:8d:da:27:98:20:7d:00:bd:3d:a0:2b:36: 52:ef:95:27:fc:d9:c1:a0:5c:33:23:7d:8f:7f:d2: 3f:0e:05:74:d4:9d:9e:24:79:7c:3f:14:8c:ba:b2: 39:c8:3f:95:eb:43:74:9f:f9:9c:3e:ca:88:b2:5e: 21:2b:22:03:89:17:ba:e1:8f:8b:fe:ad:86:e0:8c: f1:d4:1d:66:a6:09:ae:12:30:40:94:46:22:31:bf: fa:bf:3b:39:04:81:7f:a1:97:df:69:31:8f:0b:fb: ac:b4:d8:af:f3:5e:f4:20:7c:a0:ec:08:f5:ff:49: dd:9b:03:49:94:01:9c:df:ee:b8:39:c2:8f:27:e7: 89:be:13:6e:8d:a2:42:cc:16:c5:27:0b:fc:52:b8: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E9:EF:EB:A9:1D:73:03:F7:F3:7E:1B:BA:42:6F:0D:E3:88:15:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:02:73:ea:13:58:97:05:55:34:22:a1:59:ee:8e:f4:66:6b: a6:47:7b:9c:45:c2:99:78:39:be:74:3a:13:d9:bc:d9:1e:f7: 15:a3:4e:34:0c:c8:b6:b8:8a:88:d8:72:8b:8f:46:c2:6f:65: 79:d0:4e:9a:ab:99:58:c9:a6:f0:72:32:66:7f:06:fa:d8:59: 39:57:c9:ff:7f:1e:cb:a8:6a:09:f7:16:ff:0d:d9:55:36:e0: 71:dd:ed:cc:9e:67:3c:d8:25:e3:f1:a6:62:de:76:7e:20:00: 53:ea:ab:ce:b0:24:a9:b4:dd:80:dd:96:f0:19:47:86:4d:4f: c2:cf:94:89:46:ab:95:20:5d:19:25:5a:21:81:c2:4f:4d:fe: 4d:e1:7b:58:d3:2e:68:57:a1:b4:4c:5c:57:11:0d:d2:f0:d3: 2f:27:b1:6b:d0:13:59:1e:50:a0:65:60:58:75:e9:80:71:77: c6:29:c6:b1:3e:8b:78:c1:7c:10:5e:73:7c:2c:c4:2f:99:c9: 1f:69:83:23:c3:5a:5d:bb:e6:43:3f:da:d1:7e:c6:af:30:6a: 2a:f4:26:fb:91:c4:d0:a3:b2:d4:af:a9:de:88:38:d6:a2:9e: 61:68:ad:fc:19:e0:51:0c:3a:16:23:b6:fa:f2:7e:ec:1b:a4: 6c:fb:d3:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAmvhQbRVNgJoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk OGZhNmZhMzctZDU5My00YjcxLThjZGYtNThhYTIyODU5NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ6LDLJkdgvP/8/U1hNRKGub5mH5fwrjH3eU ve2BkU/h8ACsZiegmuKwfOyPVLPNAAqCPKl1sNkals6lbRkPte8RpJ4sdJmED9+5 fpXOskdxaRHG7m69q27XzU5zSsIG8jxPJpc2CB0c6MCN2ieYIH0AvT2gKzZS75Un /NnBoFwzI32Pf9I/DgV01J2eJHl8PxSMurI5yD+V60N0n/mcPsqIsl4hKyIDiRe6 4Y+L/q2G4Izx1B1mpgmuEjBAlEYiMb/6vzs5BIF/oZffaTGPC/ustNiv8170IHyg 7Aj1/0ndmwNJlAGc3+64OcKPJ+eJvhNujaJCzBbFJwv8UrjB0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKbp7+upHXMD9/N+G7pCbw3jiBXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2IyODk4MGEtNWQyOC0z YmUwLTgwNmYtNzYyY2ZkOTgzMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvAnPqE1iXBVU0IqFZ7o70ZmumR3ucRcKZeDm+dDoT2bzZHvcVo040 DMi2uIqI2HKLj0bCb2V50E6aq5lYyabwcjJmfwb62Fk5V8n/fx7LqGoJ9xb/DdlV NuBx3e3Mnmc82CXj8aZi3nZ+IABT6qvOsCSptN2A3ZbwGUeGTU/Cz5SJRquVIF0Z JVohgcJPTf5N4XtY0y5oV6G0TFxXEQ3S8NMvJ7Fr0BNZHlCgZWBYdemAcXfGKcax Pot4wXwQXnN8LMQvmckfaYMjw1pdu+ZDP9rRfsavMGoq9Cb7kcTQo7LUr6neiDjW op5haK38GeBRDDoWI7b68n7sG6Rs+9OK -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:43 2025 by rpki-client