$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa File: 8d81a33c-68c1-3212-9dd1-b350054d72f1.roa (raw, json) Hash identifier: Hp56lDu6dIcgVY2YNL9MaUvsPLNLCQ8cN9tf6zQtzRs= Subject key identifier: DB:55:45:D8:3C:70:D2:99:33:BF:C7:33:D4:5D:D6:D6:D9:30:C9:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628405AB28F84A98A8DBEE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 396565 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:ab:28:f8:4a:98:a8:db:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=041f9dd3-5147-40aa-8e55-48cda9989462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:35:19:34:6d:eb:7a:55:b5:48:90:a1:06: 17:94:27:d3:d3:9d:28:31:61:ab:6c:18:dc:ff:1c: e1:02:4d:22:97:59:6d:fb:0f:12:47:6a:2a:b9:a4: 9e:1e:8e:e0:8a:3d:43:c4:3f:83:39:75:98:19:2f: c0:a3:4e:46:a0:86:58:b1:e5:86:9c:05:49:bb:77: 7c:06:04:47:02:d8:02:27:96:61:11:32:7f:df:d4: 84:71:58:82:fb:be:ee:02:e2:a0:2c:1e:33:f1:e0: a6:78:01:de:c2:bc:15:f1:44:54:1f:d9:f0:4e:79: 2b:40:b9:12:63:63:d7:36:17:d5:62:6a:f4:4a:29: 8c:b1:fc:1c:80:d7:d5:10:1e:3a:08:76:e6:12:e8: 6a:13:6b:8a:a3:42:10:61:1a:3c:a6:d7:e3:52:7c: ad:9e:37:32:0b:97:fb:ee:f2:58:b5:07:a1:c3:95: 66:85:c2:39:45:ca:ea:4b:9c:1e:b8:de:50:96:a7: 30:d5:61:39:22:f3:4b:36:84:23:b1:34:9d:9f:d0: a8:cd:fa:15:70:d5:df:b9:a2:7f:f0:5f:70:ca:74: 0e:be:bb:db:b5:9d:aa:63:d6:dd:c1:72:8b:6d:3c: ff:4e:f7:b4:db:86:83:8b:13:15:82:53:79:b2:d3: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:45:D8:3C:70:D2:99:33:BF:C7:33:D4:5D:D6:D6:D9:30:C9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d81a33c-68c1-3212-9dd1-b350054d72f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:02:c7:18:ce:35:9d:dd:c2:78:fc:dc:0e:f5:6c:15:7c:61: 8a:ae:21:7e:77:77:1f:37:71:7d:18:86:6c:77:33:88:36:10: 8b:57:77:2f:47:02:f9:6c:55:d0:ee:8c:40:04:a6:e8:e2:74: 81:b1:98:50:01:52:ac:0b:89:f5:d5:e5:95:04:a4:3f:11:a5: 46:d1:f2:ea:df:93:27:ec:a5:1f:f3:87:8c:f8:87:ee:a3:08: 16:10:53:d7:2a:97:c9:7c:13:c1:50:3e:b4:86:0a:15:13:0a: 1b:59:d8:28:17:2e:6b:1d:76:42:3c:6a:03:e9:51:10:97:d2: 88:a4:dc:73:97:cb:60:b5:94:53:c8:22:6a:b9:53:22:8d:85: 3c:f8:30:8a:a5:af:fe:e8:5b:df:3a:c3:52:30:c4:9e:79:5f: f4:35:a0:d7:22:c3:03:61:ec:22:ff:af:ce:62:4d:52:1e:23: c0:f0:55:80:98:20:fc:1e:60:81:8e:52:91:5c:94:89:81:6b: 4e:ed:8a:b0:d5:97:a6:25:64:3b:61:ba:04:5c:f8:60:95:09: 66:00:f3:7a:c4:11:3b:08:4d:ac:83:67:d1:4e:92:b4:e4:60: d8:a6:80:1f:25:14:b5:e6:55:83:b2:08:44:a6:e8:6b:c6:39: e2:40:21:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAWrKPhKmKjb7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk MDQxZjlkZDMtNTE0Ny00MGFhLThlNTUtNDhjZGE5OTg5NDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AM1GTRt63pVtUiQoQYXlCfT050oMWGrbBjc /xzhAk0il1lt+w8SR2oquaSeHo7gij1DxD+DOXWYGS/Ao05GoIZYseWGnAVJu3d8 BgRHAtgCJ5ZhETJ/39SEcViC+77uAuKgLB4z8eCmeAHewrwV8URUH9nwTnkrQLkS Y2PXNhfVYmr0SimMsfwcgNfVEB46CHbmEuhqE2uKo0IQYRo8ptfjUnytnjcyC5f7 7vJYtQehw5VmhcI5RcrqS5weuN5Qlqcw1WE5IvNLNoQjsTSdn9CozfoVcNXfuaJ/ 8F9wynQOvrvbtZ2qY9bdwXKLbTz/Tve024aDixMVglN5stNG5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNtVRdg8cNKZM7/HM9Rd1tbZMMlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ4MWEzM2MtNjhjMS0z MjEyLTlkZDEtYjM1MDA1NGQ3MmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAMAscYzjWd3cJ4/NwO9WwVfGGKriF+d3cfN3F9GIZsdzOINhCLV3cv RwL5bFXQ7oxABKbo4nSBsZhQAVKsC4n11eWVBKQ/EaVG0fLq35Mn7KUf84eM+Ifu owgWEFPXKpfJfBPBUD60hgoVEwobWdgoFy5rHXZCPGoD6VEQl9KIpNxzl8tgtZRT yCJquVMijYU8+DCKpa/+6FvfOsNSMMSeeV/0NaDXIsMDYewi/6/OYk1SHiPA8FWA mCD8HmCBjlKRXJSJgWtO7Yqw1ZemJWQ7YboEXPhglQlmAPN6xBE7CE2sg2fRTpK0 5GDYpoAfJRS15lWDsghEpuhrxjniQCEj -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:11 2025 by rpki-client