$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa File: 9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa (raw, json) Hash identifier: kDhFI9PkZCdI+i+jE4LvJhT/ihLS1RIVSLkcezUL5/g= Subject key identifier: F9:55:61:49:A6:1C:6F:3F:A5:DC:0B:D6:E5:BF:51:93:2C:1F:E0:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284109D3F008253945B3CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 397212 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:9d:3f:00:82:53:94:5b:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=df5cca23-1fb7-4050-b8f8-b2d5807514a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:84:cd:36:84:00:01:37:be:10:a2:2f:04: 90:3a:00:31:de:52:76:22:d8:53:fe:97:19:dc:e0: 7f:74:60:35:27:53:2d:3a:b0:8b:47:42:f4:6d:72: 02:2c:df:a4:6a:3a:5b:13:7e:95:b3:eb:22:5a:14: 03:6c:bb:1c:5e:c8:41:9c:85:16:59:6e:53:27:ef: 00:20:66:00:d2:5a:52:8d:34:19:55:d2:1b:7b:24: 9d:57:7f:59:72:7c:ba:2f:44:46:60:c4:98:8d:e0: bd:d1:ad:73:77:58:72:e4:ba:19:bd:95:ef:13:c2: bf:d3:3c:2c:7e:9a:d9:c4:f8:b0:b3:1e:c0:f0:b6: 07:1c:8a:8c:8a:f5:54:f2:74:22:5d:3e:29:92:86: 38:5e:da:8c:db:f3:c2:fc:1d:3b:65:ac:e4:cd:37: 43:69:da:21:ab:79:20:c1:40:56:95:1d:60:38:08: b5:da:fa:8f:3d:ec:9d:a5:f2:04:cd:ce:08:ad:71: 17:f8:42:7f:d3:ac:69:71:be:47:53:49:eb:fe:86: 25:ca:dc:80:99:a3:80:b1:d9:62:c2:76:28:0e:b9: 34:4d:9f:62:7d:b2:e0:d1:8d:d5:b8:7a:41:6d:41: 9e:c4:ee:82:03:81:2c:e7:90:df:e4:ad:f2:f1:b6: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:55:61:49:A6:1C:6F:3F:A5:DC:0B:D6:E5:BF:51:93:2C:1F:E0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:75:e0:d2:be:c0:73:fd:a8:4f:fa:9e:49:1c:db:86:8a:c0: 0c:e1:9d:9e:d0:58:02:c0:e5:51:09:16:bd:71:35:54:eb:b0: cd:d9:38:e1:5b:c1:6e:ff:2e:c6:61:76:3e:82:f7:bd:ff:d5: 3c:c5:10:d4:e8:e5:8d:0f:de:4e:06:6d:5e:f9:e9:dc:12:19: f6:26:b8:db:d2:40:c6:1a:25:a2:83:23:3c:d9:c0:5b:61:7c: 23:3e:3a:22:d6:ed:e0:92:f5:95:ab:fe:52:a2:3f:62:6a:07: 99:ea:c2:60:e2:c0:e0:4b:0e:49:1e:10:78:ae:72:64:c0:8a: f2:b0:b3:a7:91:2f:01:69:52:a0:00:59:95:3a:0e:08:e2:c4: 5a:81:73:f8:2d:b1:31:6d:6c:e5:34:7f:e3:fe:2b:92:b1:2e: c7:4f:6f:70:0b:0f:93:c9:9e:a9:ae:19:c5:ea:96:5c:d3:4c: 0c:cb:60:c1:82:9a:d5:3e:f3:40:4d:a6:c5:20:05:1e:e7:e6: 58:34:66:9e:03:5f:5b:4e:43:a9:78:71:8d:77:1f:b1:25:2e: ba:92:75:4a:06:2f:5a:f9:bb:22:2e:95:e8:77:25:9a:4c:4a: 12:b6:24:9c:f9:16:d5:f5:87:12:53:26:5c:86:71:53:3e:57: bf:81:16:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBCdPwCCU5RbPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk ZGY1Y2NhMjMtMWZiNy00MDUwLWI4ZjgtYjJkNTgwNzUxNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6yEzTaEAAE3vhCiLwSQOgAx3lJ2IthT/pcZ 3OB/dGA1J1MtOrCLR0L0bXICLN+kajpbE36Vs+siWhQDbLscXshBnIUWWW5TJ+8A IGYA0lpSjTQZVdIbeySdV39Zcny6L0RGYMSYjeC90a1zd1hy5LoZvZXvE8K/0zws fprZxPiwsx7A8LYHHIqMivVU8nQiXT4pkoY4XtqM2/PC/B07ZazkzTdDadohq3kg wUBWlR1gOAi12vqPPeydpfIEzc4IrXEX+EJ/06xpcb5HU0nr/oYlytyAmaOAsdli wnYoDrk0TZ9ifbLg0Y3VuHpBbUGexO6CA4Es55Df5K3y8bY4SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPlVYUmmHG8/pdwL1uW/UZMsH+CrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ4ZWIyNzUtN2JlOC0z OWFjLTkwYTAtMWFmZTJhMjJhODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbdeDSvsBz/ahP+p5JHNuGisAM4Z2e0FgCwOVRCRa9cTVU67DN2Tjh W8Fu/y7GYXY+gve9/9U8xRDU6OWND95OBm1e+encEhn2Jrjb0kDGGiWigyM82cBb YXwjPjoi1u3gkvWVq/5Soj9iageZ6sJg4sDgSw5JHhB4rnJkwIrysLOnkS8BaVKg AFmVOg4I4sRagXP4LbExbWzlNH/j/iuSsS7HT29wCw+TyZ6prhnF6pZc00wMy2DB gprVPvNATabFIAUe5+ZYNGaeA19bTkOpeHGNdx+xJS66knVKBi9a+bsiLpXodyWa TEoStiSc+RbV9YcSUyZchnFTPle/gRZP -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:12 2025 by rpki-client