$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa File: a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa (raw, json) Hash identifier: VMnbWqXoV8c2giDQJv5n7AanU5dh2ZzFvjENKN8KRi0= Subject key identifier: 3C:9B:E3:10:5A:B7:CB:BB:BE:50:9D:4A:2B:17:F4:20:7C:2C:EE:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628407B4A967D84A83B18200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 36616 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:07:b4:a9:67:d8:4a:83:b1:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=b252fc29-9d33-44f3-810a-b12bc6fcd0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:ae:84:10:c7:dc:28:e1:38:ef:45:da:dc: 03:40:83:b4:7e:ce:f9:2d:3b:cd:ba:35:5a:73:47: 7c:e1:2f:70:30:f8:1e:75:70:dc:df:10:02:f9:c4: 3c:b4:81:6c:88:80:90:65:ce:74:51:ad:93:0e:ad: ef:49:59:64:58:44:3d:3d:df:b1:3a:e6:48:11:37: 78:4d:20:55:47:76:83:24:e7:df:6b:b3:16:cc:48: 3b:d2:53:69:b6:df:5c:78:23:ce:29:a1:99:e9:ee: 3c:75:ce:7f:47:c6:a1:f6:8e:5d:e0:9f:f9:85:4c: 73:70:43:32:be:03:24:e7:19:85:22:83:96:35:77: 05:b2:5e:d5:67:16:cb:f6:21:a7:0c:2b:ab:14:27: cd:2f:43:29:66:5c:49:da:41:aa:00:80:14:76:2a: b6:9e:76:e2:a7:54:6b:f9:85:fd:e7:d8:3f:4e:78: e8:21:e0:68:c3:1d:17:e0:38:fa:99:05:f7:5b:c4: 39:47:3f:41:12:4e:e4:1f:3d:99:5d:2a:0d:23:15: 95:8b:b8:d7:e0:34:3b:62:2f:65:46:bd:a8:b5:53: fc:db:fa:d5:5c:63:61:8a:e8:4d:92:83:9f:df:b1: 2a:6b:0e:06:2c:b1:fa:da:87:fe:57:4b:33:5b:61: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9B:E3:10:5A:B7:CB:BB:BE:50:9D:4A:2B:17:F4:20:7C:2C:EE:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1f:e9:a3:75:53:d4:cd:2f:07:ed:11:f9:39:1e:d3:1a:b8: 47:47:0d:23:f7:5c:09:97:68:38:0a:02:09:ce:32:c5:78:8a: be:b2:79:81:fb:02:94:e8:dd:57:5e:64:46:da:2b:c2:cd:75: 8d:51:9c:2e:e6:a5:12:53:30:9f:4a:2d:8f:fa:2e:c7:a0:c9: 1b:30:e9:10:91:8a:f3:50:1d:9b:c1:0f:46:50:d5:8c:c7:b2: 8a:29:4a:01:8e:eb:13:1a:1b:e9:f2:ab:da:35:e3:02:63:c4: 74:2d:11:bb:bf:1a:9f:33:4b:e2:fc:5e:bb:66:40:a7:4d:8f: 42:c6:dc:2d:8b:51:16:36:a0:93:e7:33:68:23:3a:b6:e9:8e: a6:12:be:67:f3:c6:bd:33:20:10:7f:da:10:49:9f:06:20:24: f6:a4:d1:0c:d6:f2:9a:3f:df:ff:85:f6:cb:0b:c7:d2:9d:6f: 5b:f9:8e:9c:52:ad:2e:04:62:0b:8b:60:61:e3:cf:57:09:3d: bb:1a:cd:99:3a:73:11:6d:44:c6:ed:8c:28:2c:90:a9:59:31: b8:b1:47:07:4f:fd:0f:1f:28:75:f7:ca:3e:95:3f:91:1a:41: ef:2a:ef:51:11:8c:e2:7e:fb:fd:5f:04:16:b3:7b:f4:4a:d4: 90:42:22:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAe0qWfYSoOxggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk YjI1MmZjMjktOWQzMy00NGYzLTgxMGEtYjEyYmM2ZmNkMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA2uhBDH3CjhOO9F2twDQIO0fs75LTvNujVa c0d84S9wMPgedXDc3xAC+cQ8tIFsiICQZc50Ua2TDq3vSVlkWEQ9Pd+xOuZIETd4 TSBVR3aDJOffa7MWzEg70lNptt9ceCPOKaGZ6e48dc5/R8ah9o5d4J/5hUxzcEMy vgMk5xmFIoOWNXcFsl7VZxbL9iGnDCurFCfNL0MpZlxJ2kGqAIAUdiq2nnbip1Rr +YX959g/TnjoIeBowx0X4Dj6mQX3W8Q5Rz9BEk7kHz2ZXSoNIxWVi7jX4DQ7Yi9l Rr2otVP82/rVXGNhiuhNkoOf37Eqaw4GLLH62of+V0szW2HKIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDyb4xBat8u7vlCdSisX9CB8LO5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTliOTIwNTktZDJmNC0z ZjI3LWE3OWMtMGE5YTRhMGUyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbH+mjdVPUzS8H7RH5OR7TGrhHRw0j91wJl2g4CgIJzjLFeIq+snmB +wKU6N1XXmRG2ivCzXWNUZwu5qUSUzCfSi2P+i7HoMkbMOkQkYrzUB2bwQ9GUNWM x7KKKUoBjusTGhvp8qvaNeMCY8R0LRG7vxqfM0vi/F67ZkCnTY9Cxtwti1EWNqCT 5zNoIzq26Y6mEr5n88a9MyAQf9oQSZ8GICT2pNEM1vKaP9//hfbLC8fSnW9b+Y6c Uq0uBGILi2Bh489XCT27Gs2ZOnMRbUTG7YwoLJCpWTG4sUcHT/0PHyh198o+lT+R GkHvKu9REYzifvv9XwQWs3v0StSQQiI6 -----END CERTIFICATE-----Generated at Wed Jul 23 17:27:16 2025 by rpki-client