$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: 61S7Vfxodyfgrf5MupLOhdrT57Rj5frYjl0tE0SJ628= Subject key identifier: 9A:73:E7:2D:C7:0A:D4:8B:06:C3:4E:B0:4C:A4:8B:1A:7D:5F:A4:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284087EDD3D50AB5E1B4480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:7e:dd:3d:50:ab:5e:1b:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=23d326b5-3476-47dd-a920-c531b74cfe21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:56:1d:97:5b:e0:4f:b3:7a:de:af:0d:52: fa:ca:7b:d1:84:1d:54:aa:26:67:5b:2d:de:f1:29: 8d:52:b7:a1:93:b3:3d:f4:ad:6b:a9:09:df:35:e8: f2:4e:e7:f0:a4:21:60:e6:f7:25:cd:fd:f6:9a:2d: 60:97:c5:7e:90:bd:ef:fb:5d:cc:e6:42:86:8e:c3: 5e:61:b8:a8:b3:0a:26:53:e1:c3:92:e9:04:dd:34: f8:6c:d4:08:64:16:ac:43:67:b9:8f:75:21:59:a3: 6f:05:96:08:14:eb:3e:35:52:64:cf:8d:e3:17:88: 12:09:af:8f:45:cc:eb:64:bf:13:f1:fe:bf:7e:93: 2f:10:5d:77:8d:96:be:d2:a9:da:15:39:37:1b:ea: c6:e8:e7:50:39:bc:13:40:93:66:24:27:bc:94:be: c2:d3:ef:8c:4d:1b:2a:17:b3:53:68:3e:0a:cd:d1: 2e:b4:56:ac:94:8e:53:99:c6:c2:1e:0a:7c:24:f4: 81:0c:5c:6b:cd:f9:78:02:7f:2a:84:c3:bf:dc:39: 75:41:05:0f:89:54:b3:c4:be:2c:32:87:61:07:6e: 7e:cd:ae:54:d7:d0:93:e8:56:b5:58:66:5e:c8:f6: 78:d3:23:03:55:3f:74:89:31:80:95:f1:06:7c:6b: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:73:E7:2D:C7:0A:D4:8B:06:C3:4E:B0:4C:A4:8B:1A:7D:5F:A4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ed:e9:b7:e3:59:7c:ed:16:bd:6e:10:60:80:99:af:cd:4a: 8b:4d:02:9c:6e:b9:89:4a:0e:01:4a:fa:67:29:2e:4c:f2:1a: c7:a2:d5:20:70:7a:14:57:ff:45:2d:d9:e1:01:c1:e0:2c:a8: c3:0b:1a:2e:b7:7a:42:c5:64:3a:41:2b:13:d1:4c:1c:b4:60: 1a:52:a6:08:c1:93:92:17:f9:d3:1c:15:c2:71:28:8b:f9:2c: 59:1e:1e:85:3e:86:f4:00:c8:6f:cd:ab:c0:14:d5:db:36:7e: 63:00:80:fb:fc:ec:12:13:2d:e9:8c:ff:65:5f:f4:66:a2:fc: ca:54:33:55:ef:de:2f:68:d5:bf:3d:76:62:14:97:17:0f:1a: 73:bb:00:95:7c:7f:63:ff:36:91:27:c3:ef:c6:3f:6a:74:a5: e4:fe:73:f0:6b:75:09:7e:17:c0:4c:06:b9:f8:89:27:f4:1f: 3e:e9:3f:03:77:82:32:f0:24:89:c4:7a:9b:58:59:ac:2f:c6: dd:f2:c1:93:eb:7b:1e:a4:70:56:00:49:51:56:20:85:70:6d: d4:c1:b3:3e:96:32:36:c5:9e:d9:83:b1:d7:17:c8:42:b8:89: 88:fa:51:0b:87:af:ab:e4:05:b4:68:0f:16:33:01:7c:c5:4d: 48:7e:60:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAh+3T1Qq14bRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk MjNkMzI2YjUtMzQ3Ni00N2RkLWE5MjAtYzUzMWI3NGNmZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6NWHZdb4E+zet6vDVL6ynvRhB1UqiZnWy3e 8SmNUrehk7M99K1rqQnfNejyTufwpCFg5vclzf32mi1gl8V+kL3v+13M5kKGjsNe YbioswomU+HDkukE3TT4bNQIZBasQ2e5j3UhWaNvBZYIFOs+NVJkz43jF4gSCa+P RczrZL8T8f6/fpMvEF13jZa+0qnaFTk3G+rG6OdQObwTQJNmJCe8lL7C0++MTRsq F7NTaD4KzdEutFaslI5TmcbCHgp8JPSBDFxrzfl4An8qhMO/3Dl1QQUPiVSzxL4s ModhB25+za5U19CT6Fa1WGZeyPZ40yMDVT90iTGAlfEGfGuALwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJpz5y3HCtSLBsNOsEykixp9X6TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBH7em341l87Ra9bhBggJmvzUqLTQKcbrmJSg4BSvpnKS5M8hrHotUg cHoUV/9FLdnhAcHgLKjDCxout3pCxWQ6QSsT0UwctGAaUqYIwZOSF/nTHBXCcSiL +SxZHh6FPob0AMhvzavAFNXbNn5jAID7/OwSEy3pjP9lX/RmovzKVDNV794vaNW/ PXZiFJcXDxpzuwCVfH9j/zaRJ8Pvxj9qdKXk/nPwa3UJfhfATAa5+Ikn9B8+6T8D d4Iy8CSJxHqbWFmsL8bd8sGT63sepHBWAElRViCFcG3UwbM+ljI2xZ7Zg7HXF8hC uImI+lELh6+r5AW0aA8WMwF8xU1IfmCa -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:36 2025 by rpki-client