$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa File: aed98eff-e4f0-38df-8a36-3576a3282f4d.roa (raw, json) Hash identifier: 8wx412FEpp4OganCMcGm+H5wLje1IzcQHHwp9FWc0QY= Subject key identifier: 39:D4:1A:7F:87:58:CD:11:D9:6A:34:87:7D:87:1A:02:72:CD:EF:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628409BBF899F209723D9DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 397206 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:bb:f8:99:f2:09:72:3d:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=67d9f257-7782-446d-9145-ac00fb749110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:23:b6:64:0b:1d:f4:36:91:94:18:20:51:e3: a6:c0:c0:2d:9c:a5:db:97:fd:23:10:a2:21:c0:4a: 49:2c:82:dc:9c:4c:63:ad:d1:1b:e5:c2:e5:98:46: ef:1b:09:c2:be:50:b4:ed:7d:dd:81:14:2a:55:b1: 9a:86:32:6b:6e:ef:ee:c3:b3:fd:57:9e:f2:da:69: 66:d4:71:42:c9:15:c2:f0:3c:37:38:26:42:29:e9: 33:81:93:48:63:4f:f7:47:0f:01:12:fe:1c:04:52: 64:bd:0b:e2:ad:b6:1d:f4:bb:4b:9d:0e:94:da:22: 5d:1e:a5:bb:76:aa:38:2d:73:22:3c:1c:a9:fc:23: 66:38:85:03:5d:6f:90:45:d1:09:2a:75:5d:0e:d6: 1e:bb:1f:80:03:4f:0a:d3:45:03:01:7d:e0:78:6d: 5b:3a:1c:a7:d6:d1:c7:cf:c2:11:01:52:be:42:82: fb:8c:fa:8a:c5:2e:cd:75:53:5d:9d:bc:ef:90:e6: 94:36:5d:fc:a0:81:c5:3f:c9:41:22:00:f0:d9:c1: a2:18:ff:c2:0b:fc:4d:fd:9a:69:0c:9e:41:a9:75: 5a:ab:03:56:2a:ef:93:68:5a:61:d6:98:52:3f:24: 92:a5:61:96:8b:dd:ee:17:87:ec:64:60:50:67:8b: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D4:1A:7F:87:58:CD:11:D9:6A:34:87:7D:87:1A:02:72:CD:EF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:81:56:1c:42:ee:b0:cc:4a:78:42:8c:57:35:b9:4a:95:95: 3e:c0:46:df:22:cf:2f:08:bd:af:cc:7f:26:e8:6d:36:3a:e2: 8d:1d:f1:33:9b:22:5c:8d:16:0f:1b:9c:99:c7:80:60:0d:5b: 54:a8:d0:39:61:a7:8f:90:65:6c:a9:ba:69:45:4f:49:27:78: c4:22:26:ea:a2:70:c1:6c:e6:f0:76:4a:86:2d:eb:f2:ac:3b: ba:dd:52:39:43:bb:af:fe:6d:b5:e6:c1:99:6d:68:a8:83:bc: d3:d3:7b:26:3e:3b:8c:4e:21:9a:84:fa:1d:34:7a:32:cf:57: 41:8d:fd:ae:a7:f8:01:f1:27:57:b0:07:64:71:92:dc:81:3c: da:05:e2:9c:79:61:bd:e9:75:2d:2f:a2:ab:47:94:98:05:bd: 33:30:3d:f2:51:f1:b3:a1:bc:38:6b:f0:d4:26:2c:bf:5a:11: fa:dc:5a:c3:26:eb:b4:d9:f5:92:29:50:43:ea:10:8e:26:c2: 15:75:5e:57:04:fd:93:dd:45:22:62:49:fe:09:76:77:4e:f2: eb:96:5f:69:91:c2:e6:91:e4:8b:55:2f:94:f9:fd:de:d9:e0: fd:58:ad:ba:98:8b:66:ce:dc:9d:1e:83:28:79:06:4e:29:33: 42:9c:e8:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAm7+JnyCXI9ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk NjdkOWYyNTctNzc4Mi00NDZkLTkxNDUtYWMwMGZiNzQ5MTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCO2ZAsd9DaRlBggUeOmwMAtnKXbl/0jEKIh wEpJLILcnExjrdEb5cLlmEbvGwnCvlC07X3dgRQqVbGahjJrbu/uw7P9V57y2mlm 1HFCyRXC8Dw3OCZCKekzgZNIY0/3Rw8BEv4cBFJkvQvirbYd9LtLnQ6U2iJdHqW7 dqo4LXMiPByp/CNmOIUDXW+QRdEJKnVdDtYeux+AA08K00UDAX3geG1bOhyn1tHH z8IRAVK+QoL7jPqKxS7NdVNdnbzvkOaUNl38oIHFP8lBIgDw2cGiGP/CC/xN/Zpp DJ5BqXVaqwNWKu+TaFph1phSPySSpWGWi93uF4fsZGBQZ4vWlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDnUGn+HWM0R2Wo0h32HGgJyze/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWVkOThlZmYtZTRmMC0z OGRmLThhMzYtMzU3NmEzMjgyZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6gVYcQu6wzEp4QoxXNblKlZU+wEbfIs8vCL2vzH8m6G02OuKNHfEz myJcjRYPG5yZx4BgDVtUqNA5YaePkGVsqbppRU9JJ3jEIibqonDBbObwdkqGLevy rDu63VI5Q7uv/m215sGZbWiog7zT03smPjuMTiGahPodNHoyz1dBjf2up/gB8SdX sAdkcZLcgTzaBeKceWG96XUtL6KrR5SYBb0zMD3yUfGzobw4a/DUJiy/WhH63FrD Juu02fWSKVBD6hCOJsIVdV5XBP2T3UUiYkn+CXZ3TvLrll9pkcLmkeSLVS+U+f3e 2eD9WK26mItmztydHoMoeQZOKTNCnOjX -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:12 2025 by rpki-client