$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa File: af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json) Hash identifier: gBkyqTM3nY8neJyEncY5XfDSTCXm4QElHuTGDBfugg4= Subject key identifier: 40:B9:90:E9:38:57:68:64:52:6E:10:7C:08:9D:37:E8:06:5C:9B:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628411CD60A65773FF6961C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 36630 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:cd:60:a6:57:73:ff:69:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=76e6217f-c64c-40bd-bfa5-5348fa429665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c2:e8:92:49:14:ae:f6:74:c3:74:22:45:98: 64:d5:ba:4f:0d:39:f2:c7:1d:f2:8f:5d:53:3a:54: b1:2d:53:e5:56:9f:03:65:cf:80:02:f5:df:a4:e9: 3f:c2:08:f0:4d:b4:aa:a0:df:04:71:9e:6d:d5:aa: ac:f8:12:fb:87:02:f3:3a:21:5b:70:b0:fe:8f:84: 9b:3b:c7:68:1b:4d:dc:06:f3:3b:b8:bb:35:00:3e: 3b:fb:6c:aa:08:1e:11:a5:44:9b:b3:ae:3c:7a:3f: d3:07:26:23:b5:af:c2:1f:ca:b1:3d:8f:ac:1d:83: 7b:8b:0e:87:72:71:af:93:30:35:bb:c9:ac:e0:bc: 76:b8:11:4f:20:44:d9:27:2f:75:35:55:a4:ae:2c: ae:80:45:e2:8d:f1:5a:bf:aa:50:e2:a5:52:c8:d9: 05:84:c4:86:53:a0:e7:13:80:88:4d:3b:f6:5a:f7: b5:64:27:14:d5:4b:7e:49:63:e6:a3:cb:15:88:12: 46:1c:e2:58:e2:18:ae:95:c1:47:95:ba:4e:98:f4: 05:2b:1a:19:84:bf:48:b5:20:19:17:76:a5:17:6f: 57:fe:62:43:1e:18:5b:c3:3f:bb:9b:a0:b4:84:47: f4:df:6c:5c:30:52:90:71:b4:32:58:7c:54:17:b9: 95:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B9:90:E9:38:57:68:64:52:6E:10:7C:08:9D:37:E8:06:5C:9B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1c:2d:e2:ce:47:40:e3:41:9f:3c:7f:cf:f4:ac:da:f8:94: 3e:5e:f1:0c:ad:15:10:5a:57:ac:c0:8a:46:5d:89:12:7a:70: b9:46:35:0d:16:d5:02:44:4d:81:ab:ec:5f:7b:7f:9b:75:e4: f3:39:cc:84:ec:74:58:8c:07:70:e8:bd:ff:ab:c7:d2:b5:20: 44:dc:c3:36:5f:3f:5b:94:96:6f:45:b8:8c:d2:c2:d9:a1:1e: 58:4c:e0:6c:4d:a4:28:7b:1a:81:8b:14:9f:1a:f5:b1:ef:4c: 7a:ac:ef:ef:eb:61:61:0a:4f:dc:d7:97:d1:2c:ce:fe:75:29: 24:d5:6a:aa:9e:d7:c8:6c:96:ca:b6:8d:2f:19:87:15:5c:c2: 8a:37:3b:19:d5:a1:cb:84:76:a8:bc:d8:6b:e2:1c:57:3a:21: 12:6b:da:3f:c3:7c:43:7b:7f:ee:24:3d:68:14:c3:23:aa:05: c4:73:09:5f:3a:66:19:cb:4d:89:e1:eb:7e:94:d8:03:98:52: 85:93:57:30:60:6a:fe:dd:6e:3e:e6:64:86:2f:35:70:2c:49: ed:e9:45:69:62:79:f4:47:42:8f:35:31:c4:e4:e5:eb:cb:46: 58:fc:0c:9c:66:a4:8f:03:8b:68:08:fa:85:d0:ed:16:86:c7: 28:ae:c1:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBHNYKZXc/9pYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk NzZlNjIxN2YtYzY0Yy00MGJkLWJmYTUtNTM0OGZhNDI5NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysLokkkUrvZ0w3QiRZhk1bpPDTnyxx3yj11T OlSxLVPlVp8DZc+AAvXfpOk/wgjwTbSqoN8EcZ5t1aqs+BL7hwLzOiFbcLD+j4Sb O8doG03cBvM7uLs1AD47+2yqCB4RpUSbs648ej/TByYjta/CH8qxPY+sHYN7iw6H cnGvkzA1u8ms4Lx2uBFPIETZJy91NVWkriyugEXijfFav6pQ4qVSyNkFhMSGU6Dn E4CITTv2Wve1ZCcU1Ut+SWPmo8sViBJGHOJY4hiulcFHlbpOmPQFKxoZhL9ItSAZ F3alF29X/mJDHhhbwz+7m6C0hEf032xcMFKQcbQyWHxUF7mVoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEC5kOk4V2hkUm4QfAidN+gGXJvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4NTYxNGUtN2M5Mi0z NjQzLWI1NWMtNDcwZTVlYzMxZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0HC3izkdA40GfPH/P9Kza+JQ+XvEMrRUQWleswIpGXYkSenC5RjUN FtUCRE2Bq+xfe3+bdeTzOcyE7HRYjAdw6L3/q8fStSBE3MM2Xz9blJZvRbiM0sLZ oR5YTOBsTaQoexqBixSfGvWx70x6rO/v62FhCk/c15fRLM7+dSkk1WqqntfIbJbK to0vGYcVXMKKNzsZ1aHLhHaovNhr4hxXOiESa9o/w3xDe3/uJD1oFMMjqgXEcwlf OmYZy02J4et+lNgDmFKFk1cwYGr+3W4+5mSGLzVwLEnt6UVpYnn0R0KPNTHE5OXr y0ZY/AycZqSPA4toCPqF0O0WhscorsFK -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:39 2025 by rpki-client