$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa File: affea73b-0180-3ae1-b688-f6f004b73e14.roa (raw, json) Hash identifier: ZD4/KLBr9ESHrUJV20bKGYpGpfBNsfTkeDdhZ5KWB18= Subject key identifier: D8:B5:D8:EA:90:C1:F8:16:93:F7:91:B0:9B:29:9A:C0:50:67:53:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840C3A017A762628F28BF8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396593 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:3a:01:7a:76:26:28:f2:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=635aab7f-fb91-47a2-bdfd-bf4db151c143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:b9:24:4b:10:ad:95:6a:86:9d:bb:f7:15: a1:36:60:67:3f:4d:1b:c9:be:be:92:41:a7:9d:eb: 5a:81:44:90:1d:d8:99:b2:30:bc:fc:25:2c:3d:f2: f8:e3:f4:ed:a2:05:72:68:aa:eb:6e:5c:c1:fc:85: d0:ad:6c:93:cf:c5:35:4e:2b:30:b1:2c:64:0f:f3: 48:0a:0d:8d:3b:54:3a:64:70:0e:06:2d:c8:0f:15: c0:02:d2:0d:ef:ac:d1:6e:c6:4c:c7:31:e7:3a:b3: 27:2e:f4:bd:b1:3f:9c:09:a9:d3:c1:3a:de:a5:91: 16:ea:48:94:fe:7b:af:24:57:00:62:93:0c:93:fc: 18:b2:a5:48:4b:50:1d:e6:4c:09:90:7d:9d:e6:ec: 8e:56:98:5a:a0:53:75:c5:e9:00:4b:d1:b6:77:57: a7:8f:ce:ae:7f:dc:37:50:21:39:50:ea:b4:1c:a2: 65:2e:fe:0e:69:05:79:a2:17:bd:3d:f0:0d:03:cf: 14:95:58:d4:c6:c6:84:8a:74:16:2b:88:46:7a:bf: ad:55:f8:70:de:a2:4a:84:39:70:1c:e8:23:44:a6: c7:54:c5:ea:40:a9:62:e0:31:bc:30:bd:11:85:ab: 09:4c:ec:b8:98:dc:cf:e3:6f:bd:f4:37:8d:de:9e: 01:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B5:D8:EA:90:C1:F8:16:93:F7:91:B0:9B:29:9A:C0:50:67:53:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:06:db:53:e6:05:50:05:02:49:34:1d:9d:3e:74:79:88:0e: 46:11:21:ad:84:b9:70:79:6a:94:13:fb:72:e2:40:b7:d7:df: ec:12:3a:f2:88:9e:f9:d9:4a:30:2a:13:da:bc:93:6c:2f:06: 73:ae:73:a9:56:9c:06:af:2a:f5:34:4b:7b:70:0b:7f:a6:62: 04:ef:55:a7:b2:37:62:8b:36:71:34:33:5e:e8:4f:5d:b4:ef: da:07:e7:58:49:99:4c:75:86:ab:14:d2:5e:4d:ca:2a:d3:21: ce:5b:94:94:20:71:25:8e:65:43:dc:03:9a:6a:8d:93:e5:3c: 7e:e0:0b:dc:3c:09:89:6c:e2:79:01:a8:dd:b6:73:3c:50:7f: 6e:e1:c8:ad:9d:e5:43:98:67:06:d4:92:67:84:18:a6:03:3c: 5c:18:aa:a9:4b:0e:be:b9:4a:65:3d:39:bb:3f:8c:29:20:5e: 59:35:ef:8d:14:ee:0b:74:cd:4c:af:7c:8a:15:b7:5b:9c:d7: 4e:46:c5:ba:6c:4e:0d:72:12:fa:a6:1c:a6:22:93:8d:e7:54: fd:89:91:28:ba:46:0f:bf:d5:c4:42:9f:81:5c:a8:da:5e:6a: 78:f7:cd:e0:bc:62:b0:5e:0c:20:75:b8:95:b9:f9:02:2c:23: 7e:84:77:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAw6AXp2Jijyi/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NjM1YWFiN2YtZmI5MS00N2EyLWJkZmQtYmY0ZGIxNTFjMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiha5JEsQrZVqhp279xWhNmBnP00byb6+kkGn netagUSQHdiZsjC8/CUsPfL44/TtogVyaKrrblzB/IXQrWyTz8U1TiswsSxkD/NI Cg2NO1Q6ZHAOBi3IDxXAAtIN76zRbsZMxzHnOrMnLvS9sT+cCanTwTrepZEW6kiU /nuvJFcAYpMMk/wYsqVIS1Ad5kwJkH2d5uyOVphaoFN1xekAS9G2d1enj86uf9w3 UCE5UOq0HKJlLv4OaQV5ohe9PfANA88UlVjUxsaEinQWK4hGer+tVfhw3qJKhDlw HOgjRKbHVMXqQKli4DG8ML0RhasJTOy4mNzP42+99DeN3p4BAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNi12OqQwfgWk/eRsJspmsBQZ1PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmZWE3M2ItMDE4MC0z YWUxLWI2ODgtZjZmMDA0YjczZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9BttT5gVQBQJJNB2dPnR5iA5GESGthLlweWqUE/ty4kC319/sEjry iJ752UowKhPavJNsLwZzrnOpVpwGryr1NEt7cAt/pmIE71WnsjdiizZxNDNe6E9d tO/aB+dYSZlMdYarFNJeTcoq0yHOW5SUIHEljmVD3AOaao2T5Tx+4AvcPAmJbOJ5 AajdtnM8UH9u4citneVDmGcG1JJnhBimAzxcGKqpSw6+uUplPTm7P4wpIF5ZNe+N FO4LdM1Mr3yKFbdbnNdORsW6bE4NchL6phymIpON51T9iZEoukYPv9XEQp+BXKja Xmp4983gvGKwXgwgdbiVufkCLCN+hHcw -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:46 2025 by rpki-client