$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa File: b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa (raw, json) Hash identifier: /220gtDQ9SOoswhMLvv8aerjTkF/ZJV0VnF+osf/Q+0= Subject key identifier: EA:03:9C:8B:0D:59:5E:D7:F6:15:12:F7:4D:C4:AE:92:1B:30:F3:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628409476A12670E50D7CD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396561 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:47:6a:12:67:0e:50:d7:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=7acdfdda-5859-4f28-a6c9-d95d395a9bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1c:90:e9:79:99:a9:ba:32:82:ad:70:50:76: 49:77:4b:49:5e:d3:04:70:97:98:fd:0f:eb:29:ee: ae:84:32:97:a8:df:b2:e3:fe:c6:2f:cd:f1:2f:8b: 1d:f4:ef:e0:6b:5b:ce:0d:51:a8:bd:ca:1c:35:5d: 54:b0:7e:8c:e1:c8:7e:0b:6f:15:15:24:28:d7:6e: 2c:d3:ff:aa:5f:b1:07:a4:a8:f0:da:09:74:15:34: f7:1d:01:1c:83:6f:66:33:c8:09:6b:bf:49:7c:dc: 97:cf:7f:c4:a7:44:f4:4c:05:1d:0e:f6:07:67:d6: ea:e9:15:8e:88:76:5b:75:fd:57:59:3a:bb:22:c8: 73:5d:f5:f4:57:2e:67:b6:ca:10:99:3c:13:6d:ea: e6:ac:15:7d:d7:01:fc:52:e5:6c:89:19:7e:de:14: 12:1e:28:b3:c1:5d:68:d3:f3:58:3a:4e:32:8f:b6: b8:3d:34:1c:96:ea:ca:27:7d:3a:84:64:38:9e:90: de:3a:49:fb:ef:ca:c0:fb:dc:a5:c1:02:c3:6b:c9: 5f:4b:a8:c7:96:5f:87:c1:73:5e:90:0b:e2:91:0e: 94:48:cb:f4:3b:b8:37:6d:5f:da:85:e7:35:7d:36: a3:c9:99:d6:bd:0b:22:64:fa:26:4e:d2:40:32:57: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:9C:8B:0D:59:5E:D7:F6:15:12:F7:4D:C4:AE:92:1B:30:F3:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5a:b3:44:7e:59:29:f5:d4:b8:f0:b1:53:f2:87:11:6b:a7: 68:c4:80:b4:d1:b2:6f:f9:42:f3:9d:5f:49:b9:2b:b2:16:a0: 8f:7f:c6:41:39:b2:50:42:1d:f3:1d:6b:7e:7c:2e:83:2e:b2: c9:cb:54:61:1d:2c:10:5f:a3:7f:b7:9c:b7:06:71:a5:5a:d8: f4:ae:c2:94:a8:db:66:4a:3f:d8:0c:f5:0f:64:9c:c9:59:c1: 12:3e:c4:28:5b:8d:72:c3:45:98:0b:77:a2:ae:f9:33:6a:0f: 8b:4d:cb:e2:09:f0:00:5c:67:68:c7:4b:7b:83:5d:42:c6:6c: e8:4d:33:e0:4b:d4:98:3b:62:47:d9:23:c4:78:6f:8f:20:09: 9d:ad:df:aa:a6:d7:72:cc:27:f6:95:3f:30:7e:f4:ca:ce:ef: e1:18:fb:35:17:2b:83:b1:de:ef:51:13:a1:99:37:e0:01:93: c5:ba:45:45:21:4d:ce:06:1f:dc:be:e8:bb:2e:02:1b:64:17: a9:48:8c:1f:9a:b8:bb:0a:cc:d7:ee:2c:bd:a2:eb:09:d5:cb: 81:cc:9c:0e:1c:8b:ba:5c:8a:ba:71:a1:b4:62:e7:69:1b:eb: b6:d5:f1:88:ca:c2:41:b0:f1:04:d8:1c:b4:18:92:64:85:c1: f5:0a:c0:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAlHahJnDlDXzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk N2FjZGZkZGEtNTg1OS00ZjI4LWE2YzktZDk1ZDM5NWE5YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxyQ6XmZqboygq1wUHZJd0tJXtMEcJeY/Q/r Ke6uhDKXqN+y4/7GL83xL4sd9O/ga1vODVGovcocNV1UsH6M4ch+C28VFSQo124s 0/+qX7EHpKjw2gl0FTT3HQEcg29mM8gJa79JfNyXz3/Ep0T0TAUdDvYHZ9bq6RWO iHZbdf1XWTq7IshzXfX0Vy5ntsoQmTwTbermrBV91wH8UuVsiRl+3hQSHiizwV1o 0/NYOk4yj7a4PTQclurKJ306hGQ4npDeOkn778rA+9ylwQLDa8lfS6jHll+HwXNe kAvikQ6USMv0O7g3bV/ahec1fTajyZnWvQsiZPomTtJAMle3gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOoDnIsNWV7X9hUS903ErpIbMPO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhM2FhNGQtMjVkMS0z ZDcxLWE1OTYtNjA4YWZmMGEwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAeWrNEflkp9dS48LFT8ocRa6doxIC00bJv+ULznV9JuSuyFqCPf8ZB ObJQQh3zHWt+fC6DLrLJy1RhHSwQX6N/t5y3BnGlWtj0rsKUqNtmSj/YDPUPZJzJ WcESPsQoW41yw0WYC3eirvkzag+LTcviCfAAXGdox0t7g11CxmzoTTPgS9SYO2JH 2SPEeG+PIAmdrd+qptdyzCf2lT8wfvTKzu/hGPs1FyuDsd7vUROhmTfgAZPFukVF IU3OBh/cvui7LgIbZBepSIwfmri7CszX7iy9ousJ1cuBzJwOHIu6XIq6caG0Yudp G+u21fGIysJBsPEE2By0GJJkhcH1CsCs -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:47 2025 by rpki-client