$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa File: d67b0840-5b69-323a-8043-56445d6c580b.roa (raw, json) Hash identifier: xviCCSFDU8NtBWgx4XprQvWii7xtTckqciU9H8iKbxM= Subject key identifier: 0A:EF:96:9F:8F:62:0E:6E:FB:AE:DA:81:4A:0C:9D:BA:8E:CD:72:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840961FDD8936E9A1B89C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396542 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:61:fd:d8:93:6e:9a:1b:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=90b6ed85-2d87-4d9c-85aa-05f4d254aabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:28:0f:e1:4b:6f:c8:d1:55:72:eb:51:4f: 21:38:11:49:9d:33:a7:19:96:29:c7:36:0c:f2:f6: a7:fb:94:77:40:a7:1b:0c:58:3a:f2:bb:01:1f:f3: a5:82:65:40:fa:cd:1d:a1:92:bc:6b:18:36:76:0f: d2:cb:46:65:4a:20:33:49:58:29:72:4c:69:fc:88: 8e:91:ac:34:c0:da:71:81:1d:5b:b4:a9:cb:79:57: 05:76:18:f6:83:47:d0:e8:90:4d:a8:d5:e9:95:20: 78:6a:5a:ec:96:e1:57:1a:78:82:02:6b:ac:88:d7: 96:6b:c4:58:49:55:0b:6e:19:83:1e:d3:26:86:8c: 31:63:41:24:51:f3:ae:1c:99:21:0b:ed:50:a3:24: ba:80:79:05:60:e8:a8:3a:db:ed:85:68:02:8f:3b: f3:eb:63:ba:f9:b9:37:b5:cd:a0:06:d9:6e:87:99: ab:c9:7f:00:7f:5f:32:a1:78:9b:87:2c:66:b3:a8: ee:0d:36:42:c6:a7:10:1c:4d:8b:25:1f:ef:1c:1b: 28:b0:79:7e:69:14:46:5d:d7:34:55:b5:8c:d4:56: 24:48:04:16:81:3b:0d:58:17:b5:97:d2:e3:f0:6b: eb:01:35:8e:9c:4e:e1:5d:f3:eb:79:f8:83:ea:cf: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EF:96:9F:8F:62:0E:6E:FB:AE:DA:81:4A:0C:9D:BA:8E:CD:72:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7a:1c:87:68:df:12:4c:83:cc:85:65:2b:ec:d2:05:84:3b: ac:11:97:dc:ad:ab:78:34:5e:9e:37:0c:f6:33:71:71:a0:0f: 99:84:49:de:65:8e:28:35:cf:dc:1f:32:6e:27:9d:7e:cd:f4: 5d:ab:75:00:28:31:ef:4e:b7:7a:ab:d9:f5:cf:c9:ff:6b:1c: be:9e:fa:06:e1:f0:85:11:ba:73:3a:a5:89:46:e9:3c:4b:1d: fe:d0:cb:48:60:62:46:3d:60:95:fe:db:7f:60:94:8f:1f:1c: f0:1f:80:b1:4c:ae:9e:3e:40:2a:1a:8f:22:62:61:20:c7:a7: 35:5f:2f:e0:ed:c5:3e:3e:c1:8b:d4:90:ce:00:ec:cd:0e:25: bd:d6:74:4a:26:39:a7:0b:92:37:98:99:6e:36:51:b5:d3:4e: 90:04:c9:07:bc:6b:eb:2d:90:f9:ba:88:d8:6c:9f:ae:91:9c: 24:98:64:c5:69:5b:69:0d:68:a6:02:2c:18:71:11:34:a1:3f: f5:e8:ee:28:fc:44:08:d1:b3:a1:d8:45:91:1f:ac:62:ee:8a: f1:fe:7b:51:01:4a:95:f3:c5:90:67:95:6a:e6:bd:de:27:8c: 00:13:4f:d2:6e:2e:f5:4d:ac:22:9b:f0:49:bd:d5:65:f5:21: 18:93:4e:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAlh/diTbpobicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk OTBiNmVkODUtMmQ4Ny00ZDljLTg1YWEtMDVmNGQyNTRhYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV4oD+FLb8jRVXLrUU8hOBFJnTOnGZYpxzYM 8van+5R3QKcbDFg68rsBH/OlgmVA+s0doZK8axg2dg/Sy0ZlSiAzSVgpckxp/IiO kaw0wNpxgR1btKnLeVcFdhj2g0fQ6JBNqNXplSB4alrsluFXGniCAmusiNeWa8RY SVULbhmDHtMmhowxY0EkUfOuHJkhC+1QoyS6gHkFYOioOtvthWgCjzvz62O6+bk3 tc2gBtluh5mryX8Af18yoXibhyxms6juDTZCxqcQHE2LJR/vHBsosHl+aRRGXdc0 VbWM1FYkSAQWgTsNWBe1l9Lj8GvrATWOnE7hXfPrefiD6s/dzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFArvlp+PYg5u+67agUoMnbqOzXLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY3YjA4NDAtNWI2OS0z MjNhLTgwNDMtNTY0NDVkNmM1ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkehyHaN8STIPMhWUr7NIFhDusEZfcrat4NF6eNwz2M3FxoA+ZhEne ZY4oNc/cHzJuJ51+zfRdq3UAKDHvTrd6q9n1z8n/axy+nvoG4fCFEbpzOqWJRuk8 Sx3+0MtIYGJGPWCV/tt/YJSPHxzwH4CxTK6ePkAqGo8iYmEgx6c1Xy/g7cU+PsGL 1JDOAOzNDiW91nRKJjmnC5I3mJluNlG1006QBMkHvGvrLZD5uojYbJ+ukZwkmGTF aVtpDWimAiwYcRE0oT/16O4o/EQI0bOh2EWRH6xi7orx/ntRAUqV88WQZ5Vq5r3e J4wAE0/Sbi71Tawim/BJvdVl9SEYk05m -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:29 2025 by rpki-client