$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa File: de962637-5957-3361-b0f3-b1ed59737e18.roa (raw, json) Hash identifier: JgiWlyTd9C3G/58KFPE5uyAA59uU3T8wXAo1BewFw+Q= Subject key identifier: 4E:45:24:AE:F8:15:B5:A6:CD:8F:01:85:83:0C:6A:64:D2:63:B3:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840F97F8BA95B1DAE1A9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396613 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:97:f8:ba:95:b1:da:e1:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=29785d6f-fd5a-439c-9827-4519cc364dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7c:fb:7c:70:d1:0f:3f:21:a5:ea:d7:f7:9a: dc:ad:92:e8:0d:1f:2f:a2:98:04:84:ac:82:da:0e: 5e:42:77:b7:6e:b0:aa:48:07:ce:86:b5:21:24:01: 43:a3:e7:5e:51:bc:57:d0:a2:f9:df:b9:c4:bb:d7: 03:ab:ae:92:c4:d0:36:f1:ac:1e:42:f1:e0:13:9c: ff:5d:24:2d:4f:49:e6:83:c9:d8:a4:8b:82:a1:1c: 9d:14:25:60:4b:69:1e:77:b9:ba:f3:b7:60:2d:6b: 6b:1c:62:4c:f2:ef:18:ce:58:2d:25:4f:9a:b3:eb: 55:d4:91:c8:ca:59:fd:d3:3b:67:9a:86:c4:a3:2f: f2:8f:57:ff:de:97:a6:30:7a:16:f5:9d:44:a6:5a: da:eb:bd:6b:4e:fa:19:09:a9:40:71:55:7f:c4:45: 6d:51:73:52:c5:1b:e8:1d:94:8c:c8:46:10:83:2b: 0c:ae:f0:0b:85:6e:d8:fc:b1:fb:bc:18:ba:10:bd: bd:a6:28:83:e5:e4:88:2a:65:b3:c0:0f:c6:03:3b: 7b:3b:11:5b:95:34:1b:8c:0c:5c:88:4f:c4:22:77: fa:f4:c9:4a:3b:ac:ab:b6:67:22:ef:96:c6:1d:b7: 2c:96:3e:a6:8b:91:f1:0d:c7:c6:d3:ef:de:be:52: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:45:24:AE:F8:15:B5:A6:CD:8F:01:85:83:0C:6A:64:D2:63:B3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:77:cf:68:fb:11:2b:8a:b1:ca:d7:8e:d4:92:6d:25:65:58: 2b:30:c7:04:5d:b3:03:1d:03:5d:16:29:e9:c0:75:5c:94:45: ac:1c:88:11:6b:9b:75:0d:2a:9b:cb:21:c6:8c:ae:a9:51:dd: 95:c8:ea:d5:ac:cc:5e:a2:b6:cd:6c:2e:61:c3:27:a7:4c:9a: 34:4e:dc:c3:5a:f0:ae:cd:d0:a0:f0:2a:72:81:29:70:e6:e6: 57:78:4e:b3:be:1c:f6:80:8d:ba:5c:7c:73:e5:02:f7:61:3b: 0e:cd:49:1b:ba:c2:77:89:7a:bc:a1:28:1c:04:76:e1:cf:e4: 65:17:0a:5d:cc:d9:17:2f:37:5d:f7:62:e8:c3:1f:76:49:78: 3c:1e:1e:6e:65:1a:e7:55:e5:bb:29:75:d0:be:cb:09:df:e8: 2b:15:c8:32:7b:ce:05:96:79:fc:f5:ac:07:e4:1d:bf:c5:2b: 69:c5:e0:79:5c:58:2f:3d:6e:6d:23:c6:15:72:7f:34:7b:a5: 00:a7:cb:05:50:5a:70:9b:e4:ac:31:fc:eb:52:aa:59:9f:b3: 11:34:13:97:a9:b2:83:e3:70:40:46:c1:bd:82:0b:57:ed:b0: fc:34:ae:0c:2f:6d:71:9f:45:4d:dc:32:f1:43:b9:74:47:ed: cd:d1:cc:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA+X+LqVsdrhqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk Mjk3ODVkNmYtZmQ1YS00MzljLTk4MjctNDUxOWNjMzY0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23z7fHDRDz8hperX95rcrZLoDR8vopgEhKyC 2g5eQne3brCqSAfOhrUhJAFDo+deUbxX0KL537nEu9cDq66SxNA28aweQvHgE5z/ XSQtT0nmg8nYpIuCoRydFCVgS2ked7m687dgLWtrHGJM8u8YzlgtJU+as+tV1JHI yln90ztnmobEoy/yj1f/3pemMHoW9Z1Eplra671rTvoZCalAcVV/xEVtUXNSxRvo HZSMyEYQgysMrvALhW7Y/LH7vBi6EL29piiD5eSIKmWzwA/GAzt7OxFblTQbjAxc iE/EInf69MlKO6yrtmci75bGHbcslj6mi5HxDcfG0+/evlLUiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE5FJK74FbWmzY8BhYMMamTSY7MXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU5NjI2MzctNTk1Ny0z MzYxLWIwZjMtYjFlZDU5NzM3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDd89o+xErirHK147Ukm0lZVgrMMcEXbMDHQNdFinpwHVclEWsHIgR a5t1DSqbyyHGjK6pUd2VyOrVrMxeorbNbC5hwyenTJo0TtzDWvCuzdCg8CpygSlw 5uZXeE6zvhz2gI26XHxz5QL3YTsOzUkbusJ3iXq8oSgcBHbhz+RlFwpdzNkXLzdd 92Lowx92SXg8Hh5uZRrnVeW7KXXQvssJ3+grFcgye84Flnn89awH5B2/xStpxeB5 XFgvPW5tI8YVcn80e6UAp8sFUFpwm+SsMfzrUqpZn7MRNBOXqbKD43BARsG9ggtX 7bD8NK4ML21xn0VN3DLxQ7l0R+3N0cy1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:51 2025 by rpki-client