$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa File: ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa (raw, json) Hash identifier: c5LXMykxwuWja+GOxYKd9cCZ6597EUv7v8g43oCFBLE= Subject key identifier: 7A:BA:77:16:94:2C:AF:0A:F1:D2:EF:27:25:6C:B8:5D:04:06:3E:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284110C60AF1E9DD3D2D320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 397197 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:0c:60:af:1e:9d:d3:d2:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=648c9d9d-5e4e-4bf8-bea8-e146b68a304c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:25:ab:88:6a:63:16:ef:93:9a:c1:f4:1f: bd:55:5d:34:53:a8:79:e2:e7:35:5f:54:35:1e:bb: 93:61:b1:12:35:71:6c:80:cd:62:5e:5d:ef:26:84: 2c:89:9c:2b:67:97:d9:d9:8e:31:f4:7d:54:02:88: 08:ea:08:10:7d:d5:ff:e0:a9:e8:85:96:d0:94:2c: a9:64:2c:42:c5:9a:ad:85:ca:03:7f:08:01:83:8b: b7:15:cd:5e:ca:3e:a0:da:e3:d5:b0:f0:e0:36:15: de:d0:96:13:f4:73:0f:d9:f9:fe:83:34:95:cd:ab: 53:c0:bb:9c:49:29:ee:b5:f9:aa:47:3f:c8:5d:e6: b0:2e:c5:45:01:fb:63:97:e8:b8:b9:85:e9:c4:ba: 48:96:7a:fc:8f:5a:5c:f7:22:19:ab:21:b9:0b:67: b2:f6:42:fc:2c:f5:3c:75:93:88:9a:c7:71:c5:d5: 17:60:c0:4e:55:f7:4f:bf:a3:c6:bb:bb:39:16:7d: 3a:10:70:67:5c:0e:a4:de:bd:94:9f:c1:ca:ca:71: 13:8b:8a:26:4d:bc:35:a9:97:b8:46:fb:b4:18:23: 54:74:a8:a7:03:c0:0d:7a:ca:a4:3b:dd:74:a3:84: 6e:93:f2:af:21:13:3c:33:6b:46:38:87:16:d4:b4: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:77:16:94:2C:AF:0A:F1:D2:EF:27:25:6C:B8:5D:04:06:3E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d9:b9:f9:e4:22:77:af:9c:75:10:5d:bb:ed:67:d9:ae:70: 61:f4:cb:30:46:bd:40:a1:99:fc:ec:49:b0:e2:8a:ee:53:51: a5:d6:75:9a:3b:95:d0:27:bb:b5:4a:54:fd:c6:f8:10:f2:99: 4f:3a:2f:b8:54:0c:72:d4:e4:03:fc:0b:5d:40:07:57:de:3d: fe:91:6a:68:82:e0:2e:b5:0c:9a:8f:cb:b9:7f:fe:8d:d7:01: 89:b0:90:31:a8:69:74:84:93:c9:b0:1f:57:1e:69:0c:ec:31: 8a:e0:40:50:cd:88:a8:59:bd:ce:9b:6e:09:dc:f8:37:45:55: ec:ac:43:6a:03:eb:b5:88:32:5d:87:59:1e:b4:6f:23:6c:6b: 64:16:cf:c0:2c:35:83:c8:c0:e7:ea:73:3b:a9:ae:d9:86:94: fb:57:d8:1b:63:1a:b1:00:52:5d:98:26:87:c4:d2:6e:a0:75: de:6b:dc:52:17:39:f3:1b:7b:d5:94:c2:7c:2c:ff:5a:dc:fc: c7:78:67:be:93:0f:a7:d5:93:b7:85:36:64:a3:af:f3:25:9a: 13:99:84:31:eb:3b:32:f6:3c:3c:6f:64:a2:51:5f:91:1e:6b: f3:0f:e7:a0:a9:e7:3a:0e:38:d6:fd:b7:e3:58:3d:d5:91:30: a7:97:7c:b5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBEMYK8endPS0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk NjQ4YzlkOWQtNWU0ZS00YmY4LWJlYTgtZTE0NmI2OGEzMDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXUlq4hqYxbvk5rB9B+9VV00U6h54uc1X1Q1 HruTYbESNXFsgM1iXl3vJoQsiZwrZ5fZ2Y4x9H1UAogI6ggQfdX/4KnohZbQlCyp ZCxCxZqthcoDfwgBg4u3Fc1eyj6g2uPVsPDgNhXe0JYT9HMP2fn+gzSVzatTwLuc SSnutfmqRz/IXeawLsVFAftjl+i4uYXpxLpIlnr8j1pc9yIZqyG5C2ey9kL8LPU8 dZOImsdxxdUXYMBOVfdPv6PGu7s5Fn06EHBnXA6k3r2Un8HKynETi4omTbw1qZe4 Rvu0GCNUdKinA8ANesqkO910o4Ruk/KvIRM8M2tGOIcW1LRjFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHq6dxaULK8K8dLvJyVsuF0EBj4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM5YWUyYmUtNTZmNy0z NTJjLWIzZmQtZTM0OTY2OGMxMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAX2bn55CJ3r5x1EF277WfZrnBh9MswRr1AoZn87Emw4oruU1Gl1nWa O5XQJ7u1SlT9xvgQ8plPOi+4VAxy1OQD/AtdQAdX3j3+kWpoguAutQyaj8u5f/6N 1wGJsJAxqGl0hJPJsB9XHmkM7DGK4EBQzYioWb3Om24J3Pg3RVXsrENqA+u1iDJd h1ketG8jbGtkFs/ALDWDyMDn6nM7qa7ZhpT7V9gbYxqxAFJdmCaHxNJuoHXea9xS FznzG3vVlMJ8LP9a3PzHeGe+kw+n1ZO3hTZko6/zJZoTmYQx6zsy9jw8b2SiUV+R HmvzD+egqec6DjjW/bfjWD3VkTCnl3y1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:55 2025 by rpki-client