$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa File: ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa (raw, json) Hash identifier: Xzcbm4ilWNiDB4DYzQJjlLZxmNOyk9nMn/gI6sOzpUs= Subject key identifier: 3D:47:C3:D8:CD:7E:78:42:AC:DF:93:3C:0A:D4:76:CD:0A:B3:A8:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A651F4D9FE507B76080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 211369 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:65:1f:4d:9f:e5:07:b7:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=885d162b-64b2-4a5a-8ac8-2d463f76db23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:a2:38:a1:92:cf:4c:9b:02:c9:a3:b3:0b: c6:cf:eb:4d:7c:5c:a7:de:f8:41:21:1f:60:79:17: f3:9e:b7:f7:7d:80:eb:9e:12:21:4d:74:eb:03:82: 1e:3e:26:8f:61:92:ce:7c:da:cb:a3:54:91:86:33: d4:85:fe:0e:5e:b2:3f:29:8b:de:07:19:35:93:56: 90:22:3a:3e:51:a5:b9:1e:63:87:d8:38:77:de:8d: a4:16:d3:4b:c9:a2:c9:08:f4:9d:91:c2:fa:b5:8e: 50:61:32:44:8a:af:78:a3:26:c7:08:1b:d8:64:08: db:9c:b1:d5:12:1f:6f:37:61:47:23:2d:b4:a4:87: 22:1b:d1:45:43:c9:8c:06:d0:13:d7:24:6f:cf:7d: 14:f2:f2:c1:f2:d7:5f:96:01:d2:a8:7b:82:7d:1e: 9f:ca:03:e7:54:ee:03:61:00:70:e1:29:2b:c8:54: d4:ac:e4:47:eb:8c:ba:f6:b1:de:16:9c:c4:33:9d: 07:4a:46:7c:bc:c1:5a:c1:71:ea:30:cf:ec:42:7a: e2:50:09:07:bb:8f:e9:ce:b6:19:a4:04:ef:f7:24: de:9f:39:64:2f:ea:e5:5d:ee:91:44:6f:82:27:ba: a8:c7:e2:2b:e2:fa:bc:e6:e8:4f:c2:b5:09:da:f0: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:47:C3:D8:CD:7E:78:42:AC:DF:93:3C:0A:D4:76:CD:0A:B3:A8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fa:b5:08:58:88:7d:0b:32:3d:5a:6b:08:26:84:1e:89:19: 07:aa:6a:64:1e:78:76:19:29:34:72:26:71:00:75:b4:f1:a7: db:52:24:a1:d4:c3:07:b0:3a:06:dd:b9:b9:dd:f9:e5:84:f1: 16:45:12:e2:bc:da:32:ed:67:8f:00:a6:8a:fa:ca:d8:a7:6c: 13:12:7b:2a:bd:d0:82:1c:c7:ff:69:b7:ef:d9:a7:af:e4:90: f7:ba:59:8e:3c:47:29:f8:7a:c2:4a:54:1b:25:12:e2:54:89: 95:38:8c:68:44:8b:0f:6b:8e:4a:c3:ff:37:85:e6:f5:ea:af: aa:ef:43:de:bf:25:03:ff:e6:6a:32:79:16:53:e9:49:cf:86: fe:db:7f:ba:73:01:e4:db:e3:bf:55:f3:0a:a0:0d:6c:e5:07: b0:7d:8a:67:a7:d1:e6:d8:ed:2e:59:7b:c4:f5:11:c5:50:aa: 26:68:aa:61:86:da:d2:9c:86:e1:ff:2d:21:e3:8a:67:75:2b: 81:14:66:87:2a:0b:ff:f8:b8:17:ee:ee:07:56:c1:06:74:99: 4c:58:4c:d1:76:69:b5:1f:cd:ee:8e:16:4e:38:ef:58:98:4d: a1:2b:d7:94:97:cc:6d:80:15:c9:04:dd:b3:35:f0:96:5b:1f: 0c:eb:ea:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAplH02f5Qe3YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk ODg1ZDE2MmItNjRiMi00YTVhLThhYzgtMmQ0NjNmNzZkYjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS2iOKGSz0ybAsmjswvGz+tNfFyn3vhBIR9g eRfznrf3fYDrnhIhTXTrA4IePiaPYZLOfNrLo1SRhjPUhf4OXrI/KYveBxk1k1aQ Ijo+UaW5HmOH2Dh33o2kFtNLyaLJCPSdkcL6tY5QYTJEiq94oybHCBvYZAjbnLHV Eh9vN2FHIy20pIciG9FFQ8mMBtAT1yRvz30U8vLB8tdflgHSqHuCfR6fygPnVO4D YQBw4SkryFTUrORH64y69rHeFpzEM50HSkZ8vMFawXHqMM/sQnriUAkHu4/pzrYZ pATv9yTenzlkL+rlXe6RRG+CJ7qox+Ir4vq85uhPwrUJ2vByzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD1Hw9jNfnhCrN+TPArUds0Ks6gkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWYzOTEwZTMtOWZlNS0z NGU3LTlhOGYtNmVkMTQ4YjIyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/+rUIWIh9CzI9WmsIJoQeiRkHqmpkHnh2GSk0ciZxAHW08afbUiSh 1MMHsDoG3bm53fnlhPEWRRLivNoy7WePAKaK+srYp2wTEnsqvdCCHMf/abfv2aev 5JD3ulmOPEcp+HrCSlQbJRLiVImVOIxoRIsPa45Kw/83heb16q+q70PevyUD/+Zq MnkWU+lJz4b+23+6cwHk2+O/VfMKoA1s5QewfYpnp9Hm2O0uWXvE9RHFUKomaKph htrSnIbh/y0h44pndSuBFGaHKgv/+LgX7u4HVsEGdJlMWEzRdmm1H83ujhZOOO9Y mE2hK9eUl8xtgBXJBN2zNfCWWx8M6+oT -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:11 2025 by rpki-client