$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa File: f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa (raw, json) Hash identifier: 8+fMHCnw5ZzXc4sfkYigmcJYS23lyQjE/gAS9AV2ogc= Subject key identifier: A8:E3:40:37:AF:31:03:CF:0C:C2:8F:0D:2C:BC:CA:23:E1:CB:30:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284064EDF1E2AFD4B9DE200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 10515 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:4e:df:1e:2a:fd:4b:9d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=26152e4c-62ad-4be3-a22b-0dc7c74b431f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:55:20:f4:b8:11:ca:15:65:70:54:13:13:a0: bd:a3:c8:1d:d5:c4:43:c1:86:4d:7a:07:d7:49:53: e5:48:4b:da:6e:ed:ed:61:b5:9f:c2:54:41:dc:3b: cf:3b:f1:40:0b:06:d1:96:f7:ef:4b:80:68:7e:0f: 53:87:8e:6d:6b:a8:2e:10:c6:07:6e:37:b8:70:5f: 26:db:73:fa:4e:86:2e:a0:bb:dc:1f:40:1f:25:3b: 74:f1:2d:82:fa:21:c2:ab:bc:1c:e0:a7:b6:0f:a1: 16:fd:bc:61:f8:8e:8c:7a:2f:c0:ad:fd:c9:fb:70: 6c:9e:86:1b:42:a4:7c:c2:8c:34:ca:f9:7e:4a:07: a3:51:74:10:97:74:cb:3b:7e:81:8a:0f:dd:44:8f: f1:0f:35:59:52:83:93:34:ec:4c:1b:15:f4:9e:0e: 85:45:07:f4:69:0a:72:f1:9e:72:37:e9:9d:8a:fc: 7d:fa:af:24:b8:f5:1f:ee:80:46:25:57:39:a8:1d: 78:5e:82:39:9e:b9:d7:56:59:b7:d1:31:3a:5f:e2: 43:14:c2:d1:e0:81:37:39:66:15:82:d8:61:da:0d: de:ee:4a:b2:15:20:37:15:08:a8:9d:50:d2:35:21: 8f:e7:58:d9:b2:0f:56:d8:cc:1a:22:d0:fb:e1:51: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:40:37:AF:31:03:CF:0C:C2:8F:0D:2C:BC:CA:23:E1:CB:30:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f57f0e84-9cc0-342b-87d1-9679cb68c7da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b2:b1:d6:db:1e:2c:9b:86:d0:f5:52:b4:14:3a:a2:20:c1: 5f:22:78:0d:ea:22:97:79:f7:d9:5d:54:2c:83:33:ce:7c:44: 17:e4:6d:c4:1a:d2:4f:5f:66:7a:c7:a1:ef:d8:00:cc:b2:28: bf:55:c3:df:95:e3:23:1a:52:c8:97:4a:3d:3a:d0:64:78:85: 76:1b:36:4a:72:0e:c3:18:dc:ae:18:4b:62:82:e2:4b:06:4c: db:e9:95:e6:29:24:00:d6:29:a4:e8:d4:a1:e8:6d:d2:86:2d: 45:ad:d8:09:e4:66:6b:33:be:07:09:87:91:ea:7f:0d:d1:6c: 8c:bd:7b:c0:ce:83:84:44:4f:bb:6f:43:a5:71:3a:e3:68:08: 60:fe:d6:c8:4b:9b:bd:60:a1:b1:bd:9c:a4:f5:bd:8c:fe:c4: 74:0a:49:03:ee:2b:f5:a8:bb:58:dd:bf:ee:aa:fd:f9:0a:a3: 6a:48:01:0e:cf:c2:e6:a9:f3:1c:59:99:ce:e9:5f:27:c4:65: ab:6d:16:e7:5d:e9:00:66:f0:e8:69:40:3e:b8:01:87:8b:21: 26:e2:7e:3e:90:12:1a:25:88:5b:12:48:62:25:42:97:e8:35: bd:f4:03:a4:7b:70:de:74:67:ad:95:f8:f5:fc:5a:e5:50:ab: ef:58:9a:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAZO3x4q/Uud4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MjYxNTJlNGMtNjJhZC00YmUzLWEyMmItMGRjN2M3NGI0MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1Ug9LgRyhVlcFQTE6C9o8gd1cRDwYZNegfX SVPlSEvabu3tYbWfwlRB3DvPO/FACwbRlvfvS4Bofg9Th45ta6guEMYHbje4cF8m 23P6ToYuoLvcH0AfJTt08S2C+iHCq7wc4Ke2D6EW/bxh+I6Mei/Arf3J+3BsnoYb QqR8wow0yvl+SgejUXQQl3TLO36Big/dRI/xDzVZUoOTNOxMGxX0ng6FRQf0aQpy 8Z5yN+mdivx9+q8kuPUf7oBGJVc5qB14XoI5nrnXVlm30TE6X+JDFMLR4IE3OWYV gthh2g3e7kqyFSA3FQionVDSNSGP51jZsg9W2MwaItD74VEZ3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKjjQDevMQPPDMKPDSy8yiPhyzDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU3ZjBlODQtOWNjMC0z NDJiLTg3ZDEtOTY3OWNiNjhjN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAysrHW2x4sm4bQ9VK0FDqiIMFfIngN6iKXeffZXVQsgzPOfEQX5G3E GtJPX2Z6x6Hv2ADMsii/VcPfleMjGlLIl0o9OtBkeIV2GzZKcg7DGNyuGEtiguJL Bkzb6ZXmKSQA1imk6NSh6G3Shi1FrdgJ5GZrM74HCYeR6n8N0WyMvXvAzoOERE+7 b0OlcTrjaAhg/tbIS5u9YKGxvZyk9b2M/sR0CkkD7iv1qLtY3b/uqv35CqNqSAEO z8LmqfMcWZnO6V8nxGWrbRbnXekAZvDoaUA+uAGHiyEm4n4+kBIaJYhbEkhiJUKX 6DW99AOke3DedGetlfj1/FrlUKvvWJoe -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:03 2025 by rpki-client