$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa File: f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa (raw, json) Hash identifier: duOewc7yqI9K0hACtuwtsKnkBBz5l7CbTeijqNZK8pc= Subject key identifier: 55:5A:07:E4:0B:BB:89:90:8F:A4:0A:7F:AF:1B:54:D4:9C:64:C4:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628411196786D7ABCF757140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 397195 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:19:67:86:d7:ab:cf:75:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=5abe6493-68ca-46e1-b571-3fccdb53439f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:85:43:47:65:e1:8d:5f:a9:50:7b:38:7a: ad:1a:8a:79:b0:31:27:8e:1a:8c:a1:7c:ee:86:ab: 07:ca:93:99:7d:7f:88:a7:c6:4d:7e:d0:f2:3f:48: 4b:d2:83:6d:15:99:f9:d7:e4:46:e2:eb:7d:78:a6: b9:e1:28:45:34:ad:36:db:76:6d:10:b3:61:6d:89: 84:5b:67:1f:a5:e3:12:7d:38:c3:72:64:30:90:5c: 3e:99:79:28:89:54:db:d5:1e:01:1d:45:50:14:af: 9d:f9:66:87:1f:da:43:51:35:ad:9c:d5:c4:cb:4c: 90:5a:c1:dd:0a:41:aa:c7:29:69:1a:0e:92:3f:5f: 39:76:f0:10:40:05:64:d8:e6:4b:13:d0:38:70:5e: a4:26:10:e3:30:5e:5f:a8:81:15:ed:e6:d4:e7:c7: 4f:35:2f:2e:7d:27:03:63:c5:05:ee:df:65:1f:f3: 4c:d1:db:a5:73:80:34:8a:dd:cf:75:24:d6:a4:a4: 9a:ef:8f:e0:f5:ea:2a:d7:0a:89:5e:7d:e0:77:18: a5:62:88:3f:da:f9:62:5c:ff:0b:0e:94:2e:c0:f9: b7:62:1f:a8:b5:ac:68:b8:79:aa:b3:b5:7f:99:e1: 21:8d:f4:06:7e:35:67:58:18:c0:6f:93:91:ab:cb: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5A:07:E4:0B:BB:89:90:8F:A4:0A:7F:AF:1B:54:D4:9C:64:C4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f78903ec-4bc6-394c-ac27-5ee48e3a803e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:91:98:46:ac:6d:dc:c5:b8:8f:d4:87:18:45:7a:87:8c:2b: c6:07:4b:ff:1e:05:28:ee:b1:a4:e0:76:9e:66:73:e6:c6:17: ae:7d:50:87:01:4c:43:6c:3d:0e:4a:9a:74:c0:f8:f7:88:8e: 3c:57:59:54:7a:e6:59:cd:51:29:89:e4:6e:15:2b:2b:09:84: f9:df:d8:c1:4c:7f:53:8d:2c:1b:f2:cc:27:ff:56:d2:fb:fb: d8:df:d5:29:a0:f5:12:b2:c2:ad:36:1f:a0:51:3c:a0:be:26: 66:2b:7b:da:43:88:13:6e:a8:96:5b:88:af:5a:19:85:0d:40: bd:e9:95:8b:ea:b6:87:fb:99:65:4e:67:c9:cc:cb:b7:9b:10: c8:48:be:7c:52:d8:2d:47:2e:56:1b:5b:72:d4:52:c3:f1:37: 74:04:67:19:55:0d:af:d9:98:85:49:b6:07:4d:fd:8d:6d:5b: 5a:88:ad:21:a6:2c:59:69:3b:1a:6a:ce:95:65:09:63:2c:4b: cf:9b:65:47:ce:3c:95:69:19:fd:20:ea:21:8a:8b:03:e0:e8: 85:97:e6:95:e4:07:0a:f3:85:f3:f1:1d:6a:96:d5:03:cd:2c: 92:16:c1:55:1b:6c:9b:08:f1:dd:a1:04:67:d2:6e:02:ce:36: 2a:e6:44:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBEZZ4bXq891cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk NWFiZTY0OTMtNjhjYS00NmUxLWI1NzEtM2ZjY2RiNTM0MzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiGFQ0dl4Y1fqVB7OHqtGop5sDEnjhqMoXzu hqsHypOZfX+Ip8ZNftDyP0hL0oNtFZn51+RG4ut9eKa54ShFNK0223ZtELNhbYmE W2cfpeMSfTjDcmQwkFw+mXkoiVTb1R4BHUVQFK+d+WaHH9pDUTWtnNXEy0yQWsHd CkGqxylpGg6SP185dvAQQAVk2OZLE9A4cF6kJhDjMF5fqIEV7ebU58dPNS8ufScD Y8UF7t9lH/NM0dulc4A0it3PdSTWpKSa74/g9eoq1wqJXn3gdxilYog/2vliXP8L DpQuwPm3Yh+otaxouHmqs7V/meEhjfQGfjVnWBjAb5ORq8sCMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFVaB+QLu4mQj6QKf68bVNScZMRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjc4OTAzZWMtNGJjNi0z OTRjLWFjMjctNWVlNDhlM2E4MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBukZhGrG3cxbiP1IcYRXqHjCvGB0v/HgUo7rGk4HaeZnPmxheufVCH AUxDbD0OSpp0wPj3iI48V1lUeuZZzVEpieRuFSsrCYT539jBTH9TjSwb8swn/1bS +/vY39UpoPUSssKtNh+gUTygviZmK3vaQ4gTbqiWW4ivWhmFDUC96ZWL6raH+5ll TmfJzMu3mxDISL58UtgtRy5WG1ty1FLD8Td0BGcZVQ2v2ZiFSbYHTf2NbVtaiK0h pixZaTsaas6VZQljLEvPm2VHzjyVaRn9IOohiosD4OiFl+aV5AcK84Xz8R1qltUD zSySFsFVG2ybCPHdoQRn0m4CzjYq5kRl -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:09 2025 by rpki-client