$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa File: f8363202-68f3-396a-a17b-6bc148c1773e.roa (raw, json) Hash identifier: jVOVGDMs838lZwb3D5RZHI63Nxwjgqpwg/S4mYFe0ew= Subject key identifier: 21:29:82:12:32:1A:47:D2:9E:1F:B7:66:93:B6:4D:9B:20:F2:4B:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840CDB0943F04BE9D929C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 36625 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:db:09:43:f0:4b:e9:d9:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=0ee0c8ac-0e5c-4804-8bf0-99a40602662f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:42:50:72:39:cb:8c:02:d1:35:e4:b5:85: e3:f7:d0:ac:05:a8:26:21:20:3d:f2:69:8a:62:29: 8f:e1:97:67:13:18:88:8d:67:5a:a0:df:5e:87:f6: 02:98:7b:ba:ba:57:e0:a2:80:28:f9:24:c6:a4:f4: 1a:25:f7:4e:df:ea:5f:43:39:9e:35:da:54:41:fc: 6b:ed:81:46:12:42:2c:75:bb:c2:5d:23:fb:24:e3: 37:6b:c6:60:64:35:34:f6:58:88:ea:28:64:5f:73: 36:90:05:64:23:42:ff:b8:bc:41:09:95:f8:64:55: 3c:49:23:46:3f:54:43:02:a1:71:9f:c3:93:52:d9: c6:6f:11:68:14:78:34:80:d8:80:8b:66:32:c5:5e: c1:d4:cd:0c:25:5f:b5:6c:22:c6:27:45:e6:fd:09: 73:94:48:91:50:19:8d:b5:fb:c6:b5:79:9c:a7:90: b0:70:81:08:bf:41:96:d6:60:c6:d1:4b:27:0d:ff: 0e:40:aa:d1:f7:00:50:fb:d0:32:d4:08:93:b0:f5: b4:b5:96:18:02:e9:7d:70:78:d6:40:d9:d4:f2:eb: 19:ec:39:ac:dc:9e:95:6f:4c:23:77:d1:e1:4d:e1: 7c:e4:1f:72:c3:11:5d:0e:08:0d:31:c6:c2:f6:03: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:82:12:32:1A:47:D2:9E:1F:B7:66:93:B6:4D:9B:20:F2:4B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:98:ee:6b:b7:e9:05:f1:b2:76:4f:69:65:86:be:62:ca:d3: 79:6f:ef:5a:f4:4e:4b:62:26:07:d5:d9:14:e3:1a:ae:62:0e: e0:38:1d:2a:d6:59:a5:a4:cd:8d:5c:52:98:45:46:7b:e6:e2: c1:82:8d:b3:5c:72:8f:6b:1b:80:50:66:31:3c:d1:4a:69:eb: 8d:39:94:27:4d:c2:89:9f:6f:a5:83:be:2c:fa:10:bf:03:a1: aa:f2:77:74:71:72:12:fe:6e:3b:01:c5:88:59:1f:f8:a3:0d: 1d:35:51:54:1c:ca:46:ff:bf:39:c0:87:73:11:ec:71:00:44: 81:fa:0e:b6:2e:27:05:45:1d:f7:9c:26:91:ff:44:ab:1c:f2: eb:b5:d4:a7:84:9b:c7:a1:9d:72:54:fa:d9:34:22:79:d5:e0: 1c:35:12:d0:55:11:20:e8:d3:7a:84:a8:5c:01:3a:4a:94:3e: b4:0e:a0:ab:76:4b:ca:bb:be:72:59:2b:1f:21:1e:05:60:74: 84:4f:66:1d:6a:6d:f5:6d:6f:f3:b7:ad:40:83:c9:9f:67:3a: 4f:07:88:27:28:68:0f:e0:a3:5c:ab:26:ac:7a:d1:58:7d:16: 79:8e:6e:c9:22:b7:5b:9c:51:11:5c:02:74:8b:58:1c:5b:86: 22:93:68:76 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAzbCUPwS+nZKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MGVlMGM4YWMtMGU1Yy00ODA0LThiZjAtOTlhNDA2MDI2NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvVCUHI5y4wC0TXktYXj99CsBagmISA98mmK YimP4ZdnExiIjWdaoN9eh/YCmHu6ulfgooAo+STGpPQaJfdO3+pfQzmeNdpUQfxr 7YFGEkIsdbvCXSP7JOM3a8ZgZDU09liI6ihkX3M2kAVkI0L/uLxBCZX4ZFU8SSNG P1RDAqFxn8OTUtnGbxFoFHg0gNiAi2YyxV7B1M0MJV+1bCLGJ0Xm/QlzlEiRUBmN tfvGtXmcp5CwcIEIv0GW1mDG0UsnDf8OQKrR9wBQ+9Ay1AiTsPW0tZYYAul9cHjW QNnU8usZ7Dms3J6Vb0wjd9HhTeF85B9ywxFdDggNMcbC9gMX/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCEpghIyGkfSnh+3ZpO2TZsg8kvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjgzNjMyMDItNjhmMy0z OTZhLWExN2ItNmJjMTQ4YzE3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhmO5rt+kF8bJ2T2llhr5iytN5b+9a9E5LYiYH1dkU4xquYg7gOB0q 1lmlpM2NXFKYRUZ75uLBgo2zXHKPaxuAUGYxPNFKaeuNOZQnTcKJn2+lg74s+hC/ A6Gq8nd0cXIS/m47AcWIWR/4ow0dNVFUHMpG/785wIdzEexxAESB+g62LicFRR33 nCaR/0SrHPLrtdSnhJvHoZ1yVPrZNCJ51eAcNRLQVREg6NN6hKhcATpKlD60DqCr dkvKu75yWSsfIR4FYHSET2Ydam31bW/zt61Ag8mfZzpPB4gnKGgP4KNcqyasetFY fRZ5jm7JIrdbnFERXAJ0i1gcW4Yik2h2 -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:44 2025 by rpki-client