$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa File: f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa (raw, json) Hash identifier: YFYwaTORv6KZeledrnONaXeMkgU2NrTfqORzxL7S0o4= Subject key identifier: 21:75:40:A2:C6:0E:09:7F:F0:C7:A4:9B:2C:F9:57:CC:D0:00:EC:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840939D958D05CB7CFC998 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 36628 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:39:d9:58:d0:5c:b7:cf:c9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=b7de7a9b-03c8-4e7f-beca-27a76c05da48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:f7:c0:d8:c5:08:b2:b8:85:1f:07:8e:71: 39:c6:2e:88:ed:ed:a2:dc:85:56:80:f0:01:3b:bc: 8c:e1:ef:31:97:fc:ba:e8:e0:12:83:9f:d7:ff:d8: da:77:8a:52:3b:b1:29:6e:db:64:00:e2:19:f1:1e: 33:d6:42:a0:ef:af:82:9f:b0:1c:66:77:1b:da:74: b5:31:b4:87:16:ef:9b:26:92:cd:26:af:82:a7:31: 59:ac:6f:7c:14:f0:6b:11:42:0a:e3:95:72:f7:c8: 76:42:16:a9:4c:50:5d:98:e0:46:85:3d:c3:f5:dd: 46:d3:bc:58:59:74:77:07:3b:3c:5e:2d:e1:1f:73: 5c:19:85:49:8c:f5:d4:c2:ff:5f:57:09:0b:d7:13: b6:5b:59:67:dc:00:84:d9:4d:4e:07:5b:6b:3a:29: c3:4e:57:00:be:05:ff:cc:da:79:2b:d0:55:14:eb: 99:47:e2:52:36:43:e4:40:26:c1:ad:20:f6:c4:86: 61:d4:4e:56:aa:55:92:e3:45:37:7a:3b:b2:e5:26: 00:2e:e0:84:c2:39:5d:39:01:0b:12:57:89:7e:30: 22:63:89:68:06:0b:26:67:ee:6c:b2:e1:7d:c5:9f: 7f:8a:57:df:17:d5:ba:a1:22:33:e5:3d:4b:85:f3: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:75:40:A2:C6:0E:09:7F:F0:C7:A4:9B:2C:F9:57:CC:D0:00:EC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8e395c5-40db-3949-82ef-49f34c2a5c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b6:2d:62:6e:bd:db:85:76:40:4b:de:04:c4:fa:5c:d1:21: 43:c1:f0:cf:ac:3e:03:c3:3b:93:3d:1b:54:9b:81:9e:e6:cd: bf:84:94:a7:97:6e:3c:85:01:dd:14:0d:78:6f:7f:ad:a2:78: f8:5d:64:6a:17:91:f5:49:14:e6:d7:5d:02:83:6b:f5:ce:ed: ef:0e:9f:5b:68:f9:6b:19:ef:3d:ee:e5:90:46:f6:00:b2:8b: 04:ec:cd:65:90:69:6d:3f:fd:ec:26:1d:13:d9:d6:1a:7f:b1: bb:d6:46:04:28:f6:a8:6c:b4:40:ed:1c:10:da:64:54:aa:88: 10:f0:1a:05:31:d7:e2:fb:3c:69:ee:05:c9:7b:a4:b4:57:04: bd:12:8f:4b:b1:a3:de:cf:8a:72:bb:0a:58:00:64:c6:76:3e: d9:24:7d:e2:48:44:35:bf:55:bb:bf:09:da:97:6f:68:1e:27: 4b:42:db:83:0b:74:04:26:56:4d:45:01:a4:d8:da:92:8d:80: 83:b7:05:55:7f:b4:dd:c3:41:16:c5:ca:34:17:f8:c2:52:36: 1d:e9:ad:7d:0c:22:dc:57:4b:d6:18:4f:98:74:04:89:cd:a9: e1:79:ea:f3:d9:ed:56:b7:ca:44:2f:e0:b8:8d:a2:b9:3a:df: a5:c1:a7:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAk52VjQXLfPyZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk YjdkZTdhOWItMDNjOC00ZTdmLWJlY2EtMjdhNzZjMDVkYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXj3wNjFCLK4hR8HjnE5xi6I7e2i3IVWgPAB O7yM4e8xl/y66OASg5/X/9jad4pSO7EpbttkAOIZ8R4z1kKg76+Cn7AcZncb2nS1 MbSHFu+bJpLNJq+CpzFZrG98FPBrEUIK45Vy98h2QhapTFBdmOBGhT3D9d1G07xY WXR3Bzs8Xi3hH3NcGYVJjPXUwv9fVwkL1xO2W1ln3ACE2U1OB1trOinDTlcAvgX/ zNp5K9BVFOuZR+JSNkPkQCbBrSD2xIZh1E5WqlWS40U3ejuy5SYALuCEwjldOQEL EleJfjAiY4loBgsmZ+5ssuF9xZ9/ilffF9W6oSIz5T1LhfPqcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCF1QKLGDgl/8Mekmyz5V8zQAOzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhlMzk1YzUtNDBkYi0z OTQ5LTgyZWYtNDlmMzRjMmE1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcti1ibr3bhXZAS94ExPpc0SFDwfDPrD4DwzuTPRtUm4Ge5s2/hJSn l248hQHdFA14b3+tonj4XWRqF5H1SRTm110Cg2v1zu3vDp9baPlrGe897uWQRvYA sosE7M1lkGltP/3sJh0T2dYaf7G71kYEKPaobLRA7RwQ2mRUqogQ8BoFMdfi+zxp 7gXJe6S0VwS9Eo9LsaPez4pyuwpYAGTGdj7ZJH3iSEQ1v1W7vwnal29oHidLQtuD C3QEJlZNRQGk2NqSjYCDtwVVf7Tdw0EWxco0F/jCUjYd6a19DCLcV0vWGE+YdASJ zanheerz2e1Wt8pEL+C4jaK5Ot+lwacD -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:20 2025 by rpki-client