$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa File: fc9d0554-14cc-3f05-8a60-2fb32042582f.roa (raw, json) Hash identifier: cJnpxPT7E0ye9/noP1bfuXkKI9msS0q5nYFa2ARWGBk= Subject key identifier: 8C:16:60:1E:26:0D:8C:BC:51:D6:F1:50:A8:47:78:81:1F:E6:BC:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284069D7976A00563473300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 20172 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:9d:79:76:a0:05:63:47:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=5f657fc1-4ee4-4253-9b6b-cc15c03cf02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:5c:5a:d7:55:0e:27:3e:2a:e6:19:1f:bf: 3e:04:45:58:1c:ad:01:ef:8b:eb:21:37:05:f0:92: ac:81:14:4a:9b:dd:94:2d:88:5f:a4:e6:b3:93:b2: 71:9c:dc:1a:16:b7:bf:9c:09:b3:1c:0f:7e:73:1e: dc:51:97:06:39:fd:02:a6:0e:95:44:f8:26:74:46: e9:69:89:f7:9a:04:ef:de:9a:e7:79:fd:c9:ac:8b: d4:a8:8f:3a:da:2d:77:2a:37:d0:82:fd:1b:bc:89: 12:de:53:05:ae:5f:06:c4:a5:e2:7a:6c:ee:2f:b4: 74:d5:b1:44:3f:e5:34:2d:34:66:4f:15:6a:f4:c5: 16:77:81:c9:ff:1c:3a:14:e0:a6:a8:35:48:c5:7f: a2:36:fa:7a:37:67:fa:33:eb:37:48:52:4c:24:49: c0:9a:ab:d8:ca:42:d6:44:35:c5:0e:7e:32:dd:89: 00:20:45:83:f8:e1:c6:c1:8e:d0:2a:35:0d:52:9a: fd:66:34:95:0d:c1:36:f0:11:1e:b0:dc:d8:f8:1f: 56:2d:be:a0:71:45:84:3a:b9:de:dd:e5:d7:7b:f5: 6e:54:df:8c:be:1c:bd:7e:b3:a4:6d:77:aa:55:64: 05:25:d9:21:f9:6f:60:58:a6:7f:b2:c7:cd:ad:a5: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:16:60:1E:26:0D:8C:BC:51:D6:F1:50:A8:47:78:81:1F:E6:BC:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2c:b8:92:4a:ff:7a:3c:90:91:26:f4:74:6a:c8:15:9d:a5: 5f:33:cb:31:cd:17:bd:21:cf:73:01:54:2f:21:49:9e:ae:d1: cb:a5:39:17:0b:d1:d2:63:08:5f:65:1b:b6:45:24:93:5e:9c: 27:6f:26:73:46:dd:53:eb:ff:26:2d:4b:42:3f:2f:bb:33:b4: 6d:bc:dc:56:cb:02:6f:75:f3:1a:59:82:d4:73:19:da:ef:4c: 0b:4f:ac:37:a2:c4:5b:25:ca:4a:67:5b:05:30:66:6e:1d:fb: be:1a:59:ea:db:03:b2:11:7e:61:0c:e1:36:c7:15:fa:60:8d: c2:8c:93:cf:0f:d1:5b:eb:95:60:0b:2f:7b:f0:a0:65:fa:8e: 03:17:f6:c0:22:cb:96:e6:fa:25:a0:2f:3c:f4:a5:fe:bc:26: 74:14:8a:49:4a:38:75:bc:4e:36:f6:8d:e8:24:2b:1a:c4:50: e0:b5:87:0a:34:2d:10:a8:7b:3a:fd:05:93:76:6a:58:62:68: f2:bc:bb:ce:54:b8:02:64:0b:f3:8a:26:10:2e:5b:14:c4:9b: 10:b6:22:9e:d0:dd:db:a0:52:83:d3:88:ed:7f:ce:4b:b3:07: b7:4e:93:cc:41:c9:f3:e7:7b:a1:b2:79:79:3c:9b:51:f0:b6: ef:8c:07:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAadeXagBWNHMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk NWY2NTdmYzEtNGVlNC00MjUzLTliNmItY2MxNWMwM2NmMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU9cWtdVDic+KuYZH78+BEVYHK0B74vrITcF 8JKsgRRKm92ULYhfpOazk7JxnNwaFre/nAmzHA9+cx7cUZcGOf0Cpg6VRPgmdEbp aYn3mgTv3prnef3JrIvUqI862i13KjfQgv0bvIkS3lMFrl8GxKXiemzuL7R01bFE P+U0LTRmTxVq9MUWd4HJ/xw6FOCmqDVIxX+iNvp6N2f6M+s3SFJMJEnAmqvYykLW RDXFDn4y3YkAIEWD+OHGwY7QKjUNUpr9ZjSVDcE28BEesNzY+B9WLb6gcUWEOrne 3eXXe/VuVN+Mvhy9frOkbXeqVWQFJdkh+W9gWKZ/ssfNraV2LQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIwWYB4mDYy8UdbxUKhHeIEf5rwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM5ZDA1NTQtMTRjYy0z ZjA1LThhNjAtMmZiMzIwNDI1ODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCILLiSSv96PJCRJvR0asgVnaVfM8sxzRe9Ic9zAVQvIUmertHLpTkX C9HSYwhfZRu2RSSTXpwnbyZzRt1T6/8mLUtCPy+7M7RtvNxWywJvdfMaWYLUcxna 70wLT6w3osRbJcpKZ1sFMGZuHfu+Glnq2wOyEX5hDOE2xxX6YI3CjJPPD9Fb65Vg Cy978KBl+o4DF/bAIsuW5voloC889KX+vCZ0FIpJSjh1vE429o3oJCsaxFDgtYcK NC0QqHs6/QWTdmpYYmjyvLvOVLgCZAvziiYQLlsUxJsQtiKe0N3boFKD04jtf85L swe3TpPMQcnz53uhsnl5PJtR8LbvjAdY -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:42 2025 by rpki-client