$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa File: a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa (raw, json) Hash identifier: o5DE2SKVJc6sMwgVC9sGSPTcQJWi/seHXit8CqGnuJQ= Subject key identifier: 28:E8:43:FD:5A:6F:11:22:52:E7:BB:DC:64:52:49:6A:BD:F6:C9:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840D3736F121F295DF1080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396580 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:37:36:f1:21:f2:95:df:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=266210b6-3fea-4a7c-be59-89691e0d764c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:e6:a0:c9:8c:0b:8a:e9:56:dc:ab:a3:14: a7:84:01:8b:95:25:51:93:5a:6e:e3:b6:67:8a:ab: 34:fe:a0:e1:0c:78:2b:53:1f:a7:9b:77:ad:c9:61: 1d:77:15:69:2b:4c:e3:ab:64:f7:8c:68:16:4d:2c: a9:15:be:b9:ce:56:77:d2:82:6c:a1:6f:89:31:86: b5:e8:03:1b:c1:52:29:72:24:48:11:42:1e:45:80: 78:fb:04:9a:e5:6d:53:b7:18:78:6e:16:70:7d:db: 7c:99:fe:a1:a3:d8:11:69:e2:a0:bb:22:7e:1b:2d: 18:2c:a2:37:b8:fa:78:d8:bb:6f:b1:ca:1e:02:a0: 8a:e2:49:49:bb:71:9a:6a:e2:55:43:22:da:44:d6: f8:7b:06:33:1d:6d:16:77:a0:e0:47:cd:e4:ea:a1: 75:31:b3:5a:1b:bf:4e:e0:b2:4e:75:b8:71:e0:34: 3c:80:a3:ef:10:7c:69:03:5a:84:b8:58:c2:76:b3: 92:0f:58:c4:ea:b8:fe:0d:a9:08:8e:13:6b:5b:79: 52:27:45:19:b7:af:71:4b:8a:10:4d:62:fc:29:1c: 11:cf:1b:4a:d5:ea:cd:34:81:2a:9a:19:69:81:03: 91:a6:d9:bb:a3:9a:99:31:9a:af:71:d3:a7:ae:b8: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:43:FD:5A:6F:11:22:52:E7:BB:DC:64:52:49:6A:BD:F6:C9:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:99:71:5d:da:2a:52:b2:8d:a0:6d:f1:3f:a0:a2:e5:38:77: aa:e7:d3:ed:c6:86:26:29:a2:10:a4:c5:0d:34:5a:aa:ef:8f: 6b:c4:f9:f4:01:2a:c3:a0:34:4b:ec:ed:60:d4:e7:6e:63:d3: 21:34:2d:1e:28:74:10:60:b8:2a:6e:0c:91:0a:42:9f:f4:26: b7:af:a0:5a:34:0a:71:da:b5:b3:d0:39:c7:e9:f1:e6:ee:28: fc:83:fe:24:f7:72:52:05:3a:63:1d:58:e1:a4:6b:e2:85:5a: 40:f2:4f:96:56:9e:6d:af:6f:29:87:a5:e8:52:bb:09:d1:ff: aa:9d:a2:8f:98:ed:c1:2d:71:47:5f:e1:ad:67:8b:ca:9a:32: 08:74:75:e3:91:2d:0c:89:d7:ec:f4:54:eb:cf:74:77:d1:50: e3:f3:9a:80:f7:85:17:1d:9d:7b:c7:ca:a5:f9:e8:a1:8e:e5: 9f:26:d7:f8:d4:e7:a4:61:2a:d2:40:e1:e8:2c:5a:1e:3f:ca: 0a:11:d0:f1:55:87:b6:e0:1d:b9:46:77:1f:21:ff:df:88:2d: 20:8a:32:b7:d8:1a:a3:30:65:95:9f:ba:b0:28:6f:84:b0:d2: aa:07:3f:15:20:12:71:b2:52:40:5a:4d:38:60:58:02:58:31: f3:04:fc:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA03NvEh8pXfEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MjY2MjEwYjYtM2ZlYS00YTdjLWJlNTktODk2OTFlMGQ3NjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYXmoMmMC4rpVtyroxSnhAGLlSVRk1pu47Zn iqs0/qDhDHgrUx+nm3etyWEddxVpK0zjq2T3jGgWTSypFb65zlZ30oJsoW+JMYa1 6AMbwVIpciRIEUIeRYB4+wSa5W1Ttxh4bhZwfdt8mf6ho9gRaeKguyJ+Gy0YLKI3 uPp42LtvscoeAqCK4klJu3GaauJVQyLaRNb4ewYzHW0Wd6DgR83k6qF1MbNaG79O 4LJOdbhx4DQ8gKPvEHxpA1qEuFjCdrOSD1jE6rj+DakIjhNrW3lSJ0UZt69xS4oQ TWL8KRwRzxtK1erNNIEqmhlpgQORptm7o5qZMZqvcdOnrriRrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCjoQ/1abxEiUue73GRSSWq99sk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTY4YzQ1ZjctNDk2Mi0z ZDJiLWFlYzctNGIyODFkYmQ1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFmXFd2ipSso2gbfE/oKLlOHeq59PtxoYmKaIQpMUNNFqq749rxPn0 ASrDoDRL7O1g1OduY9MhNC0eKHQQYLgqbgyRCkKf9Ca3r6BaNApx2rWz0DnH6fHm 7ij8g/4k93JSBTpjHVjhpGvihVpA8k+WVp5tr28ph6XoUrsJ0f+qnaKPmO3BLXFH X+GtZ4vKmjIIdHXjkS0Midfs9FTrz3R30VDj85qA94UXHZ17x8ql+eihjuWfJtf4 1OekYSrSQOHoLFoeP8oKEdDxVYe24B25RncfIf/fiC0gijK32BqjMGWVn7qwKG+E sNKqBz8VIBJxslJAWk04YFgCWDHzBPx7 -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:51 2025 by rpki-client