$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa File: 28e60d50-57d9-350d-bd89-c1257d4d7364.roa (raw, json) Hash identifier: 7EpW6+rTFVBOilZeyk/MnX2RV/HBb5d3OIICTjofYzI= Subject key identifier: DE:8A:C0:BC:91:86:5E:1E:61:4E:D7:C4:2A:8E:C5:21:6B:07:05:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284059EB13420B3D6C6AF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 396582 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:9e:b1:34:20:b3:d6:c6:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=4a2bd603-1017-43e0-9a6e-4c23757d465b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:42:fc:4d:e4:27:66:4a:fb:d0:79:c3:20: 5b:34:f5:28:67:2a:03:a6:9c:e4:1a:fe:47:04:2d: 48:37:36:61:8b:20:31:39:15:6a:44:16:38:b0:61: f4:31:a0:ed:1f:d0:cb:1b:1d:00:11:c6:26:b3:59: 26:eb:8a:4e:81:7f:f6:1d:14:63:92:a8:cc:a4:f3: 2e:b6:d2:59:59:3b:92:f0:8b:9d:3a:82:d1:0e:d7: 9c:52:1d:74:ba:f3:a1:e1:66:7a:75:82:fd:2b:30: 8a:42:1c:b4:be:eb:26:94:01:98:0b:5a:78:59:38: cb:cb:23:cd:4a:f2:75:e1:65:a7:95:97:9a:3f:f1: de:10:5b:d4:ec:68:43:e7:00:b8:16:8e:04:7d:12: 45:24:60:66:e3:16:a9:6c:f7:cb:6e:11:a6:e1:f0: fb:b7:cc:fc:d8:c4:1d:73:d6:fb:f6:96:c0:6a:da: 88:1a:a9:35:22:3e:53:a3:f1:74:b5:0e:be:0b:b6: eb:6e:bb:c7:0e:29:65:6c:5a:5c:63:d4:c5:d1:4e: 37:8f:83:41:e7:4e:15:01:d6:78:ae:b7:a4:8e:b1: c6:d3:f5:0b:c0:ab:1d:dc:2b:20:52:b2:a2:14:e0: 74:d4:85:73:67:b0:3d:db:bd:42:36:65:1f:db:17: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8A:C0:BC:91:86:5E:1E:61:4E:D7:C4:2A:8E:C5:21:6B:07:05:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b0:ce:bc:20:eb:34:f1:d0:16:c3:2e:33:d4:e5:27:e4:8c: 2e:50:56:12:53:9e:8a:9b:a4:e0:5a:19:ae:68:e8:d3:9e:75: 28:6f:98:a6:25:28:9d:37:7a:86:1d:78:26:19:7e:41:e7:d9: 05:d5:32:6d:93:fb:0c:31:28:b7:a9:6a:5f:78:91:4c:16:05: 35:3b:0d:44:56:e6:03:01:ef:36:85:d0:29:a9:dc:6b:b4:cf: b1:58:03:20:8c:63:ea:05:43:29:a8:82:0d:16:8d:d1:3c:5d: c3:3d:a6:8a:72:10:94:9d:48:0f:d4:75:91:3b:2d:2b:90:9f: fa:d8:be:fc:44:ce:fc:41:86:68:6f:a9:2b:c2:19:89:cd:3a: 67:35:43:7e:2b:a0:09:f6:a1:f3:af:6d:f2:7e:53:43:1a:e6: e0:bc:06:29:7d:61:31:f5:24:67:2a:04:3d:99:83:ec:ee:83: 73:05:b6:4b:3d:10:ae:0d:2e:38:0b:77:b1:7a:bd:b1:e9:4b: 70:30:ce:32:e5:d2:9b:36:03:9e:5e:5f:aa:92:6b:75:65:5b: e0:f9:31:ef:93:a6:8a:15:c8:8b:df:c1:45:33:61:38:3a:a1: 04:40:d1:e3:7a:d6:c9:1b:23:df:7d:bb:18:e2:48:ed:67:33: d9:f1:46:4d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAWesTQgs9bGr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk NGEyYmQ2MDMtMTAxNy00M2UwLTlhNmUtNGMyMzc1N2Q0NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LNC/E3kJ2ZK+9B5wyBbNPUoZyoDppzkGv5H BC1INzZhiyAxORVqRBY4sGH0MaDtH9DLGx0AEcYms1km64pOgX/2HRRjkqjMpPMu ttJZWTuS8IudOoLRDtecUh10uvOh4WZ6dYL9KzCKQhy0vusmlAGYC1p4WTjLyyPN SvJ14WWnlZeaP/HeEFvU7GhD5wC4Fo4EfRJFJGBm4xapbPfLbhGm4fD7t8z82MQd c9b79pbAatqIGqk1Ij5To/F0tQ6+C7brbrvHDillbFpcY9TF0U43j4NB504VAdZ4 rrekjrHG0/ULwKsd3CsgUrKiFOB01IVzZ7A9271CNmUf2xfSxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN6KwLyRhl4eYU7XxCqOxSFrBwX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNjBkNTAtNTdkOS0z NTBkLWJkODktYzEyNTdkNGQ3MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIsM68IOs08dAWwy4z1OUn5IwuUFYSU56Km6TgWhmuaOjTnnUob5im JSidN3qGHXgmGX5B59kF1TJtk/sMMSi3qWpfeJFMFgU1Ow1EVuYDAe82hdApqdxr tM+xWAMgjGPqBUMpqIINFo3RPF3DPaaKchCUnUgP1HWROy0rkJ/62L78RM78QYZo b6krwhmJzTpnNUN+K6AJ9qHzr23yflNDGubgvAYpfWEx9SRnKgQ9mYPs7oNzBbZL PRCuDS44C3exer2x6UtwMM4y5dKbNgOeXl+qkmt1ZVvg+THvk6aKFciL38FFM2E4 OqEEQNHjetbJGyPffbsY4kjtZzPZ8UZN -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:09 2025 by rpki-client