$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa File: 30c6aa14-6cf3-3108-8a08-15b180361154.roa (raw, json) Hash identifier: MsUOCNvueYtyQRL4+pjeHey0kUwsL3WkBtXfnwj6/mg= Subject key identifier: 72:EE:5E:D6:3C:A9:43:F2:CA:57:1A:67:D3:76:79:33:CB:0E:7E:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840EA0CB1B8FE4677B9480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 397210 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:a0:cb:1b:8f:e4:67:7b:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=97b00b06-3eed-4eb6-93eb-8b21bfc1d209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:12:82:f0:14:df:77:1e:69:48:b1:6f:b3: 31:46:73:cd:66:56:68:3f:f3:17:79:3f:40:8b:d6: f9:99:03:42:37:69:b4:11:d5:bc:c8:d4:4f:cb:6d: 78:bc:73:b0:9e:05:fb:20:4c:88:b8:f7:9e:1a:d6: c1:58:df:1f:cc:a5:2b:6a:3f:85:5d:e9:7d:3e:f6: b3:35:31:1b:0e:c0:f4:81:04:3c:2a:19:f9:8b:37: e6:a7:b9:cd:e0:88:f5:e9:3a:3e:33:bb:ea:75:50: dd:06:1b:52:6f:7b:f0:4f:f7:ed:6e:71:1d:1a:80: c8:b5:36:50:84:fc:b9:25:53:51:8e:4f:23:9b:f2: 69:33:ba:2c:d4:12:7f:e1:c7:d8:17:d2:01:47:27: 54:7c:87:71:15:5d:47:49:f9:8d:c2:0f:3d:8e:27: 09:c5:1f:de:b6:a6:a3:bf:85:77:88:85:22:0d:7a: 60:d9:0c:09:0e:dc:f2:16:3c:00:31:64:97:13:42: c4:85:97:25:5e:78:42:14:bb:c8:0b:88:89:7f:4a: 36:34:83:fb:e8:d8:04:e0:69:c8:99:32:1f:e2:15: bf:00:ce:40:66:84:4a:03:06:34:fa:19:e8:4e:4e: f5:3e:0b:b3:04:cc:48:5f:db:f0:34:df:c8:20:f6: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:5E:D6:3C:A9:43:F2:CA:57:1A:67:D3:76:79:33:CB:0E:7E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d0:24:96:7e:3f:20:85:c9:1f:ce:cc:d3:38:52:ca:c2:22: 37:7d:2f:0d:98:3e:9b:3a:35:d1:0b:c5:a8:57:41:bc:1d:29: d4:36:c6:91:b2:9b:cc:c7:8c:0b:8f:3f:6f:c2:3f:38:9f:02: 4f:79:44:57:e0:eb:cb:d6:20:1c:1d:17:6d:b8:c2:b2:2d:5c: 14:60:e7:1e:1c:29:0f:fc:3a:7b:3d:b5:19:74:af:90:64:90: 81:03:6f:ff:a4:b9:62:6c:31:45:5c:c2:08:37:c9:77:2a:a4: 3f:30:c5:63:9e:f0:27:ac:e2:e0:e0:ed:0f:59:b6:ec:d4:bd: fb:37:5c:62:2a:47:82:3e:ec:1b:82:f1:21:68:cd:9d:6f:b5: 63:52:6c:b8:07:41:b4:95:f4:e0:d2:06:a5:20:41:09:01:9e: 64:a5:ec:d0:69:57:c3:2d:e9:ed:70:fd:f6:20:1b:53:8b:17: 00:50:59:0a:03:e2:9f:60:9d:8a:6c:f1:09:ab:50:00:37:42: a9:8d:1c:f9:f4:5f:b1:ec:76:15:4b:9c:02:c9:f4:42:82:5f: b9:bb:db:9c:03:63:05:be:72:c9:eb:0f:26:33:86:91:7e:04: 91:f4:87:3d:02:9d:30:4a:f6:1e:9a:42:9f:9e:88:66:57:e9: 05:5f:a2:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA6gyxuP5Gd7lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk OTdiMDBiMDYtM2VlZC00ZWI2LTkzZWItOGIyMWJmYzFkMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0roSgvAU33ceaUixb7MxRnPNZlZoP/MXeT9A i9b5mQNCN2m0EdW8yNRPy214vHOwngX7IEyIuPeeGtbBWN8fzKUraj+FXel9Pvaz NTEbDsD0gQQ8Khn5izfmp7nN4Ij16To+M7vqdVDdBhtSb3vwT/ftbnEdGoDItTZQ hPy5JVNRjk8jm/JpM7os1BJ/4cfYF9IBRydUfIdxFV1HSfmNwg89jicJxR/etqaj v4V3iIUiDXpg2QwJDtzyFjwAMWSXE0LEhZclXnhCFLvIC4iJf0o2NIP76NgE4GnI mTIf4hW/AM5AZoRKAwY0+hnoTk71PguzBMxIX9vwNN/IIPaSBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHLuXtY8qUPyylcaZ9N2eTPLDn4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjNmFhMTQtNmNmMy0z MTA4LThhMDgtMTViMTgwMzYxMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCB0CSWfj8ghckfzszTOFLKwiI3fS8NmD6bOjXRC8WoV0G8HSnUNsaR spvMx4wLjz9vwj84nwJPeURX4OvL1iAcHRdtuMKyLVwUYOceHCkP/Dp7PbUZdK+Q ZJCBA2//pLlibDFFXMIIN8l3KqQ/MMVjnvAnrOLg4O0PWbbs1L37N1xiKkeCPuwb gvEhaM2db7VjUmy4B0G0lfTg0galIEEJAZ5kpezQaVfDLentcP32IBtTixcAUFkK A+KfYJ2KbPEJq1AAN0KpjRz59F+x7HYVS5wCyfRCgl+5u9ucA2MFvnLJ6w8mM4aR fgSR9Ic9Ap0wSvYemkKfnohmV+kFX6I8 -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:09 2025 by rpki-client