$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa File: 45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa (raw, json) Hash identifier: 8jTuAJc3etoiZj65N4VN0RmxcDMEmF48FIYHGmGlfsw= Subject key identifier: 86:F1:0C:E7:4E:FD:4D:41:82:B8:EE:6F:E7:C4:FD:AF:E7:F5:88:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840DFE23F437DF6A7A3F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 40717 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:fe:23:f4:37:df:6a:7a:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=799944f9-6e9d-433b-a3a2-5fe7ea71974e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:0b:fc:f9:2f:29:a0:aa:37:8b:52:b6:1c: d9:74:fd:eb:53:c3:23:17:73:2c:32:fa:aa:f7:67: 64:c5:96:41:1b:9e:52:98:a8:9c:0e:38:f0:c3:7c: f3:5e:7c:c3:33:5f:fd:30:17:75:b0:8f:c1:6c:62: f5:b4:8d:d7:1b:df:71:75:a9:5a:fb:e1:a9:f6:28: 2e:6a:05:23:9c:e4:c8:dd:5a:30:d6:97:64:a9:77: 2c:2d:f0:29:6d:1a:db:17:d7:d5:3a:91:59:0a:32: 79:c3:ea:5b:dd:d8:44:b8:a9:d3:e5:23:0a:cc:f6: 4c:c2:84:c6:36:13:2f:e0:84:9a:df:8f:cb:13:d1: d1:a4:dc:f1:ae:b8:b5:b8:13:59:7e:5c:e4:e8:5a: c0:70:c4:9d:41:c4:18:1d:03:55:5b:3f:4a:30:fb: 90:c5:f3:26:79:03:c0:42:21:8e:65:89:38:7b:2e: 76:86:18:5b:91:4f:88:38:7b:4c:74:b1:80:69:1c: 18:1f:fa:f4:dc:27:b2:91:a9:1b:10:ab:b3:db:79: 0b:e0:76:52:26:a2:7a:d8:28:4f:01:f3:34:0d:c3: 63:62:14:5f:f3:83:37:b8:e9:08:80:f3:3f:cd:79: 1b:2a:87:3e:79:66:a0:d9:a1:15:58:fb:5e:1d:aa: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F1:0C:E7:4E:FD:4D:41:82:B8:EE:6F:E7:C4:FD:AF:E7:F5:88:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45e399fe-fdf9-309b-a50b-7c4ecdfc8261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:18:10:ae:9c:8c:75:6c:0f:c8:3d:14:f0:6f:fa:6f:b2:94: 8d:06:e8:21:48:65:f1:54:3a:36:07:8e:11:46:73:0f:16:2d: 57:90:13:1e:ca:21:e0:ce:65:d6:fb:ac:4f:b3:4c:c0:10:79: 16:d4:6a:99:21:1c:54:81:ae:e2:a6:ce:97:2f:31:8c:03:78: ef:8b:dc:b8:d9:4c:3c:e6:b5:dd:c3:56:52:14:8f:73:9d:fa: 6b:b4:5c:ba:ab:c4:55:c3:5b:4a:66:6f:30:c6:5d:db:ce:09: 4e:d7:6d:e7:07:fb:c6:27:11:80:3e:42:d2:34:79:d6:a7:98: 30:62:4b:20:b6:96:e4:10:76:03:7a:0a:4e:8e:d1:58:b1:6c: 9d:47:22:ec:73:4f:8c:f1:89:96:ed:67:60:32:26:70:75:41: 83:cf:f9:ad:c1:40:3b:1d:9f:73:a1:aa:6e:06:92:73:36:aa: 95:a2:4d:20:fc:f0:5e:12:77:b5:d9:c0:37:4e:dd:d4:e8:2a: 0a:dc:f1:b9:c7:b5:61:f6:3f:fd:b7:b3:c8:01:51:d5:df:ab: e5:e6:f2:7f:b5:5f:15:76:8a:dc:5c:86:5c:e4:ff:0e:5c:48: d3:9a:b4:c5:44:9b:36:95:6a:67:d3:0c:88:14:93:40:b2:75: dd:e1:3f:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA3+I/Q332p6P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk Nzk5OTQ0ZjktNmU5ZC00MzNiLWEzYTItNWZlN2VhNzE5NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1UL/PkvKaCqN4tSthzZdP3rU8MjF3MsMvqq 92dkxZZBG55SmKicDjjww3zzXnzDM1/9MBd1sI/BbGL1tI3XG99xdala++Gp9igu agUjnOTI3Vow1pdkqXcsLfApbRrbF9fVOpFZCjJ5w+pb3dhEuKnT5SMKzPZMwoTG NhMv4ISa34/LE9HRpNzxrri1uBNZflzk6FrAcMSdQcQYHQNVWz9KMPuQxfMmeQPA QiGOZYk4ey52hhhbkU+IOHtMdLGAaRwYH/r03CeykakbEKuz23kL4HZSJqJ62ChP AfM0DcNjYhRf84M3uOkIgPM/zXkbKoc+eWag2aEVWPteHao5CwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIbxDOdO/U1Bgrjub+fE/a/n9YhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDVlMzk5ZmUtZmRmOS0z MDliLWE1MGItN2M0ZWNkZmM4MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgGBCunIx1bA/IPRTwb/pvspSNBughSGXxVDo2B44RRnMPFi1XkBMe yiHgzmXW+6xPs0zAEHkW1GqZIRxUga7ips6XLzGMA3jvi9y42Uw85rXdw1ZSFI9z nfprtFy6q8RVw1tKZm8wxl3bzglO123nB/vGJxGAPkLSNHnWp5gwYksgtpbkEHYD egpOjtFYsWydRyLsc0+M8YmW7WdgMiZwdUGDz/mtwUA7HZ9zoapuBpJzNqqVok0g /PBeEne12cA3Tt3U6CoK3PG5x7Vh9j/9t7PIAVHV36vl5vJ/tV8VdorcXIZc5P8O XEjTmrTFRJs2lWpn0wyIFJNAsnXd4T80 -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:38 2025 by rpki-client