$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73987131-24e0-3736-a7eb-6bf23258c8a3.roa File: 73987131-24e0-3736-a7eb-6bf23258c8a3.roa (raw, json) Hash identifier: gy88/Khg5kLBG9OCKCcrL+KGtiFijopJbwJZB7dVs70= Subject key identifier: 37:F3:39:98:B6:95:89:9E:52:AE:2D:EE:CF:BF:5E:10:85:C1:37:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628405F67C7DAECCA3C18140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73987131-24e0-3736-a7eb-6bf23258c8a3.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 36617 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:f6:7c:7d:ae:cc:a3:c1:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=dac5a9c4-8d68-4c65-b771-2bee7b6cbf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:e0:be:47:54:24:de:20:e9:35:72:4a:10: 0d:28:74:0b:79:f5:b7:a5:b2:0c:34:3f:65:f9:13: c3:33:03:6b:da:b7:32:02:77:56:61:6d:9b:80:79: 3c:85:75:b5:61:8a:64:be:ef:95:f6:9d:ff:39:b2: 16:7c:b7:a8:98:43:2f:83:68:d6:ed:a6:55:54:bc: bb:12:14:da:9d:88:0d:85:d0:89:ed:5d:8b:86:77: 56:03:fc:36:16:57:ab:07:ad:41:31:91:9f:0e:e6: 6c:a3:45:43:57:23:bc:bc:cb:0d:7d:0f:bd:88:8d: a8:71:b0:93:d6:28:8c:78:96:b3:d7:be:8f:11:cc: 5b:da:7d:47:bb:ff:70:5c:89:a8:1c:a1:3b:e2:3e: 48:59:9f:ee:ab:8d:40:29:05:85:c1:69:fe:10:4c: fb:cf:5c:20:bc:89:8e:98:0b:62:42:66:e3:1e:e3: 57:82:94:4e:b8:61:74:e9:70:78:89:20:fb:7d:39: 0a:1f:a5:c4:4b:d2:92:ad:f8:a5:74:f1:a2:9a:6e: 72:50:57:c5:3a:cc:1f:da:d2:71:fc:63:0a:7b:23: 57:21:81:df:6a:8e:2b:6f:c7:50:d8:f5:68:7f:bf: 90:00:df:8a:28:57:8e:31:f0:54:71:ec:23:24:21: 96:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:39:98:B6:95:89:9E:52:AE:2D:EE:CF:BF:5E:10:85:C1:37:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/73987131-24e0-3736-a7eb-6bf23258c8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3b:58:1d:97:f6:c0:f6:bc:bf:b9:dd:38:68:44:b0:91:b3: 07:d3:88:29:22:78:d1:d2:c7:4f:c3:b9:5d:23:b5:59:0f:1c: e4:29:f8:30:cc:00:6f:7a:4b:85:17:23:f3:04:4a:b4:1c:07: c8:fe:1e:45:c6:05:f9:73:ca:13:8f:c0:0c:e3:d2:e7:86:07: ea:94:2f:35:94:59:b3:3c:c9:c4:96:70:d4:47:a2:c1:d6:af: 78:ed:ce:1c:69:ab:cc:93:94:a1:9f:72:a2:29:ff:08:a4:72: c1:75:ec:2a:92:30:2d:7a:6c:9f:2e:56:a2:56:fd:6f:b3:51: a7:af:50:55:6a:57:aa:83:6c:e4:20:92:6e:bc:c6:a3:08:9b: 12:ef:69:fc:c5:a3:a4:5c:12:1e:04:c4:eb:14:57:e1:e7:72: ef:2e:93:4b:21:c7:98:f8:9b:21:b0:f7:77:7b:90:f9:3c:f5: d1:25:2f:52:36:18:9c:8b:57:1e:e9:12:c8:8f:da:80:5a:58: 70:b7:e5:fb:12:c9:94:9e:7d:89:ea:f2:45:bd:04:e1:32:f3: 2d:ec:9e:f6:f0:45:c5:46:24:df:cb:82:ad:cc:6a:9e:29:30: b4:fa:0e:ed:82:2a:db:26:ca:01:46:20:8b:aa:7e:9f:d1:a3: b9:b2:5b:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAX2fH2uzKPBgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk ZGFjNWE5YzQtOGQ2OC00YzY1LWI3NzEtMmJlZTdiNmNiZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rngvkdUJN4g6TVyShANKHQLefW3pbIMND9l +RPDMwNr2rcyAndWYW2bgHk8hXW1YYpkvu+V9p3/ObIWfLeomEMvg2jW7aZVVLy7 EhTanYgNhdCJ7V2LhndWA/w2FlerB61BMZGfDuZso0VDVyO8vMsNfQ+9iI2ocbCT 1iiMeJaz176PEcxb2n1Hu/9wXImoHKE74j5IWZ/uq41AKQWFwWn+EEz7z1wgvImO mAtiQmbjHuNXgpROuGF06XB4iSD7fTkKH6XES9KSrfildPGimm5yUFfFOswf2tJx /GMKeyNXIYHfao4rb8dQ2PVof7+QAN+KKFeOMfBUcewjJCGWiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDfzOZi2lYmeUq4t7s+/XhCFwTdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM5ODcxMzEtMjRlMC0z NzM2LWE3ZWItNmJmMjMyNThjOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIO1gdl/bA9ry/ud04aESwkbMH04gpInjR0sdPw7ldI7VZDxzkKfgw zABvekuFFyPzBEq0HAfI/h5FxgX5c8oTj8AM49LnhgfqlC81lFmzPMnElnDUR6LB 1q947c4caavMk5Shn3KiKf8IpHLBdewqkjAtemyfLlaiVv1vs1Gnr1BValeqg2zk IJJuvMajCJsS72n8xaOkXBIeBMTrFFfh53LvLpNLIceY+JshsPd3e5D5PPXRJS9S Nhici1ce6RLIj9qAWlhwt+X7EsmUnn2J6vJFvQThMvMt7J728EXFRiTfy4KtzGqe KTC0+g7tgirbJsoBRiCLqn6f0aO5slua -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:49 2025 by rpki-client