$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8055c06b-d321-3643-864c-a4880fd1ac69.roa File: 8055c06b-d321-3643-864c-a4880fd1ac69.roa (raw, json) Hash identifier: zAKr0dsNR3b0nF1zUDm3XfGYj8Cq+fr6Qe8BlcWScoA= Subject key identifier: BF:70:91:E3:AE:50:B1:A8:89:ED:CE:02:C2:F8:A6:55:62:EA:E6:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A8CA9F611D7D7AEADA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8055c06b-d321-3643-864c-a4880fd1ac69.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396540 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:8c:a9:f6:11:d7:d7:ae:ad:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=35cf77a2-ab9d-4cc3-80b5-bb349a6dca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:30:da:09:86:b1:d9:b7:02:a1:b0:a4:d9: 5c:12:e8:d4:95:9c:44:d4:e8:c4:ae:0b:30:9a:57: 35:d4:f2:03:54:05:6e:dd:1d:cc:b3:c5:5f:2f:d8: 48:d0:fd:13:c7:32:c1:de:7a:f2:ad:f5:57:a2:84: ff:28:ca:84:b5:8e:4d:d2:68:cb:70:22:dc:16:11: 4d:87:e5:ff:a6:56:fb:ac:b7:56:b9:bf:3c:5b:e7: c2:e1:c1:7b:c5:02:e3:51:45:75:fc:57:63:53:b0: 0f:ec:88:d7:33:40:bf:b1:c5:70:8e:7b:f0:da:7b: ee:c3:93:56:85:01:05:d9:32:6a:f8:0d:46:21:f6: 2c:70:24:b8:bc:f4:f2:ca:81:63:9d:e3:32:41:77: c2:63:ea:3d:ee:61:6a:46:30:79:2c:35:df:f6:08: d9:2b:5d:f7:58:dd:6f:13:78:97:26:1d:69:18:ff: 31:02:4c:b0:d9:ea:58:de:17:0f:78:76:7d:3b:1e: ad:2a:b7:1e:24:8d:d7:42:dc:ff:cf:ec:a8:44:bd: 8d:10:80:70:09:dc:2c:cf:f8:05:73:4e:cd:dc:1b: cd:e4:07:ac:16:a0:5c:b7:ad:52:39:c7:da:39:e0: 0e:dc:f2:c3:04:68:47:9e:db:31:52:dd:9b:71:c8: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:70:91:E3:AE:50:B1:A8:89:ED:CE:02:C2:F8:A6:55:62:EA:E6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8055c06b-d321-3643-864c-a4880fd1ac69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5b:e0:00:39:03:46:73:25:fd:db:d3:ff:70:8b:cd:68:70: 69:f1:7c:bf:07:53:d2:d2:11:1f:b6:db:da:66:38:ab:9e:6d: 25:30:39:9b:4d:ef:68:9d:1b:d7:69:da:11:dd:04:6f:52:b0: 9e:d0:a5:c5:05:6b:b7:59:cf:eb:ad:8f:0f:af:fe:6d:99:d7: 13:4c:8a:9d:ff:16:26:45:12:44:2b:45:42:91:1a:2a:3c:6d: 26:b6:79:d1:0a:15:4a:0e:03:7b:a3:83:a3:c2:8f:70:ad:ff: 24:39:8d:81:94:cf:34:da:0b:5d:b3:53:6b:e0:ab:a1:38:bd: 7d:4f:cd:87:6b:ac:28:46:6f:7a:1f:01:52:72:fa:65:62:0e: 97:eb:85:58:95:72:44:f9:19:dd:86:27:db:6b:98:60:96:64: fa:2a:37:70:39:3d:f2:cb:b3:62:99:4b:99:91:4f:fc:e2:4a: 82:03:bc:28:e8:c7:1f:11:5b:df:e7:69:ac:e6:96:ba:d5:c6: 10:66:0d:2f:79:99:4a:ec:20:5f:c0:d5:c3:13:e7:a4:98:c5: 57:fa:36:37:65:d6:fc:e6:3f:8c:a6:b9:c7:18:16:8a:ab:3c: d7:2f:92:ea:b9:b6:55:43:8a:c2:ff:fd:f0:a9:96:d7:ad:42: 51:be:45:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAqMqfYR19euraAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk MzVjZjc3YTItYWI5ZC00Y2MzLTgwYjUtYmIzNDlhNmRjYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklUw2gmGsdm3AqGwpNlcEujUlZxE1OjErgsw mlc11PIDVAVu3R3Ms8VfL9hI0P0TxzLB3nryrfVXooT/KMqEtY5N0mjLcCLcFhFN h+X/plb7rLdWub88W+fC4cF7xQLjUUV1/FdjU7AP7IjXM0C/scVwjnvw2nvuw5NW hQEF2TJq+A1GIfYscCS4vPTyyoFjneMyQXfCY+o97mFqRjB5LDXf9gjZK133WN1v E3iXJh1pGP8xAkyw2epY3hcPeHZ9Ox6tKrceJI3XQtz/z+yoRL2NEIBwCdwsz/gF c07N3BvN5AesFqBct61SOcfaOeAO3PLDBGhHntsxUt2bccg+kQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL9wkeOuULGoie3OAsL4plVi6ubBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODA1NWMwNmItZDMyMS0z NjQzLTg2NGMtYTQ4ODBmZDFhYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQW+AAOQNGcyX929P/cIvNaHBp8Xy/B1PS0hEfttvaZjirnm0lMDmb Te9onRvXadoR3QRvUrCe0KXFBWu3Wc/rrY8Pr/5tmdcTTIqd/xYmRRJEK0VCkRoq PG0mtnnRChVKDgN7o4Ojwo9wrf8kOY2BlM802gtds1Nr4KuhOL19T82Ha6woRm96 HwFScvplYg6X64VYlXJE+Rndhifba5hglmT6KjdwOT3yy7NimUuZkU/84kqCA7wo 6McfEVvf52ms5pa61cYQZg0veZlK7CBfwNXDE+ekmMVX+jY3Zdb85j+MprnHGBaK qzzXL5LqubZVQ4rC//3wqZbXrUJRvkVo -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:03 2025 by rpki-client