$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa File: 856ae38c-ba86-38fe-b194-3f17bf61b09a.roa (raw, json) Hash identifier: TNa1zBa2icTXz3vdFDo3axfZ27WQd3pc42LSgcFy6R0= Subject key identifier: C2:32:ED:91:70:83:28:AC:99:76:14:39:07:76:BF:41:BF:C8:E5:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840ED78ACA5FC30E0C4300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 397203 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:d7:8a:ca:5f:c3:0e:0c:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=4cdc0581-6ebe-4d01-8d19-5c521ed7a4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fe:a0:b1:da:8b:86:59:ff:be:13:ff:e8:83: 71:d3:31:69:04:15:b2:4b:de:ec:06:bf:fd:9b:d8: 53:d5:f6:6a:7d:64:14:36:88:32:60:71:31:64:00: 62:51:18:6c:99:e0:fb:6a:34:7c:58:d5:27:64:87: aa:a1:6a:fc:57:94:42:59:1f:00:57:f7:bd:88:90: 48:27:c9:ff:73:f0:76:29:28:8c:da:6b:4d:64:33: eb:00:7b:48:13:8e:79:72:3d:b2:97:1f:19:58:1e: 16:8f:e0:0b:ba:1e:71:5d:40:3e:2f:59:76:e9:ab: 65:ac:d0:4e:4f:c1:bd:ad:10:46:8c:da:d4:54:64: c9:03:dd:86:5a:98:c7:05:71:03:fe:b5:36:84:87: 69:3c:b1:4d:01:e6:dd:bc:c7:38:6c:b3:6f:bc:68: f8:a2:1c:7a:d5:b7:e2:6e:94:5f:79:b3:0c:e1:07: e8:1b:74:1d:13:e9:bc:5e:b3:15:f4:dc:12:e2:07: 15:c2:2d:c5:e3:9e:2b:68:c5:bc:a4:63:b1:08:1b: 05:59:bb:32:61:a5:9a:ae:55:10:43:7e:5a:8c:15: f5:bd:df:cf:47:b2:c2:69:1a:19:bb:8e:46:96:50: 99:58:d3:f1:4c:39:db:55:d8:b4:f9:90:22:bc:8f: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:32:ED:91:70:83:28:AC:99:76:14:39:07:76:BF:41:BF:C8:E5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:af:88:9a:04:c8:ad:b4:ed:4f:34:6e:56:05:9a:db:6a:99: 53:ca:a0:71:8a:b6:4e:48:4c:0a:63:3b:da:74:14:1d:df:6e: 3d:17:7a:de:79:4c:c0:c1:a6:1a:5f:7e:23:e7:4b:ec:34:22: f4:84:7f:e0:e2:9e:68:63:00:e4:0c:e7:41:04:61:3b:20:ec: 4f:90:a3:64:62:6e:cb:07:4a:ba:29:e1:c2:d3:bd:7e:a9:60: 5d:50:54:37:69:ac:63:0a:99:7b:fa:ed:39:48:21:6d:6b:b9: 4c:78:48:93:3b:3c:6e:0e:cc:f4:d5:2f:cb:1d:ee:1d:54:00: 08:e3:56:53:65:0e:ab:44:e6:e3:de:79:65:c5:f9:f7:52:0b: 85:31:6b:0f:d0:f1:9d:c8:7b:dd:cb:de:db:b5:58:29:28:35: 23:64:62:99:80:55:3c:bf:9c:bc:18:8b:3c:3b:0e:f2:ec:e1: 34:f9:3b:ce:56:33:ef:06:0b:2a:84:cc:c4:dd:08:ba:c4:9d: b1:7c:fe:35:28:a6:c8:fe:63:ed:df:c5:c4:68:89:8e:57:37: 7e:77:79:3b:bf:db:a4:b6:d0:df:75:c5:a7:4c:de:34:84:9d: 8a:76:be:13:6d:ef:67:7c:8f:b6:a3:ab:df:dc:d3:08:9c:f6: 59:03:5a:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA7Xispfww4MQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk NGNkYzA1ODEtNmViZS00ZDAxLThkMTktNWM1MjFlZDdhNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif6gsdqLhln/vhP/6INx0zFpBBWyS97sBr/9 m9hT1fZqfWQUNogyYHExZABiURhsmeD7ajR8WNUnZIeqoWr8V5RCWR8AV/e9iJBI J8n/c/B2KSiM2mtNZDPrAHtIE455cj2ylx8ZWB4Wj+ALuh5xXUA+L1l26atlrNBO T8G9rRBGjNrUVGTJA92GWpjHBXED/rU2hIdpPLFNAebdvMc4bLNvvGj4ohx61bfi bpRfebMM4QfoG3QdE+m8XrMV9NwS4gcVwi3F454raMW8pGOxCBsFWbsyYaWarlUQ Q35ajBX1vd/PR7LCaRoZu45GllCZWNPxTDnbVdi0+ZAivI+63wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMIy7ZFwgyismXYUOQd2v0G/yOVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2YWUzOGMtYmE4Ni0z OGZlLWIxOTQtM2YxN2JmNjFiMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJr4iaBMittO1PNG5WBZrbaplTyqBxirZOSEwKYzvadBQd3249F3re eUzAwaYaX34j50vsNCL0hH/g4p5oYwDkDOdBBGE7IOxPkKNkYm7LB0q6KeHC071+ qWBdUFQ3aaxjCpl7+u05SCFta7lMeEiTOzxuDsz01S/LHe4dVAAI41ZTZQ6rRObj 3nllxfn3UguFMWsP0PGdyHvdy97btVgpKDUjZGKZgFU8v5y8GIs8Ow7y7OE0+TvO VjPvBgsqhMzE3Qi6xJ2xfP41KKbI/mPt38XEaImOVzd+d3k7v9ukttDfdcWnTN40 hJ2Kdr4Tbe9nfI+2o6vf3NMInPZZA1pQ -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:44 2025 by rpki-client