$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/93f1cca8-1bc5-30ca-bf84-a2a8b2f981ab.roa File: 93f1cca8-1bc5-30ca-bf84-a2a8b2f981ab.roa (raw, json) Hash identifier: erOnu6da7hEUVCnRhP/WLfkf/U1ZgAZ0vMX3t3rHQ+k= Subject key identifier: 9D:41:FC:CD:5B:24:97:4C:28:B3:69:A7:30:23:ED:7A:E6:44:B4:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840AE84715D76DA97B2808 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/93f1cca8-1bc5-30ca-bf84-a2a8b2f981ab.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 397193 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:e8:47:15:d7:6d:a9:7b:28:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=f2b0ee21-f5b5-4329-b403-62f71b601ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:d2:c5:f4:5a:d4:64:de:b9:52:0a:69:55: 4e:3f:50:4c:8d:b9:8e:4e:89:c2:da:5f:27:af:26: 62:e0:af:17:e2:eb:a3:ad:25:db:88:4b:e9:43:03: 30:3b:aa:2c:2a:d8:34:ea:c2:14:0a:c9:f4:af:28: 61:b8:43:ce:95:fa:64:59:b9:5c:b8:8a:ad:d7:15: 7d:f3:5e:fe:95:bf:8d:f3:e6:01:9d:a0:cb:de:df: 3c:0e:3f:ba:50:d6:10:ad:6e:07:60:41:d2:89:28: 37:bb:63:77:c6:fa:86:13:b3:68:80:ad:bd:46:8f: 7e:38:9b:6b:68:c7:6f:cd:64:39:8f:e6:f2:30:eb: 84:be:97:95:09:95:e7:9c:ba:a2:c8:8f:24:86:3a: 59:f2:d9:0d:e9:a8:a8:e7:3e:4e:be:11:94:fe:19: 0a:69:84:b2:2e:11:59:43:ab:ba:b3:c4:a7:31:7d: 7e:79:a3:0b:12:c2:b4:3d:38:c3:f5:b4:2f:a1:8e: 74:04:a0:4f:e8:41:d5:fe:1b:9b:5d:d8:65:6a:76: 1a:7e:f0:8b:18:8c:72:43:a1:cc:bb:73:8b:ba:fb: d2:1c:64:4f:09:82:5c:b7:18:3f:0d:fc:8a:de:af: 81:dc:00:e7:d6:38:3e:d5:b1:9c:d8:83:f7:bf:c0: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:FC:CD:5B:24:97:4C:28:B3:69:A7:30:23:ED:7A:E6:44:B4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/93f1cca8-1bc5-30ca-bf84-a2a8b2f981ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:96:ff:e2:c6:0e:32:23:4e:02:36:07:c8:ea:f9:b3:25:a5: 08:e2:1b:4f:13:9e:3d:31:5e:43:5d:e3:4e:83:04:be:73:99: 57:50:3d:92:d6:7e:b0:e9:28:cb:74:29:be:b0:7f:bc:fe:af: 58:dc:4c:55:f2:65:20:eb:7d:75:1c:a1:2b:d6:bf:bb:aa:f4: 5c:b0:5c:91:3a:b0:74:47:ea:5b:2b:ea:4a:8e:45:7f:66:31: 4b:73:d1:64:48:fb:fa:b2:3e:f0:8e:e6:58:49:85:48:00:58: c7:e4:22:ba:3b:12:24:9d:dd:8d:9c:e3:c9:6d:d1:6e:f5:be: a5:7e:cd:4d:03:fd:cb:15:fe:14:77:7e:d4:38:6c:3d:57:9a: e0:8b:ca:e8:71:d3:66:53:98:75:63:a2:41:46:78:68:83:b5: 6a:3f:ff:b8:57:fe:b0:fd:83:a3:23:b0:2b:f7:18:ea:fc:03: e3:fd:cd:dc:93:fb:d1:79:1c:ea:35:54:76:f1:4d:a8:01:22: 47:68:c0:09:e9:21:aa:41:0d:8a:65:33:f5:17:0a:58:61:83: bf:57:41:01:fc:16:17:6e:cb:f2:3f:87:98:7e:b9:da:04:28: 91:fb:7f:4a:a7:65:52:1a:9e:6d:30:00:27:d1:7a:2c:67:b9: c0:3b:4d:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAroRxXXbal7KAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk ZjJiMGVlMjEtZjViNS00MzI5LWI0MDMtNjJmNzFiNjAxYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXSxfRa1GTeuVIKaVVOP1BMjbmOTonC2l8n ryZi4K8X4uujrSXbiEvpQwMwO6osKtg06sIUCsn0ryhhuEPOlfpkWblcuIqt1xV9 817+lb+N8+YBnaDL3t88Dj+6UNYQrW4HYEHSiSg3u2N3xvqGE7NogK29Ro9+OJtr aMdvzWQ5j+byMOuEvpeVCZXnnLqiyI8khjpZ8tkN6aio5z5OvhGU/hkKaYSyLhFZ Q6u6s8SnMX1+eaMLEsK0PTjD9bQvoY50BKBP6EHV/hubXdhlanYafvCLGIxyQ6HM u3OLuvvSHGRPCYJctxg/DfyK3q+B3ADn1jg+1bGc2IP3v8BTjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ1B/M1bJJdMKLNppzAj7XrmRLREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTNmMWNjYTgtMWJjNS0z MGNhLWJmODQtYTJhOGIyZjk4MWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZlv/ixg4yI04CNgfI6vmzJaUI4htPE549MV5DXeNOgwS+c5lXUD2S 1n6w6SjLdCm+sH+8/q9Y3ExV8mUg6311HKEr1r+7qvRcsFyROrB0R+pbK+pKjkV/ ZjFLc9FkSPv6sj7wjuZYSYVIAFjH5CK6OxIknd2NnOPJbdFu9b6lfs1NA/3LFf4U d37UOGw9V5rgi8rocdNmU5h1Y6JBRnhog7VqP/+4V/6w/YOjI7Ar9xjq/APj/c3c k/vReRzqNVR28U2oASJHaMAJ6SGqQQ2KZTP1FwpYYYO/V0EB/BYXbsvyP4eYfrna BCiR+39Kp2VSGp5tMAAn0XosZ7nAO00w -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:53 2025 by rpki-client