$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa File: 961a3609-d1f9-3024-912e-654f43f10735.roa (raw, json) Hash identifier: AydrKlMhgepg83oPzAOsSUjekd5cZd/tGNo05Jd3LWo= Subject key identifier: 1D:8D:EA:D8:E4:36:DC:AC:4F:38:5C:49:2E:D8:96:B7:77:AC:F4:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840E7701F65420C7A430D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396603 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:77:01:f6:54:20:c7:a4:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=4c1b162a-59cd-48f6-8349-a9790bca86d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:dd:5d:d6:26:1a:5c:00:b5:bf:0f:48:39: c3:58:1f:2c:c6:b4:8f:45:a7:8d:9b:99:c6:17:01: 39:0c:d7:06:f4:83:45:64:2d:84:9c:13:ef:ce:1b: 17:86:52:b4:8e:e3:13:cf:38:54:26:e1:a4:f1:bb: 88:7c:8a:6c:66:d1:7b:56:f3:fb:e8:ed:73:d2:32: cb:00:a3:e7:68:11:b5:bb:71:8f:4c:4b:ec:03:38: f1:c7:7d:ae:bf:2d:fc:20:62:f3:ad:18:e9:04:36: 05:6f:97:0a:6f:2f:94:98:4f:17:8c:b1:62:72:ec: 46:4d:0d:67:29:cb:2a:7d:e4:91:76:fc:e1:e7:c2: 5d:85:47:99:14:08:2b:c9:48:53:0b:9e:f9:4e:7b: f1:9c:ce:9e:80:1b:27:9e:2d:b2:73:47:61:6b:bb: 28:84:32:e1:7c:e5:e8:98:cb:be:e3:de:0b:05:2c: 93:0c:43:3b:fa:b1:5c:1f:3d:3f:3f:c8:5c:1f:df: b2:66:5c:69:3e:25:30:ea:ae:2c:fc:32:e3:67:87: b7:4e:a6:8e:06:80:60:7a:a1:38:11:d5:90:0f:77: 3e:80:ce:4b:2c:47:02:ad:24:bf:3b:1e:6b:3a:e2: 07:d6:a5:9d:7b:7c:27:72:84:3a:0f:7d:92:c5:a4: ff:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8D:EA:D8:E4:36:DC:AC:4F:38:5C:49:2E:D8:96:B7:77:AC:F4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ae:32:be:26:08:23:71:27:25:d9:b1:63:f7:82:45:aa:02: 54:fc:15:98:d2:d3:de:b7:94:c0:77:6c:b0:eb:ab:6b:b9:e4: 91:6e:c0:98:d8:49:80:43:9d:4a:e0:2b:ec:55:62:7e:5f:e6: 1c:b0:39:7c:50:7a:bf:df:50:89:94:62:6b:c4:40:d1:5b:2c: ee:a8:25:8d:66:34:4f:57:23:97:e2:ee:1a:fe:9e:e4:eb:05: 7a:81:08:ab:f2:ab:9d:e7:ca:d9:d8:66:f4:d7:86:18:e6:e7: f6:d3:cf:2a:8e:ab:13:6e:93:c4:5f:50:43:09:50:b0:b1:9f: 41:b7:2b:4a:cc:15:39:22:dd:ca:30:1b:e2:5c:bd:ea:80:d5: 77:ea:bb:31:60:ca:5d:46:f8:40:47:0a:f1:fb:49:83:ff:9a: 40:85:b5:e1:64:a9:75:ad:f9:f1:e1:52:30:0b:be:4e:c5:73: 34:04:6d:8a:a4:5c:8c:0c:f9:72:71:de:e2:96:4b:9f:c9:64: be:33:be:e3:e3:4f:4a:42:5d:21:08:2d:6f:3c:a6:73:43:63: 07:b9:53:19:7a:25:98:11:30:8b:a0:08:16:6c:97:55:06:8c: 0a:88:f3:d8:91:50:66:e1:3f:94:e0:08:96:07:82:b5:2f:9f: f3:9e:f7:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA53AfZUIMekMNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NGMxYjE2MmEtNTljZC00OGY2LTgzNDktYTk3OTBiY2E4NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUjdXdYmGlwAtb8PSDnDWB8sxrSPRaeNm5nG FwE5DNcG9INFZC2EnBPvzhsXhlK0juMTzzhUJuGk8buIfIpsZtF7VvP76O1z0jLL AKPnaBG1u3GPTEvsAzjxx32uvy38IGLzrRjpBDYFb5cKby+UmE8XjLFicuxGTQ1n KcsqfeSRdvzh58JdhUeZFAgryUhTC575TnvxnM6egBsnni2yc0dha7sohDLhfOXo mMu+494LBSyTDEM7+rFcHz0/P8hcH9+yZlxpPiUw6q4s/DLjZ4e3TqaOBoBgeqE4 EdWQD3c+gM5LLEcCrSS/Ox5rOuIH1qWde3wncoQ6D32SxaT/NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB2N6tjkNtysTzhcSS7Ylrd3rPQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTYxYTM2MDktZDFmOS0z MDI0LTkxMmUtNjU0ZjQzZjEwNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsrjK+JggjcScl2bFj94JFqgJU/BWY0tPet5TAd2yw66trueSRbsCY 2EmAQ51K4CvsVWJ+X+YcsDl8UHq/31CJlGJrxEDRWyzuqCWNZjRPVyOX4u4a/p7k 6wV6gQir8qud58rZ2Gb014YY5uf2088qjqsTbpPEX1BDCVCwsZ9BtytKzBU5It3K MBviXL3qgNV36rsxYMpdRvhARwrx+0mD/5pAhbXhZKl1rfnx4VIwC75OxXM0BG2K pFyMDPlycd7ilkufyWS+M77j409KQl0hCC1vPKZzQ2MHuVMZeiWYETCLoAgWbJdV BowKiPPYkVBm4T+U4AiWB4K1L5/znvfV -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:23 2025 by rpki-client