$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa File: 998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa (raw, json) Hash identifier: eqi/DNS0olFEwHPEiFWKwpBS2hnUHOYObkeaoBBZIb4= Subject key identifier: B8:B1:2B:E3:BB:8A:91:20:CD:C4:AB:4F:D1:BF:19:65:7E:61:E5:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840602F0FE754769339730 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 40647 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:02:f0:fe:75:47:69:33:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=613fa785-3c1c-4858-a6a9-be48703f904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:87:e3:ad:e6:ae:30:1e:d2:9d:36:27:8f:d1: 19:a8:21:f9:a8:93:b0:07:ee:92:ca:ef:7b:ed:d0: 69:07:21:2f:74:6b:b1:43:20:58:58:90:ed:6c:7a: 48:ae:e8:79:74:f0:13:a3:a8:5f:7f:94:59:5e:76: bb:04:5b:99:23:de:1b:d3:a5:47:2d:d1:47:3d:bd: 74:7a:9a:88:6f:df:be:7b:35:97:be:8c:68:22:9a: 76:3c:1a:63:8e:7c:1c:2d:e8:4b:03:bd:69:31:6b: 1d:ec:63:52:2a:6b:45:6a:2e:37:7f:d3:bf:fc:85: 7d:a4:aa:29:fc:a5:aa:ab:b0:00:ac:23:b5:54:d0: 76:db:6b:57:45:c3:a6:14:3d:50:b6:80:00:39:bf: c2:9d:dd:1d:5c:1f:53:2e:e8:0b:c2:ff:73:c2:95: 31:60:2e:f3:1a:bd:7e:99:e5:b9:51:8f:f1:ca:d5: 10:0c:07:5d:7b:c4:d7:b1:48:0d:04:34:a2:fb:0c: c5:45:85:3f:c1:60:8d:bf:c2:06:2b:e0:e9:05:cc: c2:3c:7f:93:df:bf:aa:80:98:4e:cc:a1:78:5a:56: 21:37:3e:3f:f3:38:ee:77:54:77:33:58:89:03:a8: fd:2b:85:4f:ca:fd:c3:ad:2e:06:7b:06:95:89:74: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:2B:E3:BB:8A:91:20:CD:C4:AB:4F:D1:BF:19:65:7E:61:E5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6a:87:56:73:34:85:3c:ef:81:c5:18:bb:42:c9:0a:89:60: 4d:ce:40:95:55:4b:f0:8a:e1:78:b6:84:5e:4d:54:e1:b4:91: 5d:05:36:55:b9:28:d6:8c:9e:cb:6e:53:ca:ec:b3:28:8e:a6: 06:0e:26:d5:22:66:07:a1:66:85:04:25:a7:d9:d9:0e:01:58: 4b:39:d8:78:43:77:6d:fe:67:b3:c2:4d:b0:2c:86:b4:72:87: c6:cb:ed:86:57:b6:fe:43:bb:8f:12:9a:5f:79:07:f5:52:9b: fe:50:b7:2f:c4:1d:39:91:26:77:68:97:e4:53:f0:15:22:9e: 56:fa:b4:42:6f:c9:89:62:a1:1e:9a:e9:4d:dc:0c:d2:71:9c: 10:9e:cf:d5:bc:d3:83:fe:2f:e4:34:11:49:32:79:5f:2e:2f: 28:63:55:81:7a:b7:d5:96:fc:36:ed:cc:b6:87:10:6b:ea:44: 75:47:02:cf:0b:dc:e6:be:b2:53:ce:2e:8e:7d:34:29:f7:5b: 8e:59:82:5f:db:d4:c4:5a:33:87:e7:33:4d:2f:d7:49:fa:22: 75:3a:4a:b5:7a:fa:28:ca:59:58:dd:1b:c9:01:b6:fb:b1:4d: 11:a2:19:34:c7:4c:24:cf:7a:cf:1c:6d:4c:1b:08:97:aa:42: 18:12:66:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAYC8P51R2kzlzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk NjEzZmE3ODUtM2MxYy00ODU4LWE2YTktYmU0ODcwM2Y5MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4fjreauMB7SnTYnj9EZqCH5qJOwB+6Syu97 7dBpByEvdGuxQyBYWJDtbHpIruh5dPATo6hff5RZXna7BFuZI94b06VHLdFHPb10 epqIb9++ezWXvoxoIpp2PBpjjnwcLehLA71pMWsd7GNSKmtFai43f9O//IV9pKop /KWqq7AArCO1VNB222tXRcOmFD1QtoAAOb/Cnd0dXB9TLugLwv9zwpUxYC7zGr1+ meW5UY/xytUQDAdde8TXsUgNBDSi+wzFRYU/wWCNv8IGK+DpBczCPH+T37+qgJhO zKF4WlYhNz4/8zjud1R3M1iJA6j9K4VPyv3DrS4GewaViXQlGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLixK+O7ipEgzcSrT9G/GWV+YeVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk4ZGU4YWEtYTkzZC0z YWQ2LWEwNzUtMGE0N2NhYTRiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGaodWczSFPO+BxRi7QskKiWBNzkCVVUvwiuF4toReTVThtJFdBTZV uSjWjJ7LblPK7LMojqYGDibVImYHoWaFBCWn2dkOAVhLOdh4Q3dt/mezwk2wLIa0 cofGy+2GV7b+Q7uPEppfeQf1Upv+ULcvxB05kSZ3aJfkU/AVIp5W+rRCb8mJYqEe mulN3AzScZwQns/VvNOD/i/kNBFJMnlfLi8oY1WBerfVlvw27cy2hxBr6kR1RwLP C9zmvrJTzi6OfTQp91uOWYJf29TEWjOH5zNNL9dJ+iJ1Okq1evooyllY3RvJAbb7 sU0Rohk0x0wkz3rPHG1MGwiXqkIYEmZ8 -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:48 2025 by rpki-client