$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa File: 9d19bf96-c01d-3102-8066-d9ae826a6e76.roa (raw, json) Hash identifier: Sbpj1Kn1hWwRYZSceJxUpMZwAFpIMwe7W5PPhDfvU0A= Subject key identifier: FA:53:BD:CE:0C:A8:AF:7E:E6:08:EA:75:67:E9:3C:AC:58:22:D5:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62841194FB236A120FF53CA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 396600 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:94:fb:23:6a:12:0f:f5:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=864a8e63-9c20-47a1-90ee-324058bc2189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:82:f3:69:7c:4f:71:8f:37:d7:41:fe:21:27: 69:01:1c:f3:cb:4a:54:d2:74:20:d7:36:2a:a6:67: b5:b2:03:a3:81:6c:7f:a5:5f:8d:23:40:a3:05:4a: a9:96:9b:26:2b:1d:42:b2:37:38:0b:61:d6:2d:f1: c2:96:c6:58:b5:99:b4:d7:67:57:8c:8d:29:75:a8: 2c:82:45:48:58:ed:b8:9b:f4:64:39:bb:95:8a:d3: 21:2e:96:dd:af:d9:1b:83:9b:fb:68:fe:ac:ee:da: 3b:90:d6:30:fc:c6:5f:b5:45:af:51:b1:e6:33:eb: 89:4e:c7:66:d3:bc:e6:af:a2:f3:d0:41:aa:09:2a: 9c:62:ec:c5:43:c1:6b:98:8e:d9:3b:1b:ec:18:db: 3e:0f:c8:9b:a1:7d:ef:55:f4:17:d1:7c:f6:fa:d6: 68:ff:73:0f:b6:03:28:c9:b0:3b:5c:03:6f:58:d1: e9:7d:30:0f:b9:aa:6e:f0:3d:88:0f:8b:bb:8d:b6: 7e:0a:f1:a6:bd:db:1b:27:3e:e2:d0:bd:53:10:70: 01:89:7d:17:62:11:52:0e:fb:16:b3:eb:33:07:33: 16:9f:97:0a:de:0e:3a:62:90:9d:76:88:a4:f9:51: 55:2a:a6:ac:3e:df:a4:8d:b3:fb:bf:bf:3a:8d:a3: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:53:BD:CE:0C:A8:AF:7E:E6:08:EA:75:67:E9:3C:AC:58:22:D5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ab:e1:51:62:63:ec:ed:bd:97:1d:79:95:0b:d0:ed:25:4d: 73:85:d1:42:2a:75:a5:6a:a2:f3:fc:0e:5e:c1:97:0c:c5:95: 39:87:1d:20:46:ae:c1:b5:bf:b4:21:12:9b:2b:3c:82:16:88: 5a:a3:6b:73:09:a7:89:dd:a4:24:5f:8c:a7:b4:f6:cd:d5:a2: e8:8c:a6:0f:c4:61:48:0b:32:ce:2e:85:e7:48:86:38:e5:2b: 0f:6e:15:bd:ca:c7:11:be:67:3a:ba:d5:d1:7f:71:eb:58:f2: 6b:77:4c:d0:e0:d8:ba:a2:5c:24:49:47:33:68:1a:a3:b1:f6: 62:77:27:c7:bf:03:e5:a0:d1:b2:45:82:af:6d:91:bf:ef:8b: fd:9a:f6:a0:44:58:b2:13:47:00:0e:b1:5f:78:17:96:f3:3d: 28:aa:f4:64:2e:84:04:cc:ac:2b:34:4c:af:a7:e3:2c:6e:4d: f4:5a:a6:60:6e:5a:d1:2c:1e:13:6f:2a:2b:49:83:66:e4:11: a3:a7:de:67:9b:d7:69:fb:43:99:b5:55:06:09:70:56:95:6e: 33:a9:d5:f9:a5:5c:d3:10:40:93:e0:1b:15:8d:00:ab:fd:2f: ab:7c:e2:e8:98:2e:81:e9:6b:66:0d:b1:bf:80:1b:c8:c4:cf: 61:01:36:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBGU+yNqEg/1PKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk ODY0YThlNjMtOWMyMC00N2ExLTkwZWUtMzI0MDU4YmMyMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmILzaXxPcY8310H+ISdpARzzy0pU0nQg1zYq pme1sgOjgWx/pV+NI0CjBUqplpsmKx1Csjc4C2HWLfHClsZYtZm012dXjI0pdags gkVIWO24m/RkObuVitMhLpbdr9kbg5v7aP6s7to7kNYw/MZftUWvUbHmM+uJTsdm 07zmr6Lz0EGqCSqcYuzFQ8FrmI7ZOxvsGNs+D8iboX3vVfQX0Xz2+tZo/3MPtgMo ybA7XANvWNHpfTAPuapu8D2ID4u7jbZ+CvGmvdsbJz7i0L1TEHABiX0XYhFSDvsW s+szBzMWn5cK3g46YpCddoik+VFVKqasPt+kjbP7v786jaPwhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPpTvc4MqK9+5gjqdWfpPKxYItUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQxOWJmOTYtYzAxZC0z MTAyLTgwNjYtZDlhZTgyNmE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArq+FRYmPs7b2XHXmVC9DtJU1zhdFCKnWlaqLz/A5ewZcMxZU5hx0g Rq7Btb+0IRKbKzyCFohao2tzCaeJ3aQkX4yntPbN1aLojKYPxGFICzLOLoXnSIY4 5SsPbhW9yscRvmc6utXRf3HrWPJrd0zQ4Ni6olwkSUczaBqjsfZidyfHvwPloNGy RYKvbZG/74v9mvagRFiyE0cADrFfeBeW8z0oqvRkLoQEzKwrNEyvp+Msbk30WqZg blrRLB4TbyorSYNm5BGjp95nm9dp+0OZtVUGCXBWlW4zqdX5pVzTEECT4BsVjQCr /S+rfOLomC6B6WtmDbG/gBvIxM9hATYJ -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:01 2025 by rpki-client