$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a06e6039-6a82-3894-a9df-beb16ab09c8a.roa File: a06e6039-6a82-3894-a9df-beb16ab09c8a.roa (raw, json) Hash identifier: vOcT5SlQyVIldaWFU3c4KNcsQ4axHPbBJ0Rr70blQw0= Subject key identifier: 7E:B2:DE:BB:A8:0F:D7:DA:87:EE:86:A5:08:AB:7F:DE:1D:1C:E6:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840BBE6AAC9BF43E9B1880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a06e6039-6a82-3894-a9df-beb16ab09c8a.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396570 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:be:6a:ac:9b:f4:3e:9b:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=b649c121-4b51-48e1-927b-353698f7a94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:91:96:67:1e:ac:7a:87:64:89:4e:14:b1: 6e:fb:1c:11:a3:d5:d5:7a:dd:a9:b4:29:ad:52:5a: dc:dd:a9:ef:71:db:17:9a:eb:9f:8b:b9:99:57:63: f6:9f:bb:8f:0e:bf:b2:99:27:0f:93:bc:15:9b:43: 80:40:d8:3a:99:05:7e:94:c2:5d:e9:24:33:5b:85: 39:c8:a8:5c:6c:78:d3:ed:ca:7d:3a:05:6c:b7:7e: 3e:47:81:5e:0f:51:59:22:bc:2a:af:54:1b:0c:26: 3f:6b:4b:f1:d7:ea:76:18:65:49:98:ff:3f:ff:9b: 11:ae:7b:93:96:32:bc:36:de:68:da:72:21:4a:d4: 18:c9:af:99:b4:9f:84:73:0c:32:cf:7b:1b:6f:fb: 79:07:2d:f1:21:60:96:64:1c:fb:67:c1:2c:8c:70: 98:bd:28:3b:8e:9f:00:8f:ec:99:e7:77:9a:b4:0d: 10:9b:13:af:42:fd:93:23:8e:91:a0:ca:f2:6f:57: 56:dc:e6:11:2c:51:22:ed:a6:00:96:ef:dd:e1:9d: 96:ce:ad:eb:b4:b5:85:3f:7e:d7:e3:99:58:90:da: 40:38:4a:80:27:a2:11:9a:4d:7e:e6:ca:0d:00:76: 1a:99:ff:20:93:a8:c2:e4:09:77:90:e7:05:c7:5c: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B2:DE:BB:A8:0F:D7:DA:87:EE:86:A5:08:AB:7F:DE:1D:1C:E6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a06e6039-6a82-3894-a9df-beb16ab09c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ed:e6:1c:18:e4:bd:5b:0b:21:85:a2:6c:fc:df:3d:c1:65: 2f:e8:23:89:3b:dc:31:45:1c:c3:bf:29:b5:2e:ac:ed:2e:28: 81:27:56:54:71:53:1e:cb:de:e6:df:a0:fc:aa:a6:5c:9f:ae: 10:1a:0b:7c:59:fe:48:89:fc:cd:75:05:bb:20:46:a5:91:61: 41:d4:b1:79:7d:5c:46:c2:26:49:cc:6b:f0:3d:16:89:4b:1b: 50:41:85:89:a2:94:75:b6:47:39:a2:af:68:de:35:10:dd:78: ac:f2:cb:21:8c:43:33:6a:09:17:4b:0f:89:ca:88:83:3f:cc: f1:65:07:e6:0b:6a:e2:a4:6d:07:f3:2e:97:4b:ed:bd:49:33: 44:62:95:3d:4c:ad:82:7c:a8:8b:7a:52:e9:fe:4b:22:e0:cc: 6d:ae:db:5b:f3:ae:9a:85:d4:c7:2f:a2:25:ae:cc:bc:20:de: bb:54:33:57:cf:32:0e:0d:0f:e2:65:a8:51:5c:f4:1a:19:f9: fd:10:80:20:8d:a3:3e:a2:3e:01:34:a3:9c:56:cd:29:7f:78: c6:14:16:d9:e9:64:ca:0d:df:67:9b:9f:d4:8b:46:dc:f1:50: 13:a1:ae:fd:bd:34:7e:19:5f:d3:20:b4:44:e4:b0:da:06:56: 8f:c3:7a:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAu+aqyb9D6bGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk YjY0OWMxMjEtNGI1MS00OGUxLTkyN2ItMzUzNjk4ZjdhOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoniRlmcerHqHZIlOFLFu+xwRo9XVet2ptCmt Ulrc3anvcdsXmuufi7mZV2P2n7uPDr+ymScPk7wVm0OAQNg6mQV+lMJd6SQzW4U5 yKhcbHjT7cp9OgVst34+R4FeD1FZIrwqr1QbDCY/a0vx1+p2GGVJmP8//5sRrnuT ljK8Nt5o2nIhStQYya+ZtJ+Ecwwyz3sbb/t5By3xIWCWZBz7Z8EsjHCYvSg7jp8A j+yZ53eatA0QmxOvQv2TI46RoMryb1dW3OYRLFEi7aYAlu/d4Z2Wzq3rtLWFP37X 45lYkNpAOEqAJ6IRmk1+5soNAHYamf8gk6jC5Al3kOcFx1zb7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH6y3ruoD9fah+6GpQirf94dHOZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA2ZTYwMzktNmE4Mi0z ODk0LWE5ZGYtYmViMTZhYjA5YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCB7eYcGOS9WwshhaJs/N89wWUv6COJO9wxRRzDvym1LqztLiiBJ1ZU cVMey97m36D8qqZcn64QGgt8Wf5IifzNdQW7IEalkWFB1LF5fVxGwiZJzGvwPRaJ SxtQQYWJopR1tkc5oq9o3jUQ3Xis8sshjEMzagkXSw+JyoiDP8zxZQfmC2ripG0H 8y6XS+29STNEYpU9TK2CfKiLelLp/ksi4Mxtrttb866ahdTHL6Ilrsy8IN67VDNX zzIODQ/iZahRXPQaGfn9EIAgjaM+oj4BNKOcVs0pf3jGFBbZ6WTKDd9nm5/Ui0bc 8VAToa79vTR+GV/TILRE5LDaBlaPw3pw -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:23 2025 by rpki-client