$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa File: d22d31e4-dc77-3911-b319-38170ae00070.roa (raw, json) Hash identifier: jvd1WzziKE17d53R7kLiN7UjlI/JBH/e07yQ4cs+aHs= Subject key identifier: 41:2B:B0:24:47:E9:5F:42:43:F5:C2:8E:04:F5:88:EA:63:F9:BC:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840E92AD827DB007AACF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 397205 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:92:ad:82:7d:b0:07:aa:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=0fccd51b-6eeb-4b06-b645-b303ab92302d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:83:38:e0:16:4a:b4:70:ff:80:37:4b:21: 58:6c:f8:4c:61:42:2c:e0:ce:f7:3e:53:82:4b:45: c7:5a:60:5d:a0:24:d0:32:77:74:db:6f:c9:05:79: f9:53:8f:49:f8:01:51:46:08:94:0e:e7:95:c8:89: 6a:ba:10:85:b5:49:d4:df:4d:0e:9b:8c:e8:f4:32: 53:1d:85:2f:f5:94:30:5d:ae:35:5e:04:91:c6:54: a6:45:f2:8f:b6:3a:86:8a:14:13:20:1e:22:38:2d: c0:5f:d5:c0:ed:14:d6:f3:e6:21:fc:06:66:96:2f: 93:ec:58:45:37:01:00:18:e4:2e:ea:02:d5:65:7b: 0f:a6:46:65:25:10:49:f3:1e:42:75:ae:41:bf:67: 33:bd:11:39:df:b1:ef:2c:f2:28:c4:88:11:a9:62: 9e:3f:f1:52:f2:1d:a1:14:c3:e5:1c:f8:aa:07:67: df:80:e5:cc:88:0f:71:6f:05:c1:78:b3:3f:f7:ac: 13:38:6f:4f:c3:d1:3e:61:c7:dc:eb:92:ed:ca:2b: ff:16:4e:e8:6b:39:6c:5e:00:b8:e6:a6:62:db:ac: 5a:00:51:6f:d0:e6:b9:e7:5f:42:ed:dc:a7:0c:19: ed:38:65:82:15:ea:9b:60:26:91:dc:41:29:0b:eb: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2B:B0:24:47:E9:5F:42:43:F5:C2:8E:04:F5:88:EA:63:F9:BC:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a6:a8:86:1b:06:9e:ed:3f:8d:be:72:d8:45:93:76:98:f1: 05:15:2e:39:1a:90:93:39:7c:f7:9c:2a:ee:ff:0e:f8:49:75: f4:7d:fe:98:f7:a2:15:e9:90:86:f0:ed:cf:6b:43:ca:79:01: 4a:50:74:1c:43:68:f9:26:f8:b8:ea:0d:74:48:80:a7:37:9d: 11:fc:ea:43:20:01:75:77:81:6b:ad:e8:17:ef:11:55:0d:eb: fe:dc:e0:b0:36:69:07:7a:5d:4d:47:12:82:ee:8d:1b:40:f0: d2:36:87:10:e2:ba:18:bc:df:22:fe:55:2f:19:62:f6:fb:8c: 45:f1:8c:64:e4:64:0e:72:ae:ac:2f:e7:30:96:dc:5a:37:54: fa:98:48:36:26:15:4f:99:d4:95:a5:50:e8:7b:5c:f2:7b:ee: 03:de:d7:37:25:13:b0:0d:40:17:51:95:84:2a:a6:1a:71:7e: 28:5f:2c:03:a9:09:4f:58:8e:6f:6c:7d:43:14:d1:e2:c3:7b: 42:01:85:5c:9d:57:f5:c6:a6:ad:4d:cf:79:1d:7b:3c:b5:38: 90:f7:03:50:b1:48:09:26:c1:be:94:86:cc:37:80:f2:ab:8d: e3:9d:b8:56:1f:a9:af:f8:2e:ed:13:f3:a2:44:2e:d6:b2:19: bc:85:29:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA6SrYJ9sAeqzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk MGZjY2Q1MWItNmVlYi00YjA2LWI2NDUtYjMwM2FiOTIzMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT2DOOAWSrRw/4A3SyFYbPhMYUIs4M73PlOC S0XHWmBdoCTQMnd022/JBXn5U49J+AFRRgiUDueVyIlquhCFtUnU300Om4zo9DJT HYUv9ZQwXa41XgSRxlSmRfKPtjqGihQTIB4iOC3AX9XA7RTW8+Yh/AZmli+T7FhF NwEAGOQu6gLVZXsPpkZlJRBJ8x5Cda5Bv2czvRE537HvLPIoxIgRqWKeP/FS8h2h FMPlHPiqB2ffgOXMiA9xbwXBeLM/96wTOG9Pw9E+Ycfc65Ltyiv/Fk7oazlsXgC4 5qZi26xaAFFv0Oa5519C7dynDBntOGWCFeqbYCaR3EEpC+sOcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEErsCRH6V9CQ/XCjgT1iOpj+bwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDIyZDMxZTQtZGM3Ny0z OTExLWIzMTktMzgxNzBhZTAwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBppqiGGwae7T+NvnLYRZN2mPEFFS45GpCTOXz3nCru/w74SXX0ff6Y 96IV6ZCG8O3Pa0PKeQFKUHQcQ2j5Jvi46g10SICnN50R/OpDIAF1d4FrregX7xFV Dev+3OCwNmkHel1NRxKC7o0bQPDSNocQ4roYvN8i/lUvGWL2+4xF8Yxk5GQOcq6s L+cwltxaN1T6mEg2JhVPmdSVpVDoe1zye+4D3tc3JROwDUAXUZWEKqYacX4oXywD qQlPWI5vbH1DFNHiw3tCAYVcnVf1xqatTc95HXs8tTiQ9wNQsUgJJsG+lIbMN4Dy q43jnbhWH6mv+C7tE/OiRC7Wshm8hSlX -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:46 2025 by rpki-client