$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e115b28a-2498-3cb0-a3b2-c615b95d876f.roa File: e115b28a-2498-3cb0-a3b2-c615b95d876f.roa (raw, json) Hash identifier: eRfr1A27/YYCEtnA1t5i40H9YWDZrELKw4SGXC7yfJE= Subject key identifier: 33:9D:68:CB:08:7F:F5:71:D9:7C:C0:46:77:4C:6F:18:F6:75:2E:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628406E84743CF2E000CCC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e115b28a-2498-3cb0-a3b2-c615b95d876f.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 397209 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:e8:47:43:cf:2e:00:0c:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=b9e9ee1c-e27b-415a-a489-8fcc5d6ef9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:94:d3:26:29:86:0b:da:2d:9b:12:d5:9b:7e: 11:c0:20:49:c9:e9:2e:52:dc:45:bb:88:d3:c3:2d: 19:49:4b:6f:3c:ae:9b:fe:8b:d1:a1:b0:97:cd:6c: aa:cd:4f:10:36:3c:fa:7b:29:44:78:a6:40:84:e0: 53:1f:09:b1:6b:fb:39:17:ff:89:2e:5e:30:dc:dc: 0d:9b:5d:c1:ac:18:65:f9:ac:98:52:7b:bc:45:bb: ad:b2:ee:81:8e:3d:f6:e4:1a:b0:76:52:d9:63:38: f4:f5:68:de:15:f7:15:fc:7b:ec:26:52:65:f3:44: 0c:94:c9:64:33:8d:3c:c0:3c:69:5c:a9:1b:bc:1e: bd:be:cb:58:9b:70:35:60:f0:98:f7:6a:02:d6:42: 7d:4f:cb:d6:ea:a5:71:69:96:96:a7:96:34:1c:64: 69:e5:6b:90:d0:a0:1c:2e:8a:34:57:8c:a5:e4:47: f9:2b:b5:bb:50:26:a7:88:c9:2b:3a:5f:d7:d5:d3: 1d:1d:9d:7f:3f:8d:67:5e:3e:36:8e:43:38:b9:d9: 09:67:67:04:a1:2c:88:b9:1e:eb:53:4f:98:e1:de: 6d:4a:a1:f3:ed:cd:26:80:c1:e4:73:af:b8:d5:74: e1:48:5a:ac:b8:d5:a1:10:db:64:1c:36:33:1c:8d: 91:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9D:68:CB:08:7F:F5:71:D9:7C:C0:46:77:4C:6F:18:F6:75:2E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e115b28a-2498-3cb0-a3b2-c615b95d876f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1b:a6:90:2a:aa:d1:5d:0c:1f:2e:7d:0a:34:11:b5:44:3a: 32:42:70:dd:4e:75:ed:af:9e:cc:5e:13:a9:b3:29:dc:6a:30: 8c:dd:62:c1:40:c6:c4:7e:77:9f:54:57:5e:49:7a:56:73:99: 6c:6a:64:b4:aa:e9:05:55:a2:65:63:5c:9e:2f:68:80:15:64: 9d:25:1b:e9:7d:98:9d:49:50:1b:1d:3c:b4:69:17:18:e7:e6: dc:53:67:61:97:11:c9:0e:3e:89:99:96:7c:75:8a:fd:4b:cc: a6:46:bf:e2:62:71:a4:f4:24:b3:d3:75:46:94:aa:d2:f3:43: 5a:69:05:2d:3b:8a:a1:51:3f:05:b1:76:e3:7f:4a:e9:a3:fe: 28:4c:25:56:1a:9c:a9:19:26:f2:5b:aa:66:d7:ab:80:dd:93: 9d:02:e1:38:be:79:04:cb:91:45:57:d7:84:1d:a3:b1:23:b9: 97:31:3f:e5:19:8e:ad:1f:c0:fb:fe:24:16:c6:c9:76:c2:98: 80:27:ef:b8:68:1e:1b:50:a5:f0:e6:94:5d:71:ad:96:d4:29: 88:76:22:82:7e:6d:f6:75:b9:60:a8:a4:e2:d7:1b:23:76:31: e1:31:94:7c:dd:90:a9:1c:c1:63:0e:18:33:9d:94:4f:cc:d5: 4e:78:c4:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAboR0PPLgAMzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk YjllOWVlMWMtZTI3Yi00MTVhLWE0ODktOGZjYzVkNmVmOWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5TTJimGC9otmxLVm34RwCBJyekuUtxFu4jT wy0ZSUtvPK6b/ovRobCXzWyqzU8QNjz6eylEeKZAhOBTHwmxa/s5F/+JLl4w3NwN m13BrBhl+ayYUnu8Rbutsu6Bjj325BqwdlLZYzj09WjeFfcV/HvsJlJl80QMlMlk M408wDxpXKkbvB69vstYm3A1YPCY92oC1kJ9T8vW6qVxaZaWp5Y0HGRp5WuQ0KAc Loo0V4yl5Ef5K7W7UCaniMkrOl/X1dMdHZ1/P41nXj42jkM4udkJZ2cEoSyIuR7r U0+Y4d5tSqHz7c0mgMHkc6+41XThSFqsuNWhENtkHDYzHI2R1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDOdaMsIf/Vx2XzARndMbxj2dS6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTExNWIyOGEtMjQ5OC0z Y2IwLWEzYjItYzYxNWI5NWQ4NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoG6aQKqrRXQwfLn0KNBG1RDoyQnDdTnXtr57MXhOpsyncajCM3WLB QMbEfnefVFdeSXpWc5lsamS0qukFVaJlY1yeL2iAFWSdJRvpfZidSVAbHTy0aRcY 5+bcU2dhlxHJDj6JmZZ8dYr9S8ymRr/iYnGk9CSz03VGlKrS80NaaQUtO4qhUT8F sXbjf0rpo/4oTCVWGpypGSbyW6pm16uA3ZOdAuE4vnkEy5FFV9eEHaOxI7mXMT/l GY6tH8D7/iQWxsl2wpiAJ++4aB4bUKXw5pRdca2W1CmIdiKCfm32dblgqKTi1xsj djHhMZR83ZCpHMFjDhgznZRPzNVOeMT+ -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:45 2025 by rpki-client