$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e32221d5-d7f4-3c3b-86ca-b45b493ecb37.roa File: e32221d5-d7f4-3c3b-86ca-b45b493ecb37.roa (raw, json) Hash identifier: 0mfuVN5YwUu40aC4ItJerspSIPiWsX8lnSn31kPHtq0= Subject key identifier: E0:D7:21:24:27:F9:69:E0:D9:3E:01:79:87:20:04:0F:C9:B8:97:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840D865BC3815CD7DF7580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e32221d5-d7f4-3c3b-86ca-b45b493ecb37.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396543 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:86:5b:c3:81:5c:d7:df:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=6ff7337e-0a8c-49f5-94b9-12cf010b3104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:ad:62:f6:08:b9:81:a2:bf:27:44:c0:0f: 6a:7a:5c:1d:2d:cf:75:28:2b:38:ab:96:be:b7:25: fe:3b:95:8a:a2:b0:4f:52:2c:9f:bc:c5:1c:45:e7: 49:58:80:db:39:cb:4f:2a:fc:ab:4c:24:9a:ea:bb: 35:7e:9d:72:5c:ce:27:e5:7b:6a:2f:8c:fe:e2:58: c8:c9:c5:1c:65:69:54:5c:26:37:9c:5b:94:6e:9d: b1:46:af:1e:43:98:c9:7d:20:12:66:60:85:ea:a7: 66:c0:85:30:77:86:04:51:8f:d8:2c:67:4b:8c:65: 31:a4:7a:a7:a4:5a:5e:61:2c:f4:2a:4c:8b:86:39: fa:ce:0f:21:03:56:bb:1e:0d:16:0f:0e:05:e9:33: aa:9b:2f:0e:2d:52:14:04:02:d6:e0:37:be:c7:eb: b6:f6:ca:3e:a7:2b:8c:2c:10:0b:66:97:a8:27:0e: b6:a1:6c:94:3f:3a:d3:60:ea:9a:94:a9:d1:21:b9: a3:29:8f:26:f1:24:32:40:2b:82:47:f7:ab:d2:03: 4c:c3:a9:9d:4b:aa:5e:eb:45:ae:8e:36:70:80:50: 20:9b:17:87:b0:a0:eb:75:c1:47:89:48:be:55:26: e2:5c:df:35:df:6f:03:93:3b:a2:4d:56:93:b2:31: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D7:21:24:27:F9:69:E0:D9:3E:01:79:87:20:04:0F:C9:B8:97:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e32221d5-d7f4-3c3b-86ca-b45b493ecb37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cc:ab:8c:39:f9:ee:21:d7:da:02:62:14:81:5a:8f:81:29: 20:51:f4:16:b8:1e:e9:7d:12:d3:21:32:8d:1b:d4:14:4b:0e: 54:01:f6:cd:1d:b1:05:81:04:aa:c4:14:70:59:4e:03:6a:58: 52:32:6f:e3:4f:7d:f3:95:4d:6a:42:96:a8:05:5d:95:9a:45: 64:1d:bb:4a:0a:a3:a7:e9:af:68:9b:ba:5d:dd:5e:da:f5:c1: 51:83:55:70:35:52:fb:49:9a:ff:83:54:96:70:ac:a0:ce:14: 0a:c7:76:72:8a:62:84:ab:00:61:cc:b2:93:56:34:8e:18:2e: ae:ee:91:22:89:42:fa:d5:7b:38:e5:2c:ec:10:a5:8f:26:42: 45:6a:b2:ee:96:62:40:ec:42:b6:6c:d3:4e:69:0a:a0:20:a5: a5:e4:eb:a7:5d:60:bf:fb:89:b0:12:f1:50:f3:9d:26:96:12: 5f:e3:1e:4a:61:bb:23:9a:da:09:a7:8c:9d:66:16:89:8d:68: 3d:df:0c:a5:28:1a:dd:f0:1d:42:c8:14:03:cf:d7:90:75:f3: 73:1c:4d:be:2b:ce:69:5c:e1:ae:95:0a:ab:ca:87:2d:cd:86: 68:f5:5a:6f:27:47:b8:6a:11:35:47:d4:15:36:6f:67:66:97: 36:98:94:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA2GW8OBXNffdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NmZmNzMzN2UtMGE4Yy00OWY1LTk0YjktMTJjZjAxMGIzMTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2StYvYIuYGivydEwA9qelwdLc91KCs4q5a+ tyX+O5WKorBPUiyfvMUcRedJWIDbOctPKvyrTCSa6rs1fp1yXM4n5XtqL4z+4ljI ycUcZWlUXCY3nFuUbp2xRq8eQ5jJfSASZmCF6qdmwIUwd4YEUY/YLGdLjGUxpHqn pFpeYSz0KkyLhjn6zg8hA1a7Hg0WDw4F6TOqmy8OLVIUBALW4De+x+u29so+pyuM LBALZpeoJw62oWyUPzrTYOqalKnRIbmjKY8m8SQyQCuCR/er0gNMw6mdS6pe60Wu jjZwgFAgmxeHsKDrdcFHiUi+VSbiXN81328DkzuiTVaTsjFBlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFODXISQn+Wng2T4BeYcgBA/JuJepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTMyMjIxZDUtZDdmNC0z YzNiLTg2Y2EtYjQ1YjQ5M2VjYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBezKuMOfnuIdfaAmIUgVqPgSkgUfQWuB7pfRLTITKNG9QUSw5UAfbN HbEFgQSqxBRwWU4DalhSMm/jT33zlU1qQpaoBV2VmkVkHbtKCqOn6a9om7pd3V7a 9cFRg1VwNVL7SZr/g1SWcKygzhQKx3ZyimKEqwBhzLKTVjSOGC6u7pEiiUL61Xs4 5SzsEKWPJkJFarLulmJA7EK2bNNOaQqgIKWl5OunXWC/+4mwEvFQ850mlhJf4x5K YbsjmtoJp4ydZhaJjWg93wylKBrd8B1CyBQDz9eQdfNzHE2+K85pXOGulQqryoct zYZo9VpvJ0e4ahE1R9QVNm9nZpc2mJSi -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:11 2025 by rpki-client