$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e788c0a7-1bce-393e-8950-768dd1e68125.roa File: e788c0a7-1bce-393e-8950-768dd1e68125.roa (raw, json) Hash identifier: pGeiCOQL+4nHiDJFD/bN7UabLmZVAnvbQgVaDWqXM4k= Subject key identifier: DC:1A:4C:12:C7:60:3E:73:81:9E:52:22:DC:B4:88:8B:13:98:11:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284066856E8226020B87CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e788c0a7-1bce-393e-8950-768dd1e68125.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 21313 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:68:56:e8:22:60:20:b8:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=33522964-631c-4874-8d21-ad06f8a74b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:71:cb:d6:28:dc:91:b7:cb:31:20:a3:52: c0:aa:cf:28:c0:1b:0a:54:6f:07:bb:fe:39:ae:9b: 44:f4:49:ed:19:0c:e0:d2:27:7d:d3:2b:05:9b:27: 42:9f:e9:d9:b6:32:16:f8:96:a8:ed:21:42:75:64: 21:e2:cd:8f:1c:4d:b7:87:2f:51:1b:8a:d7:59:e7: 5a:a6:dd:ab:be:bb:9b:d5:b8:aa:f9:01:27:c7:a0: ba:f5:90:90:d0:fa:c8:81:52:26:41:da:e4:36:83: 28:f5:30:a7:bd:9a:4b:fc:56:82:02:68:36:16:63: da:cc:6c:ef:09:81:87:c2:1c:1c:9e:3e:ab:2d:08: 74:74:5b:ba:e3:2c:ef:e4:40:ca:f8:a9:b9:73:bf: 65:58:fa:91:7d:3c:ef:df:bf:82:c2:a7:32:0f:5c: a3:ac:af:ac:84:1b:4f:0c:35:9d:07:71:ee:f1:5f: 91:65:72:94:50:8f:be:0a:aa:d1:84:02:03:ee:81: 49:7e:b3:16:e4:c0:68:c4:3c:cb:06:6d:d0:2b:89: 8c:cb:c8:5d:64:3d:e7:7d:da:79:e2:67:ea:3c:20: 31:0b:b7:30:aa:37:92:c1:ba:3c:ad:96:99:5e:c8: b8:5d:c4:b8:c4:db:b1:e0:f1:1d:38:ca:2d:3a:c5: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:4C:12:C7:60:3E:73:81:9E:52:22:DC:B4:88:8B:13:98:11:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e788c0a7-1bce-393e-8950-768dd1e68125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8d:94:f1:bb:a6:84:ce:1a:89:12:f0:f5:57:e2:ec:68:5c: 3d:79:52:00:c1:59:95:14:b4:ae:78:d7:93:12:7c:e4:c5:65: 37:0a:46:b6:d9:f8:d2:27:60:71:dc:b5:b6:a0:2b:6d:0e:86: b1:01:24:20:62:7b:81:7d:0a:67:f2:cb:c9:95:c6:b7:7c:bf: a1:60:5b:9f:7b:5f:1c:6f:60:d1:b9:d0:fb:75:62:00:4c:68: db:e4:08:fa:fa:79:2d:59:e9:aa:1f:8a:d9:7f:df:56:52:d5: 0a:b5:18:41:b0:d9:71:aa:fa:3c:b0:b6:4e:c9:31:6e:72:b6: 40:9d:93:cf:88:a4:21:d5:c1:86:31:2d:2e:b6:75:23:ab:38: 4c:41:fa:fb:98:02:ab:72:06:12:23:ab:62:be:1e:25:06:10: c2:9e:dc:95:47:9a:8c:b4:a2:65:6d:18:39:d9:98:cb:67:cf: b9:3f:c8:2f:09:44:fc:97:2d:5d:c3:24:3a:6e:37:dd:85:23: 40:c6:cb:88:f3:11:9b:14:e3:75:11:8d:c6:bc:2b:88:d5:70: ed:d6:43:f9:b4:af:d9:d4:ca:fd:6b:47:bd:35:5c:e5:39:82: 19:c5:36:0b:53:f7:fd:0c:a2:f2:5e:da:0f:c4:d9:bf:29:5c: fd:bc:a4:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAZoVugiYCC4fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MzM1MjI5NjQtNjMxYy00ODc0LThkMjEtYWQwNmY4YTc0YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS5xy9Yo3JG3yzEgo1LAqs8owBsKVG8Hu/45 rptE9EntGQzg0id90ysFmydCn+nZtjIW+Jao7SFCdWQh4s2PHE23hy9RG4rXWeda pt2rvrub1biq+QEnx6C69ZCQ0PrIgVImQdrkNoMo9TCnvZpL/FaCAmg2FmPazGzv CYGHwhwcnj6rLQh0dFu64yzv5EDK+Km5c79lWPqRfTzv37+CwqcyD1yjrK+shBtP DDWdB3Hu8V+RZXKUUI++CqrRhAID7oFJfrMW5MBoxDzLBm3QK4mMy8hdZD3nfdp5 4mfqPCAxC7cwqjeSwbo8rZaZXsi4XcS4xNux4PEdOMotOsUsRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNwaTBLHYD5zgZ5SIty0iIsTmBHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTc4OGMwYTctMWJjZS0z OTNlLTg5NTAtNzY4ZGQxZTY4MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUjZTxu6aEzhqJEvD1V+LsaFw9eVIAwVmVFLSueNeTEnzkxWU3Cka2 2fjSJ2Bx3LW2oCttDoaxASQgYnuBfQpn8svJlca3fL+hYFufe18cb2DRudD7dWIA TGjb5Aj6+nktWemqH4rZf99WUtUKtRhBsNlxqvo8sLZOyTFucrZAnZPPiKQh1cGG MS0utnUjqzhMQfr7mAKrcgYSI6tivh4lBhDCntyVR5qMtKJlbRg52ZjLZ8+5P8gv CUT8ly1dwyQ6bjfdhSNAxsuI8xGbFON1EY3GvCuI1XDt1kP5tK/Z1Mr9a0e9NVzl OYIZxTYLU/f9DKLyXtoPxNm/KVz9vKSC -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:51 2025 by rpki-client