$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa File: f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa (raw, json) Hash identifier: Xotq1QHEgySvqnQ7FZxzPOEf3GIn6qn9YvgFJElWf50= Subject key identifier: 66:58:0E:EB:7A:06:D2:86:BB:0F:BB:E2:CA:03:A7:CB:FE:EA:E8:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628410E2AD752791E0EC1700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 396609 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:e2:ad:75:27:91:e0:ec:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=01e8d5f6-4378-4be1-8fab-163b7f7c7c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:9f:5a:b7:e0:7c:79:d8:5b:1f:66:e8:6d: b9:82:2c:da:23:fd:0f:4b:25:fc:3f:f8:22:67:c2: f6:70:25:72:03:be:d3:dc:7c:a5:e1:46:d1:7f:c5: a3:18:00:27:f7:bd:f8:da:be:3d:d7:e2:5f:a2:4d: 2f:3c:a1:d1:56:f0:2d:28:4f:5c:b3:7d:d9:2a:74: bd:0b:71:ec:e4:5e:0b:c1:99:93:2a:4c:f3:1d:b9: fa:8c:cc:b7:c5:5e:b3:17:98:58:5a:66:98:76:fe: 00:21:fb:40:36:26:af:33:fd:15:e6:6c:bb:c3:6e: 76:b2:f8:11:43:92:f5:ce:d3:d6:f2:5e:47:70:56: 01:9d:05:c0:2f:9e:dd:55:36:ad:f2:a8:2c:ae:20: 99:c4:f7:ec:1e:c5:a0:5f:5d:8f:ab:f1:d5:82:5e: 91:5e:6d:b8:57:5a:cc:81:c5:79:e5:62:9e:63:3f: 46:8b:6b:9a:63:83:a1:03:ca:cb:2a:35:75:4a:3b: 11:d7:c3:ff:e6:d3:9e:cd:33:4f:a0:85:26:9f:02: f4:d0:1a:ba:ef:70:d2:2a:5f:41:0e:5c:65:93:55: 40:b7:1d:56:4c:c6:02:0f:a6:ee:55:9b:06:83:f8: 3b:72:db:54:74:50:c2:40:46:22:04:3b:cc:ad:e6: 03:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:0E:EB:7A:06:D2:86:BB:0F:BB:E2:CA:03:A7:CB:FE:EA:E8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0f:c3:51:83:d0:2a:cd:a0:e8:35:77:f9:1d:4a:55:c1:b0: b2:20:6c:a1:79:ec:be:05:90:10:87:0d:1b:b6:12:a6:38:5a: e9:f3:c0:30:cd:41:f1:bf:d6:92:31:6d:33:a4:84:0d:24:0f: e8:a3:cf:7c:97:79:62:e9:43:2f:c8:aa:f0:da:14:4e:5e:38: 9e:4c:19:a2:c2:b7:58:6e:91:6d:42:df:bc:45:0f:ca:f1:fe: 13:7f:f3:48:ca:c9:20:86:0d:ce:cb:6e:f5:17:19:17:08:34: 94:1b:6f:7b:26:0a:37:bf:af:b5:63:be:39:35:93:89:b4:21: 8c:ef:70:8f:e2:ab:4f:e4:76:10:65:6d:db:eb:2b:cc:46:59: 24:60:80:0d:3a:38:0e:c0:8a:bf:bd:dc:a9:e5:8b:e2:92:dc: 7f:b3:e1:96:d8:53:82:8d:a7:d5:d0:2d:58:9b:18:a5:1b:ba: 1a:1e:5a:9a:59:66:dd:c3:15:08:81:22:73:9a:f5:68:a8:3a: 3b:c8:2c:75:5b:7e:a3:bf:e2:7e:cc:e2:2c:16:18:e3:b4:b7: 06:ab:17:c5:c8:cf:7d:85:6f:2b:48:ee:9d:3c:1e:cf:04:b3: 76:f7:73:33:2d:9d:34:09:0e:73:bc:e2:b5:4b:f4:cd:ed:88: 6e:94:f2:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBDirXUnkeDsFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk MDFlOGQ1ZjYtNDM3OC00YmUxLThmYWItMTYzYjdmN2M3Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO+fWrfgfHnYWx9m6G25gizaI/0PSyX8P/gi Z8L2cCVyA77T3Hyl4UbRf8WjGAAn97342r491+Jfok0vPKHRVvAtKE9cs33ZKnS9 C3Hs5F4LwZmTKkzzHbn6jMy3xV6zF5hYWmaYdv4AIftANiavM/0V5my7w252svgR Q5L1ztPW8l5HcFYBnQXAL57dVTat8qgsriCZxPfsHsWgX12Pq/HVgl6RXm24V1rM gcV55WKeYz9Gi2uaY4OhA8rLKjV1SjsR18P/5tOezTNPoIUmnwL00Bq673DSKl9B Dlxlk1VAtx1WTMYCD6buVZsGg/g7cttUdFDCQEYiBDvMreYDIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZYDut6BtKGuw+74soDp8v+6uhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjc5ZTdlZjEtNzNiMS0z NGYxLTk0NTQtNGEwYzMwMzRkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiD8NRg9AqzaDoNXf5HUpVwbCyIGyheey+BZAQhw0bthKmOFrp88Aw zUHxv9aSMW0zpIQNJA/oo898l3li6UMvyKrw2hROXjieTBmiwrdYbpFtQt+8RQ/K 8f4Tf/NIyskghg3Oy271FxkXCDSUG297Jgo3v6+1Y745NZOJtCGM73CP4qtP5HYQ ZW3b6yvMRlkkYIANOjgOwIq/vdyp5Yviktx/s+GW2FOCjafV0C1YmxilG7oaHlqa WWbdwxUIgSJzmvVoqDo7yCx1W36jv+J+zOIsFhjjtLcGqxfFyM99hW8rSO6dPB7P BLN293MzLZ00CQ5zvOK1S/TN7YhulPIV -----END CERTIFICATE-----Generated at Wed Jul 23 11:39:59 2025 by rpki-client