$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa File: 0794eaf1-85e9-34a1-a33e-365cf7de1078.roa (raw, json) Hash identifier: gVs0sY8Umes/ec8U/11IU8TbRmMhv7+YrmgHI6UYdaQ= Subject key identifier: 0E:6E:A5:03:0A:F7:B1:D6:E6:B9:45:3B:EE:32:B4:BA:CC:AD:C9:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840F461C0876E448C11DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396609 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:46:1c:08:76:e4:48:c1:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=196d31d5-bafd-46c8-a921-b05b3157014d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:9a:d9:e7:fe:e9:0e:7a:d3:d3:40:b6:ca: 57:e1:2e:7b:76:00:9a:99:21:c0:d7:a4:e6:0f:75: c0:95:da:6b:e7:e6:c7:7d:c0:12:2c:f7:8f:f6:fa: 4c:b1:6e:69:67:44:0c:9f:af:5a:1c:93:4f:fe:2b: 1e:fe:ab:18:e4:96:9e:9c:67:1e:bb:00:5a:18:cb: 23:21:20:99:be:32:7a:e2:89:ce:ec:56:a5:8e:d8: f4:4b:ed:f7:0f:12:40:53:37:dd:02:c5:e2:6e:d0: 52:b4:b3:15:9d:3c:d8:b4:93:5c:66:ac:0a:72:8f: 19:db:38:e0:03:6c:61:0c:f6:11:81:f0:93:f0:c8: d5:1a:93:1c:16:11:da:50:77:8b:02:09:c1:9b:32: f2:a5:56:e2:79:d1:a9:6a:08:a6:c6:4c:23:4f:8b: 80:83:5f:e0:c3:6b:59:3b:f8:c0:b9:03:ab:86:b3: ff:32:1f:cf:3a:f1:aa:76:9a:0c:7f:58:37:d8:ea: aa:6d:15:74:dc:4e:1f:a9:5a:5e:26:a6:63:9c:87: 38:81:4e:6c:7f:52:66:b8:db:aa:4e:96:23:7e:c4: 9c:ac:37:11:01:c4:9e:7e:70:3b:67:ef:96:79:51: ea:49:21:1f:86:00:eb:64:1a:89:13:c5:d1:d1:60: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6E:A5:03:0A:F7:B1:D6:E6:B9:45:3B:EE:32:B4:BA:CC:AD:C9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:28:b7:5d:3a:ec:4e:0d:69:09:f1:cf:b4:fd:a9:42:b8:37: 8b:a0:fb:f3:61:99:0b:bb:92:32:3f:97:d0:0b:e6:93:07:12: f0:3f:4c:1a:5b:99:d8:0e:72:6d:58:fe:90:56:94:48:1a:3c: 47:f3:8f:1a:2e:10:8b:c3:95:01:f8:a0:e3:35:a7:86:d8:06: 8a:70:03:b2:c4:d9:03:78:7b:ab:31:99:18:9f:1f:da:6a:31: ca:08:f3:44:b3:4e:53:46:ea:5b:3d:bc:1c:6f:c3:5a:5a:cb: e0:a0:a3:3a:46:fe:bf:8a:79:ba:4d:39:9c:d9:94:41:04:64: 0e:ce:cf:a1:e8:e3:88:6e:4a:ab:e3:11:87:1b:19:f6:b8:f0: b7:5f:7d:48:67:42:06:c7:3c:73:00:7c:7d:56:ce:ad:f9:f8: 10:36:27:87:f1:97:4b:5b:75:0b:00:d9:37:c8:e7:94:49:a8: 63:bb:1d:6e:00:1b:4b:0b:fb:07:96:f9:14:c3:35:ab:6f:af: 18:58:18:62:41:65:db:32:3c:f0:2c:02:5e:86:46:67:34:bd: 98:2c:b7:9f:4e:a4:a4:39:3f:e3:6e:04:f7:b0:d9:63:bb:28: 3c:42:20:00:9a:17:3a:24:6c:df:6a:d5:fa:da:01:f4:d5:51: 44:0f:5d:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA9GHAh25EjBHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk MTk2ZDMxZDUtYmFmZC00NmM4LWE5MjEtYjA1YjMxNTcwMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06Ka2ef+6Q5609NAtspX4S57dgCamSHA16Tm D3XAldpr5+bHfcASLPeP9vpMsW5pZ0QMn69aHJNP/ise/qsY5JaenGceuwBaGMsj ISCZvjJ64onO7Faljtj0S+33DxJAUzfdAsXibtBStLMVnTzYtJNcZqwKco8Z2zjg A2xhDPYRgfCT8MjVGpMcFhHaUHeLAgnBmzLypVbiedGpagimxkwjT4uAg1/gw2tZ O/jAuQOrhrP/Mh/POvGqdpoMf1g32OqqbRV03E4fqVpeJqZjnIc4gU5sf1JmuNuq TpYjfsScrDcRAcSefnA7Z++WeVHqSSEfhgDrZBqJE8XR0WDuOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA5upQMK97HW5rlFO+4ytLrMrckWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDc5NGVhZjEtODVlOS0z NGExLWEzM2UtMzY1Y2Y3ZGUxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUKLddOuxODWkJ8c+0/alCuDeLoPvzYZkLu5IyP5fQC+aTBxLwP0wa W5nYDnJtWP6QVpRIGjxH848aLhCLw5UB+KDjNaeG2AaKcAOyxNkDeHurMZkYnx/a ajHKCPNEs05TRupbPbwcb8NaWsvgoKM6Rv6/inm6TTmc2ZRBBGQOzs+h6OOIbkqr 4xGHGxn2uPC3X31IZ0IGxzxzAHx9Vs6t+fgQNieH8ZdLW3ULANk3yOeUSahjux1u ABtLC/sHlvkUwzWrb68YWBhiQWXbMjzwLAJehkZnNL2YLLefTqSkOT/jbgT3sNlj uyg8QiAAmhc6JGzfatX62gH01VFED11o -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:05 2025 by rpki-client