$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13c19b6c-dc38-393c-a21d-11a893b8f244.roa File: 13c19b6c-dc38-393c-a21d-11a893b8f244.roa (raw, json) Hash identifier: XKyN9S0ZW1sGgz/2QS7sxV2t2UzrNN3flXUwq+f0tx8= Subject key identifier: 33:3C:DF:6C:AD:E9:CF:15:CF:66:94:FC:86:0F:74:0B:9D:77:C4:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628409960786666BB09BD280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13c19b6c-dc38-393c-a21d-11a893b8f244.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 397207 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:96:07:86:66:6b:b0:9b:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=1253f53e-b59f-4df1-9168-93c718e62aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:d2:6f:58:18:d2:5d:9c:af:a0:e0:11:b4: a0:6c:8d:81:7a:bf:5c:16:20:b8:c0:a4:33:5d:28: 47:8f:72:65:62:3a:5d:1f:99:14:89:15:79:4c:59: c4:42:de:2c:2d:7f:15:ad:12:d6:57:97:d1:88:1b: 53:bd:8f:a4:a3:d0:37:4b:d6:ce:9a:10:4f:2d:de: 99:5a:cb:32:b6:f6:aa:0d:ac:3e:06:a1:04:fc:ec: 64:dc:30:19:1f:68:ab:c7:48:1b:03:68:b6:18:69: bf:33:67:e7:f2:80:b4:cd:39:4b:ab:30:5d:01:02: 5b:50:f1:a5:fa:f1:70:47:be:d8:e1:34:8a:78:5f: ad:4a:f9:df:37:74:1e:d7:2e:7d:4b:c2:40:63:dc: 9b:d0:b3:f8:2f:06:05:68:07:b3:f0:18:a3:04:3c: bb:56:4c:0b:89:0e:04:e8:b3:0e:9a:0a:b4:f5:02: e4:52:86:dc:f0:87:90:b5:73:f6:9f:3a:e8:39:df: 29:aa:de:8e:49:1e:5e:59:f2:7a:47:11:3d:ef:06: 65:99:8b:bf:7f:3c:c7:26:99:49:0f:03:7e:fd:cc: f8:d8:07:51:87:4d:c6:c2:23:a3:cc:b9:40:6a:36: 89:a5:3d:7b:f6:6b:13:99:51:77:55:6e:2d:12:0c: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3C:DF:6C:AD:E9:CF:15:CF:66:94:FC:86:0F:74:0B:9D:77:C4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/13c19b6c-dc38-393c-a21d-11a893b8f244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:36:cc:70:4d:f4:4f:73:60:1b:b6:9c:4f:aa:64:aa:32:72: 76:74:3b:6b:31:55:24:5d:5f:bc:c7:cb:4a:44:1b:f5:63:da: 0f:10:8c:8c:5c:5f:ce:12:37:98:7e:39:42:c2:5c:81:e9:ef: eb:99:5e:27:58:c0:55:65:e6:1c:e3:da:5e:59:cb:2e:a7:ab: 79:b5:28:02:4d:e5:b3:ac:80:54:34:fc:c2:94:91:47:48:4e: d4:75:df:07:f8:00:29:1f:b3:75:b7:ee:63:cd:87:a2:2f:58: ee:50:f1:2a:5c:ab:8e:12:fe:f9:87:4d:53:31:c3:7d:2e:d6: 9b:ab:32:48:d0:31:a3:10:8a:17:84:22:ff:40:51:d8:d7:62: 46:02:36:22:b3:63:41:06:eb:e8:f7:98:7f:8f:d1:d8:be:7b: 8d:08:b2:a3:0a:2b:f8:fd:06:9d:02:e0:d5:82:7a:f4:f0:4a: 1e:a1:18:29:d0:38:a7:2d:dc:b5:58:68:49:f0:f2:86:ef:09: 2c:61:cf:e4:3b:65:e0:c9:3a:ff:f6:dc:69:23:79:9a:16:24: e6:5c:32:1b:d5:1b:90:a0:5e:66:d0:49:e5:46:b3:e3:48:2e: 43:57:67:ae:c2:fb:52:b4:57:77:73:9d:e0:17:59:4f:d5:73: 99:15:d1:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAmWB4Zma7Cb0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk MTI1M2Y1M2UtYjU5Zi00ZGYxLTkxNjgtOTNjNzE4ZTYyYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD/Sb1gY0l2cr6DgEbSgbI2Ber9cFiC4wKQz XShHj3JlYjpdH5kUiRV5TFnEQt4sLX8VrRLWV5fRiBtTvY+ko9A3S9bOmhBPLd6Z WssytvaqDaw+BqEE/Oxk3DAZH2irx0gbA2i2GGm/M2fn8oC0zTlLqzBdAQJbUPGl +vFwR77Y4TSKeF+tSvnfN3Qe1y59S8JAY9yb0LP4LwYFaAez8BijBDy7VkwLiQ4E 6LMOmgq09QLkUobc8IeQtXP2nzroOd8pqt6OSR5eWfJ6RxE97wZlmYu/fzzHJplJ DwN+/cz42AdRh03GwiOjzLlAajaJpT179msTmVF3VW4tEgxbjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDM832yt6c8Vz2aU/IYPdAudd8TZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTNjMTliNmMtZGMzOC0z OTNjLWEyMWQtMTFhODkzYjhmMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlNsxwTfRPc2AbtpxPqmSqMnJ2dDtrMVUkXV+8x8tKRBv1Y9oPEIyM XF/OEjeYfjlCwlyB6e/rmV4nWMBVZeYc49peWcsup6t5tSgCTeWzrIBUNPzClJFH SE7Udd8H+AApH7N1t+5jzYeiL1juUPEqXKuOEv75h01TMcN9LtabqzJI0DGjEIoX hCL/QFHY12JGAjYis2NBBuvo95h/j9HYvnuNCLKjCiv4/QadAuDVgnr08EoeoRgp 0DinLdy1WGhJ8PKG7wksYc/kO2XgyTr/9txpI3maFiTmXDIb1RuQoF5m0EnlRrPj SC5DV2euwvtStFd3c53gF1lP1XOZFdGy -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:50 2025 by rpki-client