$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a28191-9285-3fe4-a342-794175e200ec.roa File: 14a28191-9285-3fe4-a342-794175e200ec.roa (raw, json) Hash identifier: bnRkVo4aexn8qfOLG/byPJ7nD8YQY4WxAZ3TDKf1Agw= Subject key identifier: 9C:D6:79:A3:5A:66:CE:43:53:25:CC:31:A2:6C:0A:D8:96:71:59:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840BCBFB97533727A431C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a28191-9285-3fe4-a342-794175e200ec.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396575 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:cb:fb:97:53:37:27:a4:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=4c42457c-085c-4049-bcc6-a400a906946c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:6f:3a:c0:44:f2:9a:16:c4:4d:f2:a3:ee: 26:26:c7:a6:90:43:86:ae:6e:a7:c1:7d:bd:16:a8: 1b:45:0d:57:57:68:9f:f5:a4:fc:f0:21:c1:4d:48: ab:af:da:5d:1b:36:db:ae:cb:0e:7e:50:5e:ac:7d: 31:ca:ee:d5:76:89:bb:35:43:5b:a8:13:74:96:f7: c3:5a:e7:24:a2:05:90:f6:73:a6:6a:34:1e:52:bd: 58:2e:71:32:fc:37:09:2d:ae:0a:6a:40:ad:92:12: 47:e2:91:f0:70:9d:5d:bf:67:7d:b2:ce:79:51:43: 01:c8:e6:82:ab:1d:3b:59:f6:02:cf:af:68:97:4d: d0:d2:25:24:b7:61:48:13:ef:04:06:d0:8c:54:5a: 2c:04:95:31:ff:d5:7d:b4:9d:f3:17:49:3f:9a:b4: 8e:c6:98:fc:0a:11:a8:2d:c2:7b:00:fe:a9:fe:bf: f4:cb:e0:25:3e:9b:fe:9c:73:5c:a8:7d:4b:76:7a: 16:91:b7:cb:dc:c2:d6:cf:2c:42:9c:c1:56:24:d1: b7:37:fc:e8:85:a0:27:fb:61:aa:46:2c:e7:4d:b3: 93:79:3c:9c:d6:ee:98:61:48:1a:f9:fd:d3:28:7c: ee:da:4a:ff:42:21:7a:c4:f7:75:09:a1:f7:18:cd: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D6:79:A3:5A:66:CE:43:53:25:CC:31:A2:6C:0A:D8:96:71:59:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/14a28191-9285-3fe4-a342-794175e200ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ed:a3:80:af:c2:fa:f9:1f:90:e7:9b:0d:20:d8:b6:23:3b: 6d:da:7d:ff:78:6c:e0:1c:78:db:d4:de:b8:88:b5:e3:d7:d5: de:21:4e:5d:00:cb:22:15:24:d9:dd:cd:5a:d3:a7:d6:15:78: 76:21:4f:43:b2:ee:70:ce:bb:9d:6e:f8:c7:f3:9c:c3:71:79: 46:c5:9d:f4:1c:48:75:4a:a1:dc:e7:d9:af:ee:a0:5e:45:09: 73:7f:40:f1:44:30:7a:69:74:e9:4f:ba:b0:4d:3f:6b:fb:d9: c3:1b:65:d0:78:af:c4:98:77:03:9d:35:da:90:95:9b:84:da: 2b:d2:78:5b:40:bb:72:8b:7a:12:e7:d4:a5:54:4f:75:8e:cf: 33:d8:3a:4c:5e:d9:1d:a1:a4:e6:8a:2a:65:db:69:91:b5:b4: 58:f6:eb:57:9f:85:2c:d4:26:73:27:ee:d5:7d:e3:69:4f:50: 5e:2c:6c:a3:4e:e7:ff:2e:c4:cd:cb:a9:1c:2a:8b:a6:2d:9a: 34:a8:bf:6f:93:1d:0c:f5:55:cb:b7:19:dc:19:6f:38:93:b8: e8:25:4f:27:e7:62:87:c3:19:a5:ca:b2:f8:a4:ef:49:5c:3a: 4d:b9:3c:ba:c8:6e:66:2a:f4:43:ef:53:79:60:7f:73:a5:b6: 19:5a:27:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAvL+5dTNyekMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NGM0MjQ1N2MtMDg1Yy00MDQ5LWJjYzYtYTQwMGE5MDY5NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH5vOsBE8poWxE3yo+4mJsemkEOGrm6nwX29 FqgbRQ1XV2if9aT88CHBTUirr9pdGzbbrssOflBerH0xyu7Vdom7NUNbqBN0lvfD WuckogWQ9nOmajQeUr1YLnEy/DcJLa4KakCtkhJH4pHwcJ1dv2d9ss55UUMByOaC qx07WfYCz69ol03Q0iUkt2FIE+8EBtCMVFosBJUx/9V9tJ3zF0k/mrSOxpj8ChGo LcJ7AP6p/r/0y+AlPpv+nHNcqH1LdnoWkbfL3MLWzyxCnMFWJNG3N/zohaAn+2Gq RiznTbOTeTyc1u6YYUga+f3TKHzu2kr/QiF6xPd1CaH3GM1ZqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJzWeaNaZs5DUyXMMaJsCtiWcVkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTRhMjgxOTEtOTI4NS0z ZmU0LWEzNDItNzk0MTc1ZTIwMGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBs7aOAr8L6+R+Q55sNINi2Iztt2n3/eGzgHHjb1N64iLXj19XeIU5d AMsiFSTZ3c1a06fWFXh2IU9Dsu5wzrudbvjH85zDcXlGxZ30HEh1SqHc59mv7qBe RQlzf0DxRDB6aXTpT7qwTT9r+9nDG2XQeK/EmHcDnTXakJWbhNor0nhbQLtyi3oS 59SlVE91js8z2DpMXtkdoaTmiipl22mRtbRY9utXn4Us1CZzJ+7VfeNpT1BeLGyj Tuf/LsTNy6kcKoumLZo0qL9vkx0M9VXLtxncGW84k7joJU8n52KHwxmlyrL4pO9J XDpNuTy6yG5mKvRD71N5YH9zpbYZWid1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:14 2025 by rpki-client