$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa File: 1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa (raw, json) Hash identifier: jGg+7WNU7wQFt8VD4nMUmHf96pDBBK+M/QxSKxk7wF0= Subject key identifier: D6:95:3B:4E:E6:D4:AD:B7:6B:AA:50:43:6E:2B:E4:79:DE:00:36:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840BF4A60089D59923CA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 36624 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:f4:a6:00:89:d5:99:23:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=2e30d1a3-71ab-4f65-a587-23649cb3ad13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:e9:9c:b6:76:63:ce:09:23:64:41:fb:19: 24:12:d0:e5:8a:0c:95:e3:97:f9:dd:e1:6e:54:8d: 22:af:2b:f2:41:c2:b1:b9:0f:86:5e:bc:69:7e:1f: e1:f7:b5:60:69:41:71:2c:38:af:0f:0a:21:53:10: 0a:a2:d8:10:e5:a8:8d:10:c2:cb:e3:5d:dd:14:4b: ca:24:6f:58:c2:0e:7e:2b:3b:a0:3a:a9:87:1a:0e: 2d:c5:6f:29:89:07:f4:f2:27:22:89:ec:a7:c5:73: 6b:56:ad:fe:ed:09:07:0b:74:8b:e8:e0:96:d2:84: cb:93:41:26:c6:9b:83:69:bb:f3:6c:e0:6b:c3:94: 8a:85:f0:e6:ca:b8:b2:05:4d:29:6e:f5:1a:6a:92: a4:e4:88:5b:85:c6:25:ff:bd:a4:ad:5f:a5:25:86: 0d:58:cd:e8:8b:96:f4:90:6e:40:65:98:be:cd:aa: 85:74:37:46:ec:05:03:83:e0:99:c6:de:eb:71:68: 21:62:0b:f4:76:68:59:2a:4e:fe:d9:b7:b9:1f:9e: 18:83:d4:e7:14:58:9f:fd:5c:5a:7a:07:0c:72:b3: f3:24:ba:c3:8d:65:06:90:ed:35:a6:de:de:e6:d0: f1:57:45:94:fb:23:43:fc:49:b4:1f:f8:bf:8f:b7: 28:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:3B:4E:E6:D4:AD:B7:6B:AA:50:43:6E:2B:E4:79:DE:00:36:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:30:a8:27:d5:2c:48:06:c1:79:6e:c0:3b:7e:5f:7e:cc:6a: 01:fe:47:6a:e0:9d:ca:44:5b:9f:a4:96:ae:b9:95:ac:37:fa: 00:e4:c6:73:70:55:9e:43:15:d7:89:29:8b:2c:58:ca:a0:75: 2a:5e:10:08:66:ae:06:9c:1c:de:13:06:38:f0:d4:9d:4e:10: 85:af:01:02:03:4b:b6:d1:aa:ce:73:f3:ea:f3:37:dc:8d:0f: b9:63:b2:89:07:6c:6f:86:fe:f9:95:fe:4b:f7:b9:d1:fa:76: 25:a2:43:f9:34:c3:75:99:36:a8:2c:d5:75:bc:5b:2c:81:6e: 6d:5b:ce:dc:25:fa:5e:5a:0c:ad:6e:01:8a:c4:6f:fe:67:31: be:6d:cc:90:98:ba:25:cf:46:84:e7:c1:27:c3:ef:56:ef:cd: e8:8a:97:a4:b8:1e:68:72:98:20:a9:95:a6:3e:08:4c:eb:e8: 04:c4:b8:18:49:3c:d4:95:b9:d4:f8:dc:13:39:8a:94:65:f8: 62:5c:ff:a3:d5:2f:1e:50:c5:89:73:bd:41:9e:5f:ac:2d:ea: 6f:8f:75:f2:58:2e:ca:30:32:d0:65:46:92:d5:60:84:e7:59: f1:80:db:5a:de:26:3a:db:53:31:fe:4f:1e:5d:f1:c0:db:c7: c9:92:2c:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAv0pgCJ1ZkjygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk MmUzMGQxYTMtNzFhYi00ZjY1LWE1ODctMjM2NDljYjNhZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3pnLZ2Y84JI2RB+xkkEtDligyV45f53eFu VI0iryvyQcKxuQ+GXrxpfh/h97VgaUFxLDivDwohUxAKotgQ5aiNEMLL413dFEvK JG9Ywg5+KzugOqmHGg4txW8piQf08iciieynxXNrVq3+7QkHC3SL6OCW0oTLk0Em xpuDabvzbOBrw5SKhfDmyriyBU0pbvUaapKk5IhbhcYl/72krV+lJYYNWM3oi5b0 kG5AZZi+zaqFdDdG7AUDg+CZxt7rcWghYgv0dmhZKk7+2be5H54Yg9TnFFif/Vxa egcMcrPzJLrDjWUGkO01pt7e5tDxV0WU+yND/Em0H/i/j7coHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNaVO07m1K23a6pQQ24r5HneADYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE4MTQ1YmQtNGUzMy0z YmZjLWExNjctOWQxYjZhYzE4ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcMKgn1SxIBsF5bsA7fl9+zGoB/kdq4J3KRFufpJauuZWsN/oA5MZz cFWeQxXXiSmLLFjKoHUqXhAIZq4GnBzeEwY48NSdThCFrwECA0u20arOc/Pq8zfc jQ+5Y7KJB2xvhv75lf5L97nR+nYlokP5NMN1mTaoLNV1vFssgW5tW87cJfpeWgyt bgGKxG/+ZzG+bcyQmLolz0aE58Enw+9W783oipekuB5ocpggqZWmPghM6+gExLgY STzUlbnU+NwTOYqUZfhiXP+j1S8eUMWJc71Bnl+sLepvj3XyWC7KMDLQZUaS1WCE 51nxgNta3iY621Mx/k8eXfHA28fJkiyT -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:15 2025 by rpki-client