$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa File: 1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa (raw, json) Hash identifier: 4+hwTHWOqrAsIlC9kItYA+n5IEYQgmbClhvkE0Y3cF0= Subject key identifier: A4:C8:3B:73:73:13:52:5E:A9:60:14:28:6F:4F:60:CD:1C:A1:EC:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62841186E3C212F7A890F1D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 397206 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:86:e3:c2:12:f7:a8:90:f1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=15000064-84f5-49e3-86ad-fb749a912de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:01:3c:c9:0b:aa:59:4c:76:6e:a0:0b:64:16: 55:fe:22:dd:ce:2f:6a:6c:de:fb:2f:c2:03:39:34: bf:d8:07:3d:6c:f5:f2:37:c5:d7:a6:1e:e3:39:56: 9f:c6:c8:89:93:dd:a6:7a:28:2a:c5:fb:1e:ab:ed: 31:6f:3b:90:ca:ec:f6:98:bb:9d:94:7c:63:07:fc: 46:7b:f1:df:c3:e1:f2:e4:36:a3:79:62:f2:f5:f7: 81:73:6f:77:75:12:be:85:dc:2e:2a:4c:21:82:1e: 6e:9b:de:c7:c9:20:03:00:28:48:10:da:91:03:42: 3a:c4:58:92:a3:24:f2:77:3d:56:6e:37:07:ba:08: 07:72:04:da:ee:2d:96:09:99:2a:e3:3a:16:e9:be: 5f:cd:17:b3:7e:89:ef:b5:e5:50:f8:13:2a:96:36: da:7a:f9:4a:f1:7c:ac:9e:df:b4:e5:f1:25:8e:a5: fe:49:72:db:aa:9c:da:e8:34:bc:65:1d:89:d8:ac: 06:19:f9:72:01:77:03:78:04:89:9f:b4:2b:8a:78: 89:49:28:8c:ed:da:6f:2e:6b:3a:a7:6a:ee:1a:15: e3:f5:b7:74:39:7f:b1:0c:98:d3:f6:d3:f9:0f:3a: 39:bc:ec:b7:65:72:07:e4:f0:6d:b7:48:0d:89:ea: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:3B:73:73:13:52:5E:A9:60:14:28:6F:4F:60:CD:1C:A1:EC:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c7:92:ad:74:48:a1:f3:83:41:2f:59:82:47:63:29:13:8f: dc:de:b1:67:32:51:3b:0a:8d:8c:b0:ee:09:82:ca:b4:5e:26: 56:9d:37:92:4d:2c:3d:57:a8:06:09:74:34:61:26:13:6d:8b: 8c:2d:8b:b3:96:c0:cd:ab:43:28:8f:38:bc:f6:68:8b:7d:09: ec:a0:4e:81:97:11:19:44:6c:c7:db:2d:66:20:66:b5:1b:9d: e1:55:92:8f:01:cb:08:8f:e0:b2:0a:af:0e:f3:b0:86:ac:b0: 90:89:5f:6a:98:9f:62:fa:b4:04:ea:25:d0:f6:d0:6d:50:43: 6e:30:d6:06:f6:34:7e:3e:25:c7:07:aa:a6:8a:39:2a:0e:db: bb:cb:88:a7:36:e8:1b:17:bf:0b:81:40:a3:a5:6b:3e:00:b0: 58:29:ce:5d:70:40:0a:88:5d:2e:42:00:f5:96:ed:82:cc:99: c7:e6:e0:4a:74:1d:c1:a0:07:13:f1:12:33:fb:91:8a:dd:6e: 2e:5e:3f:b0:0c:58:e0:ad:a0:93:0a:0e:16:9e:f7:1e:43:17: 59:7e:37:75:2b:43:9b:f0:8c:65:72:ad:51:28:59:64:f6:66: 58:3c:59:11:ee:e5:e7:91:3e:d6:5e:62:16:19:ca:d9:1c:99: 3b:e7:ec:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBGG48IS96iQ8dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk MTUwMDAwNjQtODRmNS00OWUzLTg2YWQtZmI3NDlhOTEyZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQE8yQuqWUx2bqALZBZV/iLdzi9qbN77L8ID OTS/2Ac9bPXyN8XXph7jOVafxsiJk92meigqxfseq+0xbzuQyuz2mLudlHxjB/xG e/Hfw+Hy5DajeWLy9feBc293dRK+hdwuKkwhgh5um97HySADAChIENqRA0I6xFiS oyTydz1WbjcHuggHcgTa7i2WCZkq4zoW6b5fzRezfonvteVQ+BMqljbaevlK8Xys nt+05fEljqX+SXLbqpza6DS8ZR2J2KwGGflyAXcDeASJn7QriniJSSiM7dpvLms6 p2ruGhXj9bd0OX+xDJjT9tP5Dzo5vOy3ZXIH5PBtt0gNieocxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKTIO3NzE1JeqWAUKG9PYM0coeywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI5ZTY0MWYtMGZhYS0z OTUwLTg2NTAtMGVmODI2ZDJjYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARx5KtdEih84NBL1mCR2MpE4/c3rFnMlE7Co2MsO4Jgsq0XiZWnTeS TSw9V6gGCXQ0YSYTbYuMLYuzlsDNq0Mojzi89miLfQnsoE6BlxEZRGzH2y1mIGa1 G53hVZKPAcsIj+CyCq8O87CGrLCQiV9qmJ9i+rQE6iXQ9tBtUENuMNYG9jR+PiXH B6qmijkqDtu7y4inNugbF78LgUCjpWs+ALBYKc5dcEAKiF0uQgD1lu2CzJnH5uBK dB3BoAcT8RIz+5GK3W4uXj+wDFjgraCTCg4WnvceQxdZfjd1K0Ob8Ixlcq1RKFlk 9mZYPFkR7uXnkT7WXmIWGcrZHJk75+wJ -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:55 2025 by rpki-client