$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa File: 1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa (raw, json) Hash identifier: swm1MSab3FUqJq3pVPovixp600sEo3Kns0wasJXhiZs= Subject key identifier: 25:D6:3B:B3:55:9B:21:90:11:42:57:A2:50:A3:BB:22:D9:7D:5E:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628408DA79CFDC4B2C37EA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396605 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:da:79:cf:dc:4b:2c:37:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=5392a365-d096-4a9c-bbe5-7574ebf619ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:46:3c:f7:85:80:b5:c2:5d:df:8d:9e:79: 4a:50:18:7a:6d:95:d2:04:2c:c7:9e:cc:92:14:9a: b3:f1:37:65:46:e7:90:b3:9c:97:29:aa:dd:4e:d8: 3b:fd:9c:b6:08:54:2b:ca:86:f6:b8:2f:8c:a7:ba: 74:df:80:c4:0f:84:33:55:f3:0e:73:d6:ef:2d:30: a0:b2:c1:1b:90:d2:2d:fc:d5:c2:ad:60:2e:8d:23: 99:a2:1f:2c:c0:5b:1b:95:03:2e:e6:71:a9:0c:4e: a9:7a:e1:9f:0e:7d:d6:ec:0c:63:c3:44:01:62:74: aa:f0:48:0d:6c:2f:15:84:f6:0d:f3:7a:af:46:0c: a9:67:d3:61:ef:3e:ea:47:8e:30:f7:b5:0a:bc:b4: d1:1b:4d:3d:40:ef:0e:3c:75:95:6f:93:66:6d:71: f4:ed:ae:a5:76:c5:90:b0:08:c1:7e:3e:4a:35:a3: 90:64:06:f1:89:a1:ad:2f:27:39:3a:0a:c9:55:e9: 74:4e:bb:2b:24:4f:3b:62:f6:b9:fc:a7:93:08:6a: 59:d3:e0:fc:14:91:32:e8:aa:49:fc:6f:2a:e7:4b: 74:8d:4d:db:25:5b:c6:ef:5d:6f:7e:5e:d9:c9:e2: 5b:60:09:50:e0:a8:7b:57:8a:fc:09:80:9d:6b:37: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:3B:B3:55:9B:21:90:11:42:57:A2:50:A3:BB:22:D9:7D:5E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fb:34:4b:08:32:a7:c7:85:62:1c:f6:ca:1e:fa:6c:55:9b: 03:7b:86:01:ae:0d:a1:cf:00:f9:c4:44:86:44:df:c6:bc:7b: b3:89:52:17:4e:f2:23:43:0a:f8:f8:2d:cb:ed:9e:0e:54:d7: 3b:d0:df:99:26:dc:b0:fe:33:22:22:60:3d:09:a2:e3:d1:e1: 84:f8:47:5e:55:33:1f:6b:7c:97:1d:41:03:38:f2:a0:6e:4b: 2f:6d:62:48:f0:e4:10:b7:7e:27:11:06:c5:c7:25:6f:d2:d7: 6f:2c:00:f4:5b:7b:f6:ea:b2:3c:9f:0f:93:2a:ce:56:e3:6e: 3a:d7:28:2d:44:86:89:75:96:77:84:3b:4e:3e:04:1a:fe:c1: 73:8f:1d:4c:5f:e1:b7:22:ff:7b:8e:69:40:d4:2a:3c:9e:d4: 3a:db:f9:e4:86:cb:fb:0d:ec:05:be:13:70:53:7c:16:dd:60: 93:bd:87:3e:8d:8d:b3:26:d7:f6:d9:1d:f8:d8:3a:d0:2b:22: 41:64:0e:74:c5:e7:9d:21:ca:f2:71:e8:8d:9a:f2:06:cd:aa: d3:13:d6:1f:09:1c:93:c2:99:dd:8f:02:02:b3:bb:99:12:a4: 08:18:56:b2:6c:05:63:be:70:6a:71:fa:3f:90:ff:6e:99:5a: e2:53:4d:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAjaec/cSyw36gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk NTM5MmEzNjUtZDA5Ni00YTljLWJiZTUtNzU3NGViZjYxOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHBGPPeFgLXCXd+NnnlKUBh6bZXSBCzHnsyS FJqz8TdlRueQs5yXKardTtg7/Zy2CFQryob2uC+Mp7p034DED4QzVfMOc9bvLTCg ssEbkNIt/NXCrWAujSOZoh8swFsblQMu5nGpDE6peuGfDn3W7Axjw0QBYnSq8EgN bC8VhPYN83qvRgypZ9Nh7z7qR44w97UKvLTRG009QO8OPHWVb5NmbXH07a6ldsWQ sAjBfj5KNaOQZAbxiaGtLyc5OgrJVel0TrsrJE87Yva5/KeTCGpZ0+D8FJEy6KpJ /G8q50t0jU3bJVvG711vfl7ZyeJbYAlQ4Kh7V4r8CYCdazeBbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCXWO7NVmyGQEUJXolCjuyLZfV4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiMjlmYTUtOWEwZS0z Y2ZhLWIxNTItMDVkNWNkZjdlOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP+zRLCDKnx4ViHPbKHvpsVZsDe4YBrg2hzwD5xESGRN/GvHuziVIX TvIjQwr4+C3L7Z4OVNc70N+ZJtyw/jMiImA9CaLj0eGE+EdeVTMfa3yXHUEDOPKg bksvbWJI8OQQt34nEQbFxyVv0tdvLAD0W3v26rI8nw+TKs5W42461ygtRIaJdZZ3 hDtOPgQa/sFzjx1MX+G3Iv97jmlA1Co8ntQ62/nkhsv7DewFvhNwU3wW3WCTvYc+ jY2zJtf22R342DrQKyJBZA50xeedIcryceiNmvIGzarTE9YfCRyTwpndjwICs7uZ EqQIGFaybAVjvnBqcfo/kP9umVriU03L -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:45 2025 by rpki-client