$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa File: 22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa (raw, json) Hash identifier: sSZubdOJBzR1cf2s9PpeKtBThzoGeuRQjQLwpbMbrwM= Subject key identifier: D8:B0:DD:7B:3D:DB:F1:7B:FF:1C:1D:4C:30:0B:86:F6:D7:91:8B:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A6284092AB285D05BA570DA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396564 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:09:2a:b2:85:d0:5b:a5:70:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=e8d6261b-f050-4dea-a020-c709bce24fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:2d:ff:d9:06:e7:7b:9f:6d:c2:b3:9f:dd: be:73:95:0f:be:24:74:43:80:3c:f4:80:cc:04:f5: 6b:b1:05:81:47:c5:6a:d5:a7:ac:49:e4:47:33:06: 5a:45:1f:67:a5:d0:d7:6e:8b:1d:a6:de:d2:39:de: 4a:ab:65:a5:fd:71:53:91:dc:79:01:f9:26:ae:34: b2:3d:1f:c8:2b:a6:47:4d:5a:72:16:4b:11:57:a9: 47:46:5a:0a:9d:9d:12:28:6a:e3:a0:f3:c7:6a:1a: d4:60:b9:dd:0e:00:dc:8d:44:83:1f:be:18:3a:52: 95:3d:a3:84:b7:bb:2e:69:4d:ea:23:16:41:19:5f: 37:89:17:3a:ed:1e:59:f7:55:ae:49:1d:0f:ab:40: 9a:76:37:fd:76:7a:9d:e4:aa:c0:98:92:25:53:73: 08:20:75:d3:78:81:dc:9d:81:4a:f2:d5:50:32:a9: 98:35:23:9b:01:86:14:21:08:c3:d0:c8:e5:37:b7: 73:ed:d1:0b:e6:bd:a4:24:80:7f:b4:ca:ec:fe:d4: 03:e5:d6:0b:65:c4:29:75:cd:d0:e2:f2:a2:b3:da: ac:ac:16:9a:8f:00:11:c1:36:33:b8:32:df:1b:cd: 80:be:57:25:ec:84:1f:c5:f0:a8:51:b8:7c:c3:8d: 37:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:DD:7B:3D:DB:F1:7B:FF:1C:1D:4C:30:0B:86:F6:D7:91:8B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2a:b9:13:23:cc:c5:2e:53:76:bf:04:99:3a:1d:d3:f2:63: af:8d:a6:b1:0a:23:5e:bb:71:9d:75:eb:2a:8a:70:dd:27:5b: b3:bb:84:76:06:64:2e:c3:ae:fe:4f:e4:71:c2:0f:38:ad:93: f0:ed:5c:d0:bc:7b:2e:ef:9b:57:56:c8:e3:e5:7a:df:3d:8a: 8a:1b:31:9e:56:ff:a1:33:9f:33:b9:66:b4:5b:35:ec:c5:84: db:38:4e:6c:44:5f:b3:03:e2:16:0b:8f:a3:a5:e0:fe:37:40: 4c:7d:cd:36:8e:b5:d3:74:eb:30:88:07:a7:2a:3b:74:76:3a: d1:b3:e2:a4:a0:bc:61:b1:26:a9:ed:18:b4:29:09:95:0a:c6: 5f:f0:a9:99:b1:dc:06:36:69:0f:f5:fe:de:37:ba:52:8f:c1: ff:6b:25:88:62:6c:ee:57:0e:c9:38:03:dd:51:4a:10:05:64: 35:27:d3:68:14:58:5d:61:5b:95:ee:2d:0a:07:53:76:84:c9: f9:85:9d:a3:22:16:f2:d5:ea:29:6e:98:19:ad:a2:f2:63:0d: 3e:1b:d0:3d:ea:12:b8:c9:74:6a:31:4d:41:2f:65:e0:aa:c2: 7b:5c:83:3a:5f:11:75:e9:e5:22:c9:60:5b:15:16:28:f5:eb: 5a:da:5e:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAkqsoXQW6Vw2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk ZThkNjI2MWItZjA1MC00ZGVhLWEwMjAtYzcwOWJjZTI0ZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL4t/9kG53ufbcKzn92+c5UPviR0Q4A89IDM BPVrsQWBR8Vq1aesSeRHMwZaRR9npdDXbosdpt7SOd5Kq2Wl/XFTkdx5AfkmrjSy PR/IK6ZHTVpyFksRV6lHRloKnZ0SKGrjoPPHahrUYLndDgDcjUSDH74YOlKVPaOE t7suaU3qIxZBGV83iRc67R5Z91WuSR0Pq0Cadjf9dnqd5KrAmJIlU3MIIHXTeIHc nYFK8tVQMqmYNSObAYYUIQjD0MjlN7dz7dEL5r2kJIB/tMrs/tQD5dYLZcQpdc3Q 4vKis9qsrBaajwARwTYzuDLfG82Avlcl7IQfxfCoUbh8w403MQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNiw3Xs92/F7/xwdTDALhvbXkYtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJhMGExNDAtZDdjYS0z YjQzLWJmMTUtZmNlM2VlM2E3Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUKrkTI8zFLlN2vwSZOh3T8mOvjaaxCiNeu3GddesqinDdJ1uzu4R2 BmQuw67+T+Rxwg84rZPw7VzQvHsu75tXVsjj5XrfPYqKGzGeVv+hM58zuWa0WzXs xYTbOE5sRF+zA+IWC4+jpeD+N0BMfc02jrXTdOswiAenKjt0djrRs+KkoLxhsSap 7Ri0KQmVCsZf8KmZsdwGNmkP9f7eN7pSj8H/ayWIYmzuVw7JOAPdUUoQBWQ1J9No FFhdYVuV7i0KB1N2hMn5hZ2jIhby1eopbpgZraLyYw0+G9A96hK4yXRqMU1BL2Xg qsJ7XIM6XxF16eUiyWBbFRYo9eta2l5R -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:15 2025 by rpki-client