$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2575249d-2acc-3066-8661-bac586b54e86.roa File: 2575249d-2acc-3066-8661-bac586b54e86.roa (raw, json) Hash identifier: klNKsUq2Fai4CUgpwEUOsDMmfPopUl/rz8rdIVn8KZY= Subject key identifier: A8:AC:B0:B2:C9:10:46:7E:7B:9E:87:ED:97:80:60:78:40:E1:45:1E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628411429F5B50F191EF7300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2575249d-2acc-3066-8661-bac586b54e86.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 396563 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:42:9f:5b:50:f1:91:ef:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=b7e25d2d-2b00-4ffb-937e-3504f2a7cc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:38:af:13:45:d3:4a:a3:bf:31:05:ab:de: 4c:82:3b:3d:13:5e:7c:f0:55:e5:77:1a:22:2e:2d: 0e:92:6e:d2:7a:bd:c2:a4:ea:bc:11:2f:bc:6b:61: 2f:ad:a6:6c:82:cf:74:7a:9b:08:7e:5c:9a:5d:c6: f5:17:89:a9:96:ab:28:ed:91:31:86:3f:bd:06:4e: 9d:5d:6c:e6:96:43:72:f8:d5:ad:5f:b2:73:60:55: 1c:1e:1b:fe:ae:87:4f:f9:b8:0a:59:f7:b2:1a:f5: 1d:7d:21:f9:ac:23:25:03:a6:ef:f6:be:65:20:12: fe:f9:f6:b9:15:a7:98:63:30:fe:41:27:02:b5:66: a0:28:db:6b:aa:f7:25:1f:ea:13:38:47:e9:fb:59: 7b:3b:d6:7c:c8:69:a4:74:ba:11:62:e7:d9:c8:d1: c3:7e:8c:32:f9:d4:88:2c:07:e0:4c:4d:55:51:ea: 9e:12:6d:d5:19:72:a2:59:ea:48:22:e2:87:e1:87: af:75:4a:36:5c:c9:c2:2c:8a:f7:bf:53:98:54:5b: 1c:93:21:15:5e:05:67:19:1f:c2:67:1d:99:15:34: f2:e6:23:70:9b:20:8a:ec:0d:53:64:da:16:e9:b4: 3e:20:10:c1:56:0d:3a:4a:1b:52:18:b1:28:4b:cb: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:B0:B2:C9:10:46:7E:7B:9E:87:ED:97:80:60:78:40:E1:45:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2575249d-2acc-3066-8661-bac586b54e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:55:24:13:c3:bb:86:cd:02:e2:de:ae:9d:33:ac:76:b3:69: f3:e7:55:1b:03:5d:8b:48:a6:bd:af:03:6b:8d:e8:60:f8:6e: 79:11:43:c6:a1:22:d7:af:94:dd:3d:0e:b1:9b:c2:08:ed:3e: 2b:58:3b:27:72:9b:a3:fb:92:28:dd:bd:c1:d9:d5:60:d8:9a: b2:e9:d1:e4:5e:88:71:c6:b5:40:ee:5d:47:04:2e:fe:7b:2d: 54:39:a7:cf:a9:0e:5c:71:9a:db:6c:7b:9f:29:97:03:6c:b7: b4:fe:e2:6a:17:99:bb:00:dd:f8:9a:e4:09:b6:92:28:03:6d: ba:78:14:84:16:bf:c0:89:04:84:5a:76:e9:43:a9:8e:93:01: f9:41:b0:0a:dd:9a:77:36:a1:2d:e6:4e:c1:e4:ca:a6:2c:ce: 88:46:ec:24:17:06:22:0f:6a:5d:2e:e9:c5:20:d4:a0:5c:e3: 23:94:bd:48:43:ae:8e:6e:c7:a2:31:6b:6a:14:55:54:6b:c3: 51:0c:08:50:d5:fd:4d:6d:49:8a:cc:bf:cb:76:59:f3:a6:7e: b3:b7:a2:4f:03:3f:6b:ba:32:ee:d6:58:02:57:d8:b7:a8:e6: 86:5b:5e:08:a1:d6:d8:cc:ca:4b:8e:b2:52:f2:6e:94:b3:8a: 7e:fe:d7:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBFCn1tQ8ZHvcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk YjdlMjVkMmQtMmIwMC00ZmZiLTkzN2UtMzUwNGYyYTdjYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMc4rxNF00qjvzEFq95Mgjs9E1588FXldxoi Li0Okm7Ser3CpOq8ES+8a2EvraZsgs90epsIflyaXcb1F4mplqso7ZExhj+9Bk6d XWzmlkNy+NWtX7JzYFUcHhv+rodP+bgKWfeyGvUdfSH5rCMlA6bv9r5lIBL++fa5 FaeYYzD+QScCtWagKNtrqvclH+oTOEfp+1l7O9Z8yGmkdLoRYufZyNHDfowy+dSI LAfgTE1VUeqeEm3VGXKiWepIIuKH4YevdUo2XMnCLIr3v1OYVFsckyEVXgVnGR/C Zx2ZFTTy5iNwmyCK7A1TZNoW6bQ+IBDBVg06ShtSGLEoS8u9jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKissLLJEEZ+e56H7ZeAYHhA4UUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjU3NTI0OWQtMmFjYy0z MDY2LTg2NjEtYmFjNTg2YjU0ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsVSQTw7uGzQLi3q6dM6x2s2nz51UbA12LSKa9rwNrjehg+G55EUPG oSLXr5TdPQ6xm8II7T4rWDsncpuj+5Io3b3B2dVg2Jqy6dHkXohxxrVA7l1HBC7+ ey1UOafPqQ5ccZrbbHufKZcDbLe0/uJqF5m7AN34muQJtpIoA226eBSEFr/AiQSE WnbpQ6mOkwH5QbAK3Zp3NqEt5k7B5MqmLM6IRuwkFwYiD2pdLunFINSgXOMjlL1I Q66ObseiMWtqFFVUa8NRDAhQ1f1NbUmKzL/Ldlnzpn6zt6JPAz9rujLu1lgCV9i3 qOaGW14IodbYzMpLjrJS8m6Us4p+/te0 -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:16 2025 by rpki-client