$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a99494b-aaa8-30e0-83de-b97514ca7abd.roa File: 2a99494b-aaa8-30e0-83de-b97514ca7abd.roa (raw, json) Hash identifier: 5FhEbD24jhBtzFG0T9zZC+TgWcSDu21cUByvRw0xmaQ= Subject key identifier: 2F:D6:28:E1:E5:10:B1:5D:A7:06:D6:02:43:BC:BA:84:51:33:A2:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A7223A102DA08748180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a99494b-aaa8-30e0-83de-b97514ca7abd.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 397212 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:72:23:a1:02:da:08:74:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=bad273e9-5d57-46de-aecc-090c47ba4816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:be:0e:28:30:7b:ed:7e:89:33:43:e1:63: 3d:03:f9:3b:21:98:91:75:7a:80:0d:9f:35:9e:55: 4c:ae:b2:35:af:fd:9d:c4:f6:50:cb:29:7a:9c:77: 9a:c9:d0:47:3d:04:11:19:0b:53:7c:36:89:c7:d5: 3d:6a:f9:43:4d:b8:14:01:e6:4d:0a:48:a4:07:97: 08:4d:fb:07:c2:a6:7a:ff:28:f7:a5:c7:d0:31:23: db:c9:e4:9b:c0:60:89:c2:18:cc:c6:60:0c:91:fd: 7d:e9:6e:12:d8:54:7e:38:23:a6:cb:e9:14:7f:fa: 83:70:9d:f0:a5:52:f5:59:b1:f8:1b:77:b1:4e:6d: 0f:d6:24:0e:94:97:5b:7e:af:f7:02:0e:d1:ac:e7: 83:85:28:75:82:ba:46:32:4f:03:72:5b:9a:e1:a9: 6e:76:68:c8:80:49:20:34:4a:67:b8:06:7b:0a:d9: 2a:be:c5:f1:ae:e4:60:c7:d5:9d:26:ce:be:13:25: 0a:44:4e:a2:a8:41:93:43:64:9a:af:76:3b:d6:4a: fe:76:ce:bf:f7:39:21:b5:57:60:6a:80:30:ca:b3: f7:80:90:51:3f:d2:a4:5d:31:ef:96:e4:6b:e8:36: 3c:32:7c:84:11:f1:74:88:db:5a:b7:ae:71:e2:15: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D6:28:E1:E5:10:B1:5D:A7:06:D6:02:43:BC:BA:84:51:33:A2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a99494b-aaa8-30e0-83de-b97514ca7abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c5:8b:ca:ff:fc:aa:d9:09:91:ee:21:e2:9d:dd:c3:58:38: 0c:dd:48:9c:79:65:52:11:2d:33:f3:ae:25:75:d3:2a:cc:4a: 82:76:38:02:54:b5:6f:94:4c:74:a8:83:ff:6d:b6:c9:e3:bc: 4d:e8:45:3c:6f:41:01:e4:76:09:26:29:ec:53:e5:fd:45:26: ee:6a:ca:f3:7c:f0:c1:c3:25:4c:23:d6:40:db:69:37:5a:33: 34:be:dd:81:41:ca:a0:a0:62:c4:07:77:96:ad:01:75:84:32: 4d:63:e2:0e:ea:f3:31:7c:de:1d:60:a1:d4:23:12:6b:dd:ec: 0c:f4:56:ca:a7:c2:88:8c:9a:bd:dc:f0:bc:14:cf:ff:0d:6c: 0d:47:10:ae:fd:4a:48:cb:81:3d:d6:1a:06:81:d6:b1:7b:9e: ec:73:55:b6:9b:0e:f1:60:99:02:89:cd:85:53:bb:58:61:99: 01:2c:1f:cb:1e:d5:39:47:92:8d:f6:ad:d5:d2:9c:68:15:c1: fc:1a:17:6f:e0:d4:5c:95:7d:68:ec:5e:40:e9:d8:1e:c5:d7: 62:f1:aa:8b:35:dd:b4:fc:f2:6a:b0:fe:12:04:5c:9e:79:10: 74:1e:ed:c4:e7:a0:74:41:34:52:f7:12:5e:bc:a5:3c:5e:9f: 9f:d1:be:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihApyI6EC2gh0gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk YmFkMjczZTktNWQ1Ny00NmRlLWFlY2MtMDkwYzQ3YmE0ODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic++Digwe+1+iTND4WM9A/k7IZiRdXqADZ81 nlVMrrI1r/2dxPZQyyl6nHeaydBHPQQRGQtTfDaJx9U9avlDTbgUAeZNCkikB5cI TfsHwqZ6/yj3pcfQMSPbyeSbwGCJwhjMxmAMkf196W4S2FR+OCOmy+kUf/qDcJ3w pVL1WbH4G3exTm0P1iQOlJdbfq/3Ag7RrOeDhSh1grpGMk8Dclua4aludmjIgEkg NEpnuAZ7CtkqvsXxruRgx9WdJs6+EyUKRE6iqEGTQ2Sar3Y71kr+ds6/9zkhtVdg aoAwyrP3gJBRP9KkXTHvluRr6DY8MnyEEfF0iNtat65x4hXUjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC/WKOHlELFdpwbWAkO8uoRRM6KpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE5OTQ5NGItYWFhOC0z MGUwLTgzZGUtYjk3NTE0Y2E3YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcxYvK//yq2QmR7iHind3DWDgM3UiceWVSES0z864lddMqzEqCdjgC VLVvlEx0qIP/bbbJ47xN6EU8b0EB5HYJJinsU+X9RSbuasrzfPDBwyVMI9ZA22k3 WjM0vt2BQcqgoGLEB3eWrQF1hDJNY+IO6vMxfN4dYKHUIxJr3ewM9FbKp8KIjJq9 3PC8FM//DWwNRxCu/UpIy4E91hoGgdaxe57sc1W2mw7xYJkCic2FU7tYYZkBLB/L HtU5R5KN9q3V0pxoFcH8Ghdv4NRclX1o7F5A6dgexddi8aqLNd20/PJqsP4SBFye eRB0Hu3E56B0QTRS9xJevKU8Xp+f0b4+ -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:45 2025 by rpki-client