$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa File: 2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa (raw, json) Hash identifier: rdcwT77msPumjov8+T2cHzB4fvtHzvMsELo+fQIBkzc= Subject key identifier: DA:AF:89:DF:E3:9A:0F:F9:3E:99:48:63:7C:46:0D:A4:DF:12:9F:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840BE70FC7AFB8C107DC03 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 36627 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:e7:0f:c7:af:b8:c1:07:dc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=71a836d1-b30d-4e47-b70c-8cd8b3454423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:c4:1e:f1:d3:3a:43:34:1d:6c:6a:42:5c: 2e:00:22:24:b6:d2:ca:04:dd:63:d8:bc:24:0b:9a: af:e7:a7:56:41:ac:f4:c2:f0:6c:d5:28:64:37:f8: 14:0d:be:59:44:c6:e9:47:fe:a5:79:93:10:07:d0: c3:76:ce:fe:70:a9:33:11:eb:3d:c0:ad:38:85:3d: 29:cf:bd:eb:4c:7e:6a:e8:57:18:e3:64:cc:50:88: c5:dd:c8:18:67:07:6f:c6:a4:76:7f:c0:a3:a6:4d: 92:e2:bc:3f:6f:bd:f6:40:a2:88:20:5e:3f:57:ca: 91:25:65:1c:ff:97:fd:2b:8f:97:b5:ef:50:65:5c: 7a:a4:06:9a:1d:e7:1f:0e:d7:8b:e0:8d:10:56:73: ac:2b:1c:63:cb:b9:66:4b:9f:24:f2:a9:63:19:57: 35:34:57:74:64:29:ba:d2:42:fb:4a:9b:6e:02:0a: 8e:8b:47:34:97:ba:5d:23:30:6b:a9:2c:df:1b:f8: 73:29:a4:bc:ec:a1:8f:5a:2e:5d:af:82:35:e4:77: 4b:1d:6c:9b:ab:0a:93:67:ac:38:1f:6a:96:ca:85: 17:17:9d:2b:e8:cc:94:76:07:d4:f8:79:0e:1e:67: 98:cd:58:2d:f4:3a:5a:f8:c7:74:0f:b3:30:d4:d6: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AF:89:DF:E3:9A:0F:F9:3E:99:48:63:7C:46:0D:A4:DF:12:9F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1e:cc:e5:f1:d0:57:e6:88:e2:29:71:d8:b3:86:a6:07:01: 1e:57:0f:b9:ac:0b:37:9f:58:ad:97:ef:eb:40:ed:4a:16:90: a4:c9:51:3f:89:87:a3:27:9c:f1:fe:2f:55:94:2f:5e:41:56: 42:90:cf:8d:4a:2d:16:4b:21:cd:e2:30:8e:1b:07:49:8b:71: 86:ef:a4:bd:1b:6a:29:a7:7e:0d:84:c4:ce:31:2e:22:24:a3: 46:cb:4b:1c:f1:50:5b:ef:a3:a7:f9:a6:42:dd:54:3d:50:e0: dd:85:32:83:4b:38:e0:32:1d:94:dd:67:30:7f:18:54:84:93: 99:5e:aa:ec:d1:5e:5f:6b:c3:a7:8c:1a:96:43:ec:8a:4c:42: 1f:ec:d6:4f:0c:b8:b9:46:2e:6b:92:38:4d:be:77:ca:ff:9c: 0e:60:e7:78:79:01:0f:40:3f:10:ee:e1:8d:79:3b:cc:1c:0d: 61:b7:4e:59:79:f4:51:25:7d:48:87:e0:ff:76:fe:f3:9e:49: 83:93:12:56:48:89:25:9e:21:02:ed:7b:2f:77:ad:63:19:20: d9:b9:e5:13:18:52:60:66:60:7f:56:9f:44:e2:3a:ad:86:ea: 06:d2:64:1b:39:c4:47:11:20:12:ee:30:46:14:4c:5d:65:69: 3b:d1:05:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAvnD8evuMEH3AMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NzFhODM2ZDEtYjMwZC00ZTQ3LWI3MGMtOGNkOGIzNDU0NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXbEHvHTOkM0HWxqQlwuACIkttLKBN1j2Lwk C5qv56dWQaz0wvBs1ShkN/gUDb5ZRMbpR/6leZMQB9DDds7+cKkzEes9wK04hT0p z73rTH5q6FcY42TMUIjF3cgYZwdvxqR2f8Cjpk2S4rw/b732QKKIIF4/V8qRJWUc /5f9K4+Xte9QZVx6pAaaHecfDteL4I0QVnOsKxxjy7lmS58k8qljGVc1NFd0ZCm6 0kL7SptuAgqOi0c0l7pdIzBrqSzfG/hzKaS87KGPWi5dr4I15HdLHWybqwqTZ6w4 H2qWyoUXF50r6MyUdgfU+HkOHmeYzVgt9Dpa+Md0D7Mw1NbxOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNqvid/jmg/5PplIY3xGDaTfEp8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmNjZDMzYTYtZjZmNC0z ZGY4LTk1YTktZjEzZTU3ZmM2NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKHszl8dBX5ojiKXHYs4amBwEeVw+5rAs3n1itl+/rQO1KFpCkyVE/ iYejJ5zx/i9VlC9eQVZCkM+NSi0WSyHN4jCOGwdJi3GG76S9G2opp34NhMTOMS4i JKNGy0sc8VBb76On+aZC3VQ9UODdhTKDSzjgMh2U3WcwfxhUhJOZXqrs0V5fa8On jBqWQ+yKTEIf7NZPDLi5Ri5rkjhNvnfK/5wOYOd4eQEPQD8Q7uGNeTvMHA1ht05Z efRRJX1Ih+D/dv7znkmDkxJWSIklniEC7Xsvd61jGSDZueUTGFJgZmB/Vp9E4jqt huoG0mQbOcRHESAS7jBGFExdZWk70QVz -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:21 2025 by rpki-client