$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa File: 31105b17-2b57-3271-b8aa-7a4128d5f493.roa (raw, json) Hash identifier: +VRrDafrtb4wHaLfUcdBjiz0KzzDTA9uFxT8quO9obg= Subject key identifier: 96:EE:1C:89:EA:8E:63:F0:E1:4E:03:2A:C3:30:AE:96:18:3C:1B:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628405D08F9607DC7DF0E500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 40717 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:d0:8f:96:07:dc:7d:f0:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=a3a955e9-3c82-4d5f-8599-e68ca0a3ed33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:a7:a0:0f:c8:ff:28:94:de:8c:84:c4:79: 0b:39:e7:89:8e:ed:99:ab:7b:ab:dd:17:fb:78:ce: c8:e4:c1:d9:f0:04:94:e7:26:17:90:1f:f1:8d:d0: 38:c3:d2:85:fd:27:37:ef:22:ad:bc:67:5e:cb:2b: ce:22:d3:37:ba:2a:57:68:ba:42:f4:d7:3e:6b:3f: b8:41:2e:91:22:1d:07:e2:47:78:45:e9:91:58:58: b6:6c:14:65:7a:e2:41:fd:08:44:61:e7:3f:56:55: 53:18:31:04:c5:1a:72:58:5f:b9:24:85:f9:9e:56: b0:6c:1c:32:7a:95:ef:a9:ae:47:4c:38:b3:03:43: 55:6f:0f:81:db:e9:e9:32:39:08:02:ce:04:40:d6: b8:df:d5:8d:ac:68:ca:8f:c7:5c:54:4f:8f:92:65: b6:18:df:36:f5:e4:04:fe:15:db:7f:b7:ea:66:61: 52:c6:b6:62:c9:1b:76:2f:fb:fd:56:e2:aa:e4:68: 4c:bd:b0:b5:95:b0:ea:ac:6c:7d:64:3b:46:01:b1: 5f:5d:4b:4b:60:6c:91:c0:5e:01:ad:67:44:e7:d2: e6:4a:c7:4d:43:2b:16:8b:9f:80:ee:72:ef:14:6d: c3:62:9b:66:91:7d:84:87:70:58:32:09:0e:84:77: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EE:1C:89:EA:8E:63:F0:E1:4E:03:2A:C3:30:AE:96:18:3C:1B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b9:6b:ca:e8:10:14:2b:9e:e5:8e:f2:9d:1f:7b:9c:76:96: 9a:5d:5e:11:0e:06:b1:61:46:7d:5f:e8:97:a9:42:04:0d:e1: 65:2d:f8:56:11:c4:42:12:ab:a2:24:aa:cc:c6:76:01:66:00: 9a:e4:6d:16:81:a2:f8:de:ce:cc:b6:b9:de:61:13:71:7b:a1: 48:d4:1e:ed:36:e7:db:13:42:2f:72:14:9c:81:8f:b3:ed:d5: c2:32:bd:24:be:6d:6f:92:2a:e0:2e:06:38:ee:13:56:aa:11: 9d:aa:86:05:72:19:22:ee:ee:a0:99:83:b2:eb:56:39:c1:53: 1d:45:b7:fc:83:d9:c7:00:9b:6c:b7:35:db:e2:b7:39:9e:9e: 2c:47:fa:29:e4:17:fb:cf:f1:13:37:31:ed:e9:5e:33:f9:11: c8:38:8d:ac:52:fd:72:e7:f5:66:16:4f:3d:da:8e:ef:3b:22: 3d:22:39:ae:75:1d:e2:e0:dd:c3:34:41:47:73:d1:d6:88:c8: 93:8c:8d:e9:40:ad:3a:5e:e3:ae:5e:14:71:66:4d:5f:78:b3: 56:3d:67:a2:62:c8:c0:24:9f:59:2f:02:bf:b7:b3:f4:d1:60: 46:7b:09:0c:4a:c8:39:b7:74:77:53:b4:08:d1:21:b4:dc:e9: 77:04:be:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAXQj5YH3H3w5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk YTNhOTU1ZTktM2M4Mi00ZDVmLTg1OTktZTY4Y2EwYTNlZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikinoA/I/yiU3oyExHkLOeeJju2Zq3ur3Rf7 eM7I5MHZ8ASU5yYXkB/xjdA4w9KF/Sc37yKtvGdeyyvOItM3uipXaLpC9Nc+az+4 QS6RIh0H4kd4RemRWFi2bBRleuJB/QhEYec/VlVTGDEExRpyWF+5JIX5nlawbBwy epXvqa5HTDizA0NVbw+B2+npMjkIAs4EQNa439WNrGjKj8dcVE+PkmW2GN829eQE /hXbf7fqZmFSxrZiyRt2L/v9VuKq5GhMvbC1lbDqrGx9ZDtGAbFfXUtLYGyRwF4B rWdE59LmSsdNQysWi5+A7nLvFG3DYptmkX2Eh3BYMgkOhHfh6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJbuHInqjmPw4U4DKsMwrpYYPBvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzExMDViMTctMmI1Ny0z MjcxLWI4YWEtN2E0MTI4ZDVmNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAruWvK6BAUK57ljvKdH3ucdpaaXV4RDgaxYUZ9X+iXqUIEDeFlLfhW EcRCEquiJKrMxnYBZgCa5G0WgaL43s7MtrneYRNxe6FI1B7tNufbE0IvchScgY+z 7dXCMr0kvm1vkirgLgY47hNWqhGdqoYFchki7u6gmYOy61Y5wVMdRbf8g9nHAJts tzXb4rc5np4sR/op5Bf7z/ETNzHt6V4z+RHIOI2sUv1y5/VmFk892o7vOyI9Ijmu dR3i4N3DNEFHc9HWiMiTjI3pQK06XuOuXhRxZk1feLNWPWeiYsjAJJ9ZLwK/t7P0 0WBGewkMSsg5t3R3U7QI0SG03Ol3BL6T -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:14 2025 by rpki-client