$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa File: 3910da99-0422-3b03-a949-2956cea75d7c.roa (raw, json) Hash identifier: naOv7ccBibzOL/FlYClajfmuHXqZytWKYLrdAZQ7AF0= Subject key identifier: 73:D1:4E:BC:09:2D:70:3E:B5:B8:F9:2F:46:57:84:A4:79:B1:BD:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840DADED2A04ADB8BC8900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396543 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:ad:ed:2a:04:ad:b8:bc:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=2278804f-6a08-4980-b0ec-11afbc0c1071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:e4:a5:1e:d8:cb:72:ca:a2:a8:9f:16:bb: fb:9a:40:ff:5f:97:4a:ae:c1:68:7a:92:93:8e:32: 11:65:1c:ec:b8:4e:91:8b:5b:4c:b1:25:b1:2e:47: 6a:f2:ae:da:46:47:21:7d:c9:f3:97:ff:13:f5:69: cf:15:03:ca:f3:62:0f:c2:78:eb:9e:40:22:fa:e3: f3:8d:c2:39:47:72:bf:63:33:b1:2f:4a:ef:d7:6c: c8:2c:87:f3:45:1f:cc:ca:54:6f:24:56:bc:3b:25: e6:c3:f4:22:20:54:70:06:cd:27:e1:ec:ac:48:ac: ad:10:1d:84:ae:72:48:d1:ad:6d:27:a2:61:1d:70: 79:c4:46:c9:f0:a6:97:fb:55:ed:ea:6d:f8:22:03: fe:6d:9f:1d:7f:d2:2b:34:fe:2f:51:8f:78:14:42: 00:de:94:a0:e5:6d:d1:78:0d:1e:55:ab:34:2f:10: 15:ef:fc:b7:20:f7:c2:81:70:1a:d6:72:c6:3c:d1: 96:aa:fa:0a:e7:c6:57:dd:b6:10:9e:3c:c9:9c:7f: 79:0c:cb:cd:98:16:1c:c8:95:0e:08:b7:ad:8f:5a: 2e:f3:22:19:8b:60:f9:7e:d8:20:29:84:82:8b:35: 68:20:56:db:4f:9f:be:9d:23:9c:9c:0f:c9:5e:ef: 94:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D1:4E:BC:09:2D:70:3E:B5:B8:F9:2F:46:57:84:A4:79:B1:BD:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e0:ad:e0:9b:51:a6:87:d5:6b:7c:15:0f:d9:2d:be:c5:2c: 3f:14:37:89:d6:24:8d:95:dc:53:78:ef:fb:a5:3f:5e:ba:a2: a0:05:cd:2e:b6:85:be:13:56:af:9d:c6:1e:d1:70:61:e6:62: f6:8e:7a:12:07:b4:98:6f:0a:02:7d:35:3a:30:4f:db:83:46: 59:7f:c1:07:da:9b:39:13:a2:32:2e:56:98:06:6f:16:aa:e1: 31:c5:12:00:64:d0:45:a8:2e:01:c6:4c:35:ce:a7:92:6d:26: 43:45:c9:56:27:92:fd:27:7e:e2:d1:a4:0a:a3:43:5e:eb:a2: 4d:1a:89:ee:81:d7:c4:d4:c0:2b:1d:7f:6e:5f:1c:1a:11:aa: c2:ef:ad:5c:45:99:5c:75:10:3d:36:d0:4b:35:35:ca:c4:d4: 12:6c:05:48:f0:4f:1c:0a:e7:bc:1b:62:a1:e3:d6:84:e6:7e: 90:a0:95:15:9b:4b:b0:1d:87:17:7a:84:32:98:18:b1:22:b9: 6c:66:8e:fe:9f:53:13:7b:a3:b9:07:e8:b1:9b:5f:0a:92:44: db:86:bc:65:75:21:f3:a0:92:53:29:04:86:5e:2e:1b:4f:f9: c2:fe:6e:3d:0b:f3:d3:78:1f:e0:8d:f3:18:b4:8e:ac:20:e2: 5d:00:25:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA2t7SoErbi8iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MjI3ODgwNGYtNmEwOC00OTgwLWIwZWMtMTFhZmJjMGMxMDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbkpR7Yy3LKoqifFrv7mkD/X5dKrsFoepKT jjIRZRzsuE6Ri1tMsSWxLkdq8q7aRkchfcnzl/8T9WnPFQPK82IPwnjrnkAi+uPz jcI5R3K/YzOxL0rv12zILIfzRR/MylRvJFa8OyXmw/QiIFRwBs0n4eysSKytEB2E rnJI0a1tJ6JhHXB5xEbJ8KaX+1Xt6m34IgP+bZ8df9IrNP4vUY94FEIA3pSg5W3R eA0eVas0LxAV7/y3IPfCgXAa1nLGPNGWqvoK58ZX3bYQnjzJnH95DMvNmBYcyJUO CLetj1ou8yIZi2D5ftggKYSCizVoIFbbT5++nSOcnA/JXu+UpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHPRTrwJLXA+tbj5L0ZXhKR5sb1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzkxMGRhOTktMDQyMi0z YjAzLWE5NDktMjk1NmNlYTc1ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBr4K3gm1Gmh9VrfBUP2S2+xSw/FDeJ1iSNldxTeO/7pT9euqKgBc0u toW+E1avncYe0XBh5mL2jnoSB7SYbwoCfTU6ME/bg0ZZf8EH2ps5E6IyLlaYBm8W quExxRIAZNBFqC4Bxkw1zqeSbSZDRclWJ5L9J37i0aQKo0Ne66JNGonugdfE1MAr HX9uXxwaEarC761cRZlcdRA9NtBLNTXKxNQSbAVI8E8cCue8G2Kh49aE5n6QoJUV m0uwHYcXeoQymBixIrlsZo7+n1MTe6O5B+ixm18KkkTbhrxldSHzoJJTKQSGXi4b T/nC/m49C/PTeB/gjfMYtI6sIOJdACXP -----END CERTIFICATE-----Generated at Wed Jul 23 17:27:43 2025 by rpki-client