$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/391927d0-a43f-3da3-980a-c277ecab3e3f.roa File: 391927d0-a43f-3da3-980a-c277ecab3e3f.roa (raw, json) Hash identifier: LK7AhQgompDxrKs6SAWPy59ltblVtJLw7y4U1Mae79Q= Subject key identifier: AA:9B:16:C3:71:A5:86:04:47:DE:32:77:E3:8C:DD:5A:E3:6F:F6:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840871DC1C1ACA1A9DF400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/391927d0-a43f-3da3-980a-c277ecab3e3f.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396582 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:71:dc:1c:1a:ca:1a:9d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=4f38b3e9-3650-409b-8d18-9fac28eac7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:ab:0f:5d:d7:20:7f:ec:ff:45:21:79:ec: b2:fd:c0:6a:a6:5b:07:2e:67:02:9c:4a:0d:95:80: fd:fb:48:83:e4:6d:00:c3:2a:d1:c8:6e:36:9a:06: 00:9b:82:72:28:ed:92:34:40:3a:16:5f:a1:96:6a: 21:a5:2d:86:9d:3d:46:36:11:23:da:65:fe:7c:84: 78:45:08:6d:0a:16:0f:29:6e:5c:0b:b2:86:a0:1a: 8b:ca:ed:39:31:4c:92:92:88:a1:15:73:74:12:e5: 40:3b:1f:c5:cb:8a:73:ee:e0:fa:f7:da:e5:69:c2: 0f:8c:f4:ab:23:28:b6:5c:03:8a:93:7c:68:e6:ee: 1c:12:d8:c0:70:6f:9d:27:96:db:4b:c3:0b:56:78: 90:a1:4e:c5:e4:44:25:7b:fe:cd:8a:8f:3b:97:d4: 9c:0c:8b:f5:f7:67:36:fa:fc:37:33:ff:d0:e5:12: d8:83:98:e3:38:64:37:70:8f:89:6a:6b:d0:d3:36: f8:1d:2d:b9:da:e4:c8:5f:85:9c:ce:69:6d:a6:9f: fe:39:6d:c1:88:a1:a0:28:16:ba:c1:bb:49:24:67: 7f:68:ff:6e:d9:89:b5:59:0e:1d:13:40:5d:b7:53: a7:75:d7:ca:d9:6f:31:33:69:83:29:95:3a:bf:09: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9B:16:C3:71:A5:86:04:47:DE:32:77:E3:8C:DD:5A:E3:6F:F6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/391927d0-a43f-3da3-980a-c277ecab3e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:77:f6:f6:8b:35:3f:88:e7:8f:f9:8c:c1:35:be:9e:77:cf: 48:d8:67:eb:9f:ca:ee:49:b1:ee:90:54:2c:52:0b:68:68:bd: 38:d2:8f:27:a4:87:f5:2d:6b:0f:65:9d:1f:f9:2a:24:fa:cb: 35:dd:4f:bd:14:50:74:60:38:b3:84:92:d9:d2:f2:95:78:fa: 04:a5:3e:b4:80:d5:fe:2d:19:75:9a:50:8c:ae:a2:41:7c:2e: a8:b4:60:d9:61:69:46:d0:15:e8:d9:61:3f:7b:4c:2e:91:51: 79:1d:82:9e:fe:31:a2:3f:04:34:3a:89:4b:97:4b:1e:27:a7: b7:99:7c:40:05:d6:c9:c6:af:40:12:81:31:d1:e5:9b:e1:90: b1:75:97:aa:a1:56:24:ca:18:6e:94:74:a9:af:3f:c7:0a:43: 93:31:b1:32:f7:65:21:01:af:1d:6a:64:e2:2b:c5:6f:45:bf: f0:85:2d:53:bb:bf:f0:f0:99:1b:2e:b9:ce:b7:ac:7a:a8:fd: 70:0d:be:00:8a:f1:4f:77:b2:52:a5:1c:c0:ee:ed:f5:de:95: 71:3c:35:1c:ad:16:c3:11:d9:92:dd:8f:cb:04:52:01:d0:6c: 7c:62:cf:c7:5a:ba:aa:48:f2:84:71:73:e1:41:39:1b:1f:fb: b7:ab:1a:50 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAhx3Bwayhqd9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk NGYzOGIzZTktMzY1MC00MDliLThkMTgtOWZhYzI4ZWFjN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0WrD13XIH/s/0Uheeyy/cBqplsHLmcCnEoN lYD9+0iD5G0AwyrRyG42mgYAm4JyKO2SNEA6Fl+hlmohpS2GnT1GNhEj2mX+fIR4 RQhtChYPKW5cC7KGoBqLyu05MUySkoihFXN0EuVAOx/Fy4pz7uD699rlacIPjPSr Iyi2XAOKk3xo5u4cEtjAcG+dJ5bbS8MLVniQoU7F5EQle/7Nio87l9ScDIv192c2 +vw3M//Q5RLYg5jjOGQ3cI+JamvQ0zb4HS252uTIX4Wczmltpp/+OW3BiKGgKBa6 wbtJJGd/aP9u2Ym1WQ4dE0Bdt1OnddfK2W8xM2mDKZU6vwmbZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKqbFsNxpYYER94yd+OM3Vrjb/aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzkxOTI3ZDAtYTQzZi0z ZGEzLTk4MGEtYzI3N2VjYWIzZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAud/b2izU/iOeP+YzBNb6ed89I2Gfrn8ruSbHukFQsUgtoaL040o8n pIf1LWsPZZ0f+Sok+ss13U+9FFB0YDizhJLZ0vKVePoEpT60gNX+LRl1mlCMrqJB fC6otGDZYWlG0BXo2WE/e0wukVF5HYKe/jGiPwQ0OolLl0seJ6e3mXxABdbJxq9A EoEx0eWb4ZCxdZeqoVYkyhhulHSprz/HCkOTMbEy92UhAa8damTiK8VvRb/whS1T u7/w8JkbLrnOt6x6qP1wDb4AivFPd7JSpRzA7u313pVxPDUcrRbDEdmS3Y/LBFIB 0Gx8Ys/HWrqqSPKEcXPhQTkbH/u3qxpQ -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:23 2025 by rpki-client