$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa File: 39ee7223-574a-3025-8c2b-2816b5636e65.roa (raw, json) Hash identifier: KZOAJYIIr0sjSVMlNVEGFBXOXgKQsBTH5nKGIv58FiE= Subject key identifier: 2F:E6:33:23:C6:DE:F8:C2:2A:22:9F:60:D5:2E:35:8E:E6:8F:A9:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A7F1BD06502897EDA48 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 397209 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:7f:1b:d0:65:02:89:7e:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=47cac34a-79c9-40fa-b508-602f96f158f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:f4:56:39:52:f9:95:67:ca:81:d7:cd:64: 4c:22:3f:be:7b:6c:cd:39:c9:83:01:c4:73:be:5e: 7e:3c:28:c0:2b:27:5d:05:47:4a:7e:66:dc:ca:25: 38:12:14:24:0a:77:21:6a:91:87:db:25:99:c2:99: 46:87:45:2a:83:69:7d:ff:b4:e7:38:7f:c4:ca:39: c9:b3:a3:45:a1:f5:47:32:1d:75:4e:9d:9c:a5:db: ce:bd:d3:d7:ac:40:ba:ff:22:79:6a:5c:99:b5:4d: c6:57:a8:92:87:6c:c4:3d:2f:05:81:7e:8f:b5:b2: c7:c0:6c:bf:2e:bc:0a:f8:d2:c0:96:fb:d3:ec:ed: 47:ed:22:de:7b:f8:cf:b7:9e:bc:f0:b8:dd:1f:3e: da:55:fd:58:ab:dc:41:60:aa:e1:59:34:19:b4:56: 8d:d0:7e:25:d5:2f:0a:10:0a:be:3f:93:7d:69:d5: 07:ff:96:29:b8:2a:86:70:eb:5c:60:65:92:ce:e9: 1b:5a:6f:45:9c:db:00:d5:df:eb:0f:d2:4e:99:91: 4e:aa:02:7d:a6:c1:bf:05:99:76:a6:1d:c5:31:10: b4:7d:cc:dd:37:f8:7f:c5:31:4f:0a:80:49:49:91: 05:b0:b6:93:60:8f:77:69:f6:f3:98:b1:c8:5b:4b: b2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E6:33:23:C6:DE:F8:C2:2A:22:9F:60:D5:2E:35:8E:E6:8F:A9:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:88:ce:1a:84:1f:26:42:33:f7:12:be:51:7e:bc:d9:06:3a: 6f:59:f2:01:df:5c:a9:ee:c2:9e:10:10:3d:c4:54:c6:63:fe: 9b:b6:aa:b3:72:29:58:dc:0f:17:78:f3:93:a4:33:62:0d:eb: 73:4d:21:f2:f2:d2:f9:05:13:0b:84:b8:cc:38:03:02:7d:c8: 0f:3d:15:32:11:bd:ba:71:70:a3:03:1d:be:ac:b8:da:de:a3: 44:cf:29:ad:5e:34:06:da:ec:6f:59:5c:40:da:08:9d:43:ba: d8:0b:42:e7:76:1c:2d:28:12:17:27:79:11:65:4a:0b:34:48: 6d:32:59:8b:8f:11:e9:4c:b8:d1:6c:9a:99:04:e9:e7:2d:11: 18:cf:ca:4a:1d:59:a2:1b:34:3a:54:4a:d9:f8:da:c5:72:b6: 00:d4:d7:79:94:fd:4a:a1:9b:92:db:6d:9e:ef:9a:ea:8d:46: c0:b5:55:96:6e:5b:90:33:69:1b:00:2c:00:f0:67:6f:60:ab: 85:1d:2d:a5:2f:4d:0f:a4:2c:bc:4f:ff:23:7f:93:67:6f:3e: 3b:89:8c:5e:17:04:2c:95:d4:b3:74:3a:fb:0f:bd:42:31:6d: 73:cc:05:6a:8b:3b:84:c8:b7:17:9c:d2:07:0c:a7:89:17:ad: 53:b1:5d:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAp/G9BlAol+2kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NDdjYWMzNGEtNzljOS00MGZhLWI1MDgtNjAyZjk2ZjE1OGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqD0VjlS+ZVnyoHXzWRMIj++e2zNOcmDAcRz vl5+PCjAKyddBUdKfmbcyiU4EhQkCnchapGH2yWZwplGh0Uqg2l9/7TnOH/EyjnJ s6NFofVHMh11Tp2cpdvOvdPXrEC6/yJ5alyZtU3GV6iSh2zEPS8FgX6PtbLHwGy/ LrwK+NLAlvvT7O1H7SLee/jPt5688LjdHz7aVf1Yq9xBYKrhWTQZtFaN0H4l1S8K EAq+P5N9adUH/5YpuCqGcOtcYGWSzukbWm9FnNsA1d/rD9JOmZFOqgJ9psG/BZl2 ph3FMRC0fczdN/h/xTFPCoBJSZEFsLaTYI93afbzmLHIW0uysQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC/mMyPG3vjCKiKfYNUuNY7mj6lSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzllZTcyMjMtNTc0YS0z MDI1LThjMmItMjgxNmI1NjM2ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZiM4ahB8mQjP3Er5RfrzZBjpvWfIB31yp7sKeEBA9xFTGY/6btqqz cilY3A8XePOTpDNiDetzTSHy8tL5BRMLhLjMOAMCfcgPPRUyEb26cXCjAx2+rLja 3qNEzymtXjQG2uxvWVxA2gidQ7rYC0LndhwtKBIXJ3kRZUoLNEhtMlmLjxHpTLjR bJqZBOnnLREYz8pKHVmiGzQ6VErZ+NrFcrYA1Nd5lP1KoZuS222e75rqjUbAtVWW bluQM2kbACwA8GdvYKuFHS2lL00PpCy8T/8jf5Nnbz47iYxeFwQsldSzdDr7D71C MW1zzAVqizuEyLcXnNIHDKeJF61TsV3h -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:54 2025 by rpki-client