$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c247918-40f5-3422-9ea6-af22c0e852d4.roa File: 3c247918-40f5-3422-9ea6-af22c0e852d4.roa (raw, json) Hash identifier: 46OYJcQkrYn0AJIFgZZwm8kGWjEVANZO+cffBiEKG/I= Subject key identifier: 62:BF:F9:55:95:36:2B:62:DD:83:DE:8B:B4:3B:90:37:F2:EC:6E:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840C8A3D9A72DF3E9C9A10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c247918-40f5-3422-9ea6-af22c0e852d4.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396579 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:8a:3d:9a:72:df:3e:9c:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=86792805-b44e-4e6f-993e-aa4a6369be95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7e:38:6c:a9:69:4e:f9:d7:dc:d9:52:79:40: 2c:52:0d:11:fc:82:95:bc:d2:6f:3e:36:c7:34:45: c1:4a:60:24:35:ca:99:8c:21:48:6b:81:ef:4c:01: c3:09:8c:d4:06:dc:a5:c6:70:d4:e4:92:ab:b5:09: b8:b0:b5:c8:51:b9:92:05:f5:9f:65:f7:5f:18:66: b6:93:69:5e:30:ef:57:44:66:a2:39:37:64:c4:35: 9a:82:5d:90:06:f5:4c:04:04:88:45:b4:0f:6a:d5: 00:03:38:7f:fe:07:d9:67:f3:1f:c3:52:bd:15:0f: c5:84:19:8d:ee:e8:17:16:85:e7:85:d8:e8:f4:15: a3:ff:bb:eb:31:c5:df:66:d2:13:16:e4:3b:a8:be: a0:2e:37:59:59:87:dc:5a:81:6e:e7:6b:be:4c:1f: 6c:b0:ca:b3:a1:87:68:21:ae:27:1c:1f:cc:a6:f7: a0:3e:fb:8e:83:0a:e2:c2:93:7c:3b:e0:12:18:96: e8:24:97:22:3c:bf:65:45:0a:0e:53:8e:b5:53:3f: e1:e9:2d:ff:15:8f:83:42:4d:33:ac:bc:61:48:1e: 88:e5:54:aa:c2:04:a1:f7:26:9e:ab:78:3f:c4:6b: f0:13:9f:80:ea:27:ff:6d:17:86:d2:b5:37:20:d4: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BF:F9:55:95:36:2B:62:DD:83:DE:8B:B4:3B:90:37:F2:EC:6E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c247918-40f5-3422-9ea6-af22c0e852d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b8:64:ff:e0:a7:50:65:6d:45:21:bf:6e:aa:6f:23:2b:b9: df:e4:77:fd:d2:a4:44:2c:74:77:2d:e3:97:a7:79:40:2d:54: 86:e2:3b:42:f6:df:29:6f:bc:10:fd:4d:31:43:9a:cb:12:90: 51:18:8f:4d:44:13:d8:df:c8:79:8a:30:cd:68:6a:dc:e9:4b: 27:b4:71:19:15:af:b7:86:fc:8a:04:6c:38:04:75:ca:ae:6b: b1:2a:76:59:53:90:03:35:c1:fb:d3:d5:41:64:84:ed:2f:8f: 28:97:fb:5b:1e:fa:23:cd:77:e4:af:07:84:79:d9:32:00:bb: 77:bd:28:70:04:35:f2:85:4f:c4:4a:5c:7a:13:83:cd:4a:5f: 35:fe:e5:36:c1:29:ab:ef:42:c0:e9:ad:d0:c5:d5:ff:7a:31: 26:29:c4:89:db:9d:65:e6:04:1e:e8:55:37:e8:94:1f:3b:0f: 2b:e1:b5:10:d6:af:41:e8:ca:43:c5:fc:1c:fa:e8:58:80:59: b4:e4:62:01:c5:fe:95:01:4c:ad:ec:c9:04:b7:3d:e0:49:9c: 81:8f:b8:90:55:32:2d:d8:f2:8e:6b:17:38:10:71:6f:64:b4: 6d:b0:07:8a:c3:bd:0d:64:52:58:0d:ed:47:5d:ed:e3:e0:d7: 80:23:b4:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAyKPZpy3z6cmhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk ODY3OTI4MDUtYjQ0ZS00ZTZmLTk5M2UtYWE0YTYzNjliZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn44bKlpTvnX3NlSeUAsUg0R/IKVvNJvPjbH NEXBSmAkNcqZjCFIa4HvTAHDCYzUBtylxnDU5JKrtQm4sLXIUbmSBfWfZfdfGGa2 k2leMO9XRGaiOTdkxDWagl2QBvVMBASIRbQPatUAAzh//gfZZ/Mfw1K9FQ/FhBmN 7ugXFoXnhdjo9BWj/7vrMcXfZtITFuQ7qL6gLjdZWYfcWoFu52u+TB9ssMqzoYdo Ia4nHB/MpvegPvuOgwriwpN8O+ASGJboJJciPL9lRQoOU461Uz/h6S3/FY+DQk0z rLxhSB6I5VSqwgSh9yaeq3g/xGvwE5+A6if/bReG0rU3INSvywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGK/+VWVNiti3YPei7Q7kDfy7G46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2MyNDc5MTgtNDBmNS0z NDIyLTllYTYtYWYyMmMwZTg1MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAnuGT/4KdQZW1FIb9uqm8jK7nf5Hf90qRELHR3LeOXp3lALVSG4jtC 9t8pb7wQ/U0xQ5rLEpBRGI9NRBPY38h5ijDNaGrc6UsntHEZFa+3hvyKBGw4BHXK rmuxKnZZU5ADNcH709VBZITtL48ol/tbHvojzXfkrweEedkyALt3vShwBDXyhU/E Slx6E4PNSl81/uU2wSmr70LA6a3QxdX/ejEmKcSJ251l5gQe6FU36JQfOw8r4bUQ 1q9B6MpDxfwc+uhYgFm05GIBxf6VAUyt7MkEtz3gSZyBj7iQVTIt2PKOaxc4EHFv ZLRtsAeKw70NZFJYDe1HXe3j4NeAI7QZ -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:20 2025 by rpki-client