$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa File: 3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa (raw, json) Hash identifier: TkkZSr9h66QcaTURlNGD/Y4OYDJ1cOMHrlpPVZyytiw= Subject key identifier: 42:CC:8E:0B:B0:92:0B:F0:65:67:97:E6:A9:B9:01:87:FA:2A:B4:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840683FCBD5D6C588D71C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396593 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:83:fc:bd:5d:6c:58:8d:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=d6d03d04-9ebf-49d8-ba05-bdb04e25ba69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:82:eb:95:b5:cb:2a:f6:3f:a7:70:e7:5b:95: 76:d9:8b:87:cf:5a:7f:6a:52:d7:29:fb:76:af:97: f8:2e:c7:f1:13:8c:d3:40:d9:36:7a:47:68:1a:13: 74:36:44:31:eb:14:dc:2a:ba:a6:15:ee:1c:19:a4: 8b:6e:6a:41:46:3d:54:3b:2c:fe:c6:57:41:8a:f5: 09:2f:83:be:e2:f3:6e:d4:7f:9d:e4:5d:9c:f3:20: 03:a3:ab:7e:e5:8d:07:8e:d4:39:e8:75:99:a8:71: 06:25:bf:91:20:a3:49:14:48:0b:28:ea:c6:74:95: 92:9c:11:9d:69:37:6e:ba:aa:a6:38:20:bf:f0:5b: 90:87:8f:63:b6:15:6d:45:16:9f:82:88:46:32:8b: 21:d5:52:23:da:66:bb:e8:b0:51:79:b1:ce:9b:7e: ee:f1:59:c4:22:51:4b:90:fc:a4:dd:8f:38:28:e4: 54:07:94:9d:13:e9:63:4e:50:b9:9e:53:e8:f7:db: c5:be:25:55:54:68:08:5c:f6:01:c9:2b:76:e6:e4: 19:99:02:0f:2a:d3:99:0f:ff:53:4d:18:d3:22:d8: 8e:6e:4c:66:f5:1d:9e:02:87:92:0e:ec:eb:91:53: 6b:18:9c:be:8a:bf:f3:0d:1d:5b:26:1c:7f:78:31: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:8E:0B:B0:92:0B:F0:65:67:97:E6:A9:B9:01:87:FA:2A:B4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1a:c3:ef:4a:e9:e4:22:43:50:4a:59:e7:fc:45:4f:9b:81: c5:77:a9:74:24:39:41:52:9f:c4:b2:15:21:6f:66:68:4a:6a: 8b:d0:87:15:fe:d9:6d:c3:e2:7d:39:62:37:f5:3c:2c:bb:58: 10:e7:63:6e:fe:a0:0a:4f:63:c3:a8:39:b8:d0:63:79:69:ed: 37:7b:3d:b2:e5:4e:ea:f4:ab:a8:47:b2:af:7a:b9:d3:dd:a1: d6:04:19:f5:79:fd:1d:c5:21:49:1e:03:ec:cb:b6:5e:f7:1c: 5c:9c:34:58:b2:24:2b:24:5d:d4:de:dd:89:08:b6:8e:c4:21: f2:d0:2c:10:26:30:70:d3:3c:8a:74:22:2f:5e:da:95:7d:14: 83:77:1e:55:66:5a:a3:e2:73:f7:3b:c3:75:e8:c9:9b:7d:a2: 38:23:98:94:81:d7:cf:b8:12:49:fe:5c:ee:62:80:5d:4b:39: 1d:8a:e5:0d:f8:a4:6c:8d:24:d0:aa:cb:ae:29:95:f7:e1:fd: b3:be:be:e8:73:40:2a:4f:07:6c:6a:7c:59:b4:e3:62:85:43: 65:12:67:68:fb:6a:e3:3e:5a:ec:5f:29:3e:f0:50:05:fb:df: 71:07:18:a7:2e:2e:e2:6f:e0:4c:0c:3e:6d:8d:01:32:46:c2: 03:da:e3:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAaD/L1dbFiNccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk ZDZkMDNkMDQtOWViZi00OWQ4LWJhMDUtYmRiMDRlMjViYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4LrlbXLKvY/p3DnW5V22YuHz1p/alLXKft2 r5f4LsfxE4zTQNk2ekdoGhN0NkQx6xTcKrqmFe4cGaSLbmpBRj1UOyz+xldBivUJ L4O+4vNu1H+d5F2c8yADo6t+5Y0HjtQ56HWZqHEGJb+RIKNJFEgLKOrGdJWSnBGd aTduuqqmOCC/8FuQh49jthVtRRafgohGMosh1VIj2ma76LBRebHOm37u8VnEIlFL kPyk3Y84KORUB5SdE+ljTlC5nlPo99vFviVVVGgIXPYBySt25uQZmQIPKtOZD/9T TRjTItiObkxm9R2eAoeSDuzrkVNrGJy+ir/zDR1bJhx/eDHjXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFELMjguwkgvwZWeX5qm5AYf6KrRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2MyZDRkMWEtMTEzYS0z ZmEzLTg2MzAtN2ZjNjcxMDE2NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByGsPvSunkIkNQSlnn/EVPm4HFd6l0JDlBUp/EshUhb2ZoSmqL0IcV /tltw+J9OWI39Twsu1gQ52Nu/qAKT2PDqDm40GN5ae03ez2y5U7q9KuoR7KvernT 3aHWBBn1ef0dxSFJHgPsy7Ze9xxcnDRYsiQrJF3U3t2JCLaOxCHy0CwQJjBw0zyK dCIvXtqVfRSDdx5VZlqj4nP3O8N16MmbfaI4I5iUgdfPuBJJ/lzuYoBdSzkdiuUN +KRsjSTQqsuuKZX34f2zvr7oc0AqTwdsanxZtONihUNlEmdo+2rjPlrsXyk+8FAF +99xBxinLi7ib+BMDD5tjQEyRsID2uMg -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:26 2025 by rpki-client