$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa File: 3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa (raw, json) Hash identifier: FazpnTl/iAngEnZf47qin3o6jb7QTd9u7QsY3dpQU1I= Subject key identifier: 70:5C:C8:BC:24:D4:2D:4F:5E:CE:94:47:5D:72:D2:3D:FE:A2:7F:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628406A96032A6514C240320 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396549 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:a9:60:32:a6:51:4c:24:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=fbe4c06e-07e6-4f08-819f-5f076e3a412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:a2:12:9c:c4:97:74:07:6c:20:e2:16:82: 07:c5:ad:a9:cd:df:f9:1c:16:04:dc:90:86:98:ab: 85:df:09:36:f4:da:aa:a3:14:14:38:7c:81:44:da: 65:40:65:98:e5:a7:a1:9e:33:44:d5:f9:5e:b2:12: 95:1f:13:14:e5:07:77:21:7c:5a:52:05:12:2e:b2: eb:f9:0c:b1:28:be:15:f5:c7:80:53:6d:11:13:4b: 3c:e3:be:73:51:25:57:5f:27:86:cf:17:5f:62:01: 7d:14:54:31:e6:12:81:85:42:d9:63:dd:56:6a:ca: 0f:f9:05:85:e0:6b:03:4c:2e:e7:20:4c:73:69:e1: d1:a9:38:31:43:80:d1:84:61:42:c1:82:1a:30:7c: 1c:92:ba:18:e4:d9:68:d3:fb:41:37:9e:16:4e:05: 51:c9:a8:31:2e:11:0c:09:9f:3a:31:c8:8e:fc:f0: 63:76:13:52:f0:8a:ca:f5:92:02:ad:c8:43:c2:ce: 69:7c:b4:56:06:9c:bf:c2:5d:96:5f:8d:4b:0b:ad: 04:a4:12:4e:73:2c:64:d0:77:52:d5:b4:0a:4d:27: ce:80:28:60:6f:25:3d:86:5c:a9:58:20:d9:dc:7f: 87:ea:9b:10:b0:4a:76:ad:eb:1c:64:2f:b2:0d:15: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:C8:BC:24:D4:2D:4F:5E:CE:94:47:5D:72:D2:3D:FE:A2:7F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3717f0-4ead-3295-87d2-b0ceed251bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c9:fe:ab:09:58:d2:09:cc:52:ae:b9:99:86:a8:fb:93:35: 68:40:de:2e:86:59:9c:e6:20:b9:f9:4f:30:2f:a4:0d:79:17: 27:e6:6c:ad:14:b2:60:7e:6a:1d:a3:ab:73:be:e9:8f:e6:fd: 60:d3:9e:5d:27:65:5d:46:d2:75:ac:3e:84:88:62:ff:c1:5d: b0:7e:31:2e:5d:d0:d1:13:cb:5d:ac:8e:ac:2e:69:ec:29:b5: 6c:13:0b:c3:fe:a3:b8:e1:af:f1:b7:b1:df:b7:b1:46:13:8a: a1:e3:9a:dd:24:ef:10:c0:9d:e1:b7:7a:bd:e4:4f:1e:92:fe: 14:d4:7a:59:63:87:0a:de:ae:22:b3:cf:f3:64:6c:b2:00:3d: 32:b8:6e:70:e7:5c:3f:c5:82:bb:8b:93:f0:ff:5f:26:10:85: 57:b3:ec:52:a5:22:f1:a6:ef:65:6a:e7:ca:00:78:35:e0:fb: 21:1f:0e:41:cf:83:ac:19:0f:a2:4f:91:00:c8:82:e2:58:e3: 6b:93:71:69:ef:e8:68:66:54:a9:4e:b6:2e:a7:30:cc:ad:88: d6:36:a1:38:5f:59:c4:7c:91:b8:91:54:03:75:71:ef:2b:01: a5:ac:5f:de:05:aa:b3:cf:09:35:3d:22:cd:91:2a:8e:90:a0: 20:a0:bd:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAapYDKmUUwkAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk ZmJlNGMwNmUtMDdlNi00ZjA4LTgxOWYtNWYwNzZlM2E0MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2eiEpzEl3QHbCDiFoIHxa2pzd/5HBYE3JCG mKuF3wk29NqqoxQUOHyBRNplQGWY5aehnjNE1fleshKVHxMU5Qd3IXxaUgUSLrLr +QyxKL4V9ceAU20RE0s8475zUSVXXyeGzxdfYgF9FFQx5hKBhULZY91WasoP+QWF 4GsDTC7nIExzaeHRqTgxQ4DRhGFCwYIaMHwckroY5Nlo0/tBN54WTgVRyagxLhEM CZ86MciO/PBjdhNS8IrK9ZICrchDws5pfLRWBpy/wl2WX41LC60EpBJOcyxk0HdS 1bQKTSfOgChgbyU9hlypWCDZ3H+H6psQsEp2rescZC+yDRVyjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHBcyLwk1C1PXs6UR11y0j3+on/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2UzNzE3ZjAtNGVhZC0z Mjk1LTg3ZDItYjBjZWVkMjUxYmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8yf6rCVjSCcxSrrmZhqj7kzVoQN4uhlmc5iC5+U8wL6QNeRcn5myt FLJgfmodo6tzvumP5v1g055dJ2VdRtJ1rD6EiGL/wV2wfjEuXdDRE8tdrI6sLmns KbVsEwvD/qO44a/xt7Hft7FGE4qh45rdJO8QwJ3ht3q95E8ekv4U1HpZY4cK3q4i s8/zZGyyAD0yuG5w51w/xYK7i5Pw/18mEIVXs+xSpSLxpu9laufKAHg14PshHw5B z4OsGQ+iT5EAyILiWONrk3Fp7+hoZlSpTrYupzDMrYjWNqE4X1nEfJG4kVQDdXHv KwGlrF/eBaqzzwk1PSLNkSqOkKAgoL0u -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:31 2025 by rpki-client