$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa File: 3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa (raw, json) Hash identifier: +qdHsfsYcV5JXgpfebmo3g4wmFt1ngLHMB3zXeyTx4A= Subject key identifier: 36:C7:CB:34:FA:72:7D:FB:9C:C9:43:85:24:99:B9:D7:B8:EA:22:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840B5177FBFCA9BC79D5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396617 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:51:77:fb:fc:a9:bc:79:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=57c1a5dd-df87-4911-8a79-bc0b1256a36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:c7:66:f1:51:90:34:29:0c:be:9b:c5:68: bb:cc:09:5f:67:cb:6b:08:b4:18:93:33:76:c3:51: 2f:95:0c:42:da:63:2d:0a:cb:f8:e2:3d:c1:3f:47: 4c:4a:f8:52:6d:8b:fc:f6:87:48:f6:94:f1:77:06: db:17:ea:2f:0c:cb:43:f8:27:4c:32:05:64:a2:cf: e8:8d:c9:75:d8:32:8b:16:1a:9a:25:30:77:03:32: 4a:cb:5d:d5:65:8c:d3:ee:17:2f:d4:1e:dc:b5:2c: f0:a5:a5:f1:e9:38:06:5a:8e:f6:bd:e6:24:e6:42: 0d:60:6a:71:77:fd:1d:ee:cb:47:62:94:54:ba:d5: 62:b1:5f:79:68:e0:30:5b:e6:a6:0e:ef:38:11:80: 0c:f6:3b:f4:44:41:e6:75:24:42:23:19:a5:28:69: ac:fe:3c:0c:ec:3f:32:c4:da:83:e2:b5:51:09:9b: 14:f9:db:e1:a3:af:5a:07:cd:52:ee:84:00:d7:ba: bc:dc:6d:1f:b7:a8:11:5a:4c:56:ad:92:47:be:36: 7f:20:36:45:bf:61:2f:e7:81:ef:91:af:0d:ce:81: b2:c6:0b:7a:47:03:0c:ed:c6:03:46:8f:db:66:1a: 00:95:8f:4f:a3:b7:f4:db:67:66:76:3f:39:e2:b6: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C7:CB:34:FA:72:7D:FB:9C:C9:43:85:24:99:B9:D7:B8:EA:22:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:47:c9:75:56:ab:69:96:78:59:71:4b:03:96:c7:a6:f3:f2: c2:19:c6:ca:3a:5e:1e:92:1c:5b:46:58:0b:7a:11:be:86:ba: 95:a6:e7:42:47:67:a6:8f:51:32:6e:80:8b:00:ee:f0:30:78: 64:8a:f8:5e:c8:bf:6a:7d:db:1a:e8:9a:cc:e5:ff:97:34:41: 87:42:0a:55:ad:88:6c:3a:7a:87:2c:d3:f9:79:d4:d6:9a:f4: 81:21:f3:5a:35:d4:dc:93:58:d1:1d:62:2e:7e:4f:85:b1:e7: bc:1f:e8:7c:83:40:17:fb:4f:4d:a8:5b:0d:b5:5c:52:90:1c: 68:78:6d:11:78:7b:c0:94:95:49:cf:4f:e4:b0:99:fd:a6:d0: 88:59:15:f0:a9:fa:eb:5a:c0:67:82:15:06:a9:67:b9:e3:d0: ee:3e:4b:24:62:0b:88:01:12:67:88:9a:e0:d1:7c:3b:50:0a: cc:11:ee:ef:85:78:69:44:18:c7:74:64:e1:50:6d:14:e7:dc: 9d:22:fd:14:89:ab:54:e1:af:dd:48:32:f1:97:4d:a0:d6:a3: 21:5d:42:41:a8:f7:48:fb:83:0b:84:14:67:cd:7a:65:0c:94: 24:4e:35:93:c7:12:cc:b7:59:6d:66:1e:48:ce:41:2a:0a:32: e1:bc:13:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAtRd/v8qbx51cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NTdjMWE1ZGQtZGY4Ny00OTExLThhNzktYmMwYjEyNTZhMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6XHZvFRkDQpDL6bxWi7zAlfZ8trCLQYkzN2 w1EvlQxC2mMtCsv44j3BP0dMSvhSbYv89odI9pTxdwbbF+ovDMtD+CdMMgVkos/o jcl12DKLFhqaJTB3AzJKy13VZYzT7hcv1B7ctSzwpaXx6TgGWo72veYk5kINYGpx d/0d7stHYpRUutVisV95aOAwW+amDu84EYAM9jv0REHmdSRCIxmlKGms/jwM7D8y xNqD4rVRCZsU+dvho69aB81S7oQA17q83G0ft6gRWkxWrZJHvjZ/IDZFv2Ev54Hv ka8NzoGyxgt6RwMM7cYDRo/bZhoAlY9Po7f022dmdj854rbc4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDbHyzT6cn37nMlDhSSZude46iL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U2NmZiMWMtZjIwMy0z ZmU2LWJhNGItNzhiMDdjZjg2YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLR8l1VqtplnhZcUsDlsem8/LCGcbKOl4ekhxbRlgLehG+hrqVpudC R2emj1EyboCLAO7wMHhkivheyL9qfdsa6JrM5f+XNEGHQgpVrYhsOnqHLNP5edTW mvSBIfNaNdTck1jRHWIufk+Fsee8H+h8g0AX+09NqFsNtVxSkBxoeG0ReHvAlJVJ z0/ksJn9ptCIWRXwqfrrWsBnghUGqWe549DuPkskYguIARJniJrg0Xw7UArMEe7v hXhpRBjHdGThUG0U59ydIv0UiatU4a/dSDLxl02g1qMhXUJBqPdI+4MLhBRnzXpl DJQkTjWTxxLMt1ltZh5IzkEqCjLhvBP9 -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:24 2025 by rpki-client