$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa File: 43e25184-321f-3ecc-b868-4a0baf30cf4b.roa (raw, json) Hash identifier: PEVPbxCLk8utXv5o0Yoys6jlhJ2BpFh/vVucrlHqKPw= Subject key identifier: 9D:18:47:00:39:11:29:77:C8:32:FB:AB:11:C9:A6:F7:21:6D:78:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840EF32B28783F8AD0C5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396571 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:f3:2b:28:78:3f:8a:d0:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=b877d61f-f2d9-47b4-a77e-60db79c781b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:a3:7d:e4:86:02:8f:3e:f5:0a:89:63:4c: 08:78:e6:6f:f5:96:49:38:6a:d8:28:85:9f:88:c3: dd:b6:22:3a:53:4c:ed:fa:cb:6d:87:ce:1c:4a:c3: 10:78:32:ea:d5:80:2a:45:4f:91:ae:14:a8:1b:5a: 0f:e5:36:12:24:a6:02:67:33:4c:d9:f3:9b:7a:67: 9a:25:d2:94:79:27:96:cb:39:8b:af:24:66:2a:eb: 72:ce:3c:7c:e0:91:ca:46:4e:09:ac:6f:32:95:ea: 8a:29:e4:fb:03:08:0e:0e:3d:5b:5b:ae:11:e2:d2: ef:55:14:06:de:ed:1a:b6:09:54:df:b7:42:bd:c9: 5a:ad:2d:6e:0a:e4:92:0b:20:2a:d2:a8:e2:71:ed: ae:2e:2d:66:a9:a3:c2:45:10:78:87:85:0b:10:06: ce:2e:33:89:2b:af:2c:bb:f2:3d:5d:21:54:44:6d: 19:b9:31:d3:a5:dc:35:ef:3c:27:2f:89:b0:bf:bb: d2:18:f4:54:db:a2:0d:9a:ab:33:27:a7:c7:aa:0c: 8a:fe:8b:d8:18:9f:a7:f7:aa:15:be:b0:be:86:16: 33:7a:db:b5:bc:80:1b:63:6c:b3:ae:d2:9d:89:b7: 51:7a:f1:0c:98:ce:e2:33:9f:76:15:05:3d:5f:cd: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:18:47:00:39:11:29:77:C8:32:FB:AB:11:C9:A6:F7:21:6D:78:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e25184-321f-3ecc-b868-4a0baf30cf4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:59:24:a9:8e:6f:a7:1b:25:86:f2:7d:47:5e:a5:bd:c5:b1: da:0d:38:ca:b6:9c:d8:7d:e7:b3:96:aa:41:9e:9d:63:4f:92: fe:9b:b6:d7:b9:d5:35:a0:fa:55:04:55:1d:0b:49:a6:f0:fb: ea:42:43:88:40:ef:3e:65:56:dd:2b:2f:53:e2:8e:31:77:06: 76:e8:01:20:b0:7e:d1:cb:90:e2:96:b9:62:33:bd:e2:35:6c: 10:60:69:f9:9c:25:f1:27:6c:b3:3f:c8:5f:8c:13:2f:48:58: 21:eb:01:3d:f8:25:8d:a7:60:e5:1b:e6:06:e9:5c:27:28:90: 7a:a3:a8:6c:0d:59:45:95:b6:e1:d9:bd:e3:b4:1e:c0:c2:31: a9:a2:98:67:a2:be:20:90:be:35:0b:c8:72:be:2f:88:f4:c7: db:1f:b1:d1:8b:0a:a8:7b:9e:e2:e8:e3:5a:54:f1:0d:1e:9a: f6:81:40:4e:dc:f1:1a:7f:d0:a3:8d:f9:82:52:ca:b4:c4:ff: 34:b8:6e:86:54:55:6d:ba:8d:02:af:57:8e:b0:be:40:4c:56: cf:05:23:9b:6a:ce:2d:65:30:90:6a:35:ef:9b:85:8b:47:9b: a1:62:d0:2b:15:f9:17:08:d4:50:8f:bb:52:77:2e:19:94:8b: d7:e5:3f:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA7zKyh4P4rQxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk Yjg3N2Q2MWYtZjJkOS00N2I0LWE3N2UtNjBkYjc5Yzc4MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaKjfeSGAo8+9QqJY0wIeOZv9ZZJOGrYKIWf iMPdtiI6U0zt+stth84cSsMQeDLq1YAqRU+RrhSoG1oP5TYSJKYCZzNM2fObemea JdKUeSeWyzmLryRmKutyzjx84JHKRk4JrG8yleqKKeT7AwgODj1bW64R4tLvVRQG 3u0atglU37dCvclarS1uCuSSCyAq0qjice2uLi1mqaPCRRB4h4ULEAbOLjOJK68s u/I9XSFURG0ZuTHTpdw17zwnL4mwv7vSGPRU26INmqszJ6fHqgyK/ovYGJ+n96oV vrC+hhYzetu1vIAbY2yzrtKdibdRevEMmM7iM592FQU9X80r0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ0YRwA5ESl3yDL7qxHJpvchbXjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlMjUxODQtMzIxZi0z ZWNjLWI4NjgtNGEwYmFmMzBjZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9WSSpjm+nGyWG8n1HXqW9xbHaDTjKtpzYfeezlqpBnp1jT5L+m7bX udU1oPpVBFUdC0mm8PvqQkOIQO8+ZVbdKy9T4o4xdwZ26AEgsH7Ry5DilrliM73i NWwQYGn5nCXxJ2yzP8hfjBMvSFgh6wE9+CWNp2DlG+YG6VwnKJB6o6hsDVlFlbbh 2b3jtB7AwjGpophnor4gkL41C8hyvi+I9MfbH7HRiwqoe57i6ONaVPENHpr2gUBO 3PEaf9CjjfmCUsq0xP80uG6GVFVtuo0Cr1eOsL5ATFbPBSObas4tZTCQajXvm4WL R5uhYtArFfkXCNRQj7tSdy4ZlIvX5T80 -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:54 2025 by rpki-client