$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/592c9d46-4948-38e0-a19b-f7d5b7cf9e86.roa File: 592c9d46-4948-38e0-a19b-f7d5b7cf9e86.roa (raw, json) Hash identifier: m0ZjLX/lvWpjo4qmBYJvBQh4rxH5OfwHzPEQQuRD6b4= Subject key identifier: E4:3A:4B:1D:AB:06:40:E0:20:81:42:9A:D1:E8:11:FB:C3:94:0E:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628410D51CB58823C2AA1580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/592c9d46-4948-38e0-a19b-f7d5b7cf9e86.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 396827 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:d5:1c:b5:88:23:c2:aa:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=2509db02-d523-42ef-8765-f8e475f454a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:f7:fc:6e:56:ae:68:a8:6d:5e:c4:1a:4a: dd:1d:27:30:ed:8a:e2:b7:b9:70:69:50:0c:b6:2f: 93:98:dd:2b:3f:31:d7:00:7b:75:cb:8f:6e:9c:b9: 6d:95:75:0e:ac:28:91:75:08:1b:9a:26:eb:01:1e: a1:10:17:24:61:fa:e7:86:42:01:cb:7c:ae:10:2f: d7:8e:67:ea:1f:a6:2e:a2:ed:0f:46:36:fd:d3:69: bb:52:39:44:3c:c5:8f:01:0a:73:f0:74:c2:f5:0a: 2b:8a:7d:2f:24:63:32:1a:b3:81:d0:76:12:1c:17: b0:52:97:4c:60:b5:e5:0b:54:75:16:f4:48:0d:41: d6:cf:2c:b2:86:1b:98:cc:91:57:39:f5:59:7e:f9: 73:40:34:2b:f1:08:61:69:31:e8:7e:ef:b9:e9:78: 94:6b:12:e0:eb:f6:e7:b9:0a:c0:35:8c:b2:1c:28: b9:e5:a0:ab:49:34:c8:c1:d4:24:01:de:cc:a7:93: ec:cd:06:2e:fd:da:a6:95:0f:44:70:0e:aa:d4:ea: 83:c2:2d:ed:7b:c2:ea:68:ed:68:5c:55:0f:d5:d5: 7f:09:3b:d7:07:f8:b0:ce:5b:0f:1f:ee:09:1d:03: ac:ac:73:37:20:92:82:e2:f8:bd:dd:d9:61:94:ac: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:4B:1D:AB:06:40:E0:20:81:42:9A:D1:E8:11:FB:C3:94:0E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/592c9d46-4948-38e0-a19b-f7d5b7cf9e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:08:d8:ef:91:ab:b2:d8:de:9b:31:fc:20:a0:8e:e6:a7:f3: 54:97:8c:f6:2c:c7:7e:01:9e:bc:f0:63:07:52:c3:0f:29:47: c0:11:f8:a1:c6:50:a6:2d:65:07:da:af:09:cc:33:62:ea:99: 42:e2:c5:f3:8f:a1:6d:b7:82:f7:e1:86:71:42:d5:00:dd:b7: e9:f8:94:db:fd:74:5c:15:b6:0d:18:2e:ed:93:1b:8a:9d:f3: a7:23:bc:8d:bc:21:42:f3:41:a6:72:fc:49:c3:16:65:87:6f: 16:9d:47:69:49:55:57:c0:fe:1d:58:b5:14:14:fa:54:e8:cb: 5f:4d:5d:14:6a:91:97:5d:c0:2b:c1:96:75:4d:0c:f5:a4:60: 5a:d2:70:82:08:bc:49:cf:00:c2:0b:37:e3:0b:e0:d8:f4:62: 0f:28:11:05:c9:fd:63:d3:64:d7:44:f7:49:6c:f7:42:71:5b: 4e:bd:f2:77:8a:a2:11:9a:c2:20:10:94:92:c2:62:c0:c4:8f: 93:49:8d:1a:d9:d0:56:c4:12:49:dc:33:ea:fe:ed:9d:e9:43: 48:16:a6:40:91:2e:1d:a8:44:98:a8:8c:c7:3b:bf:c0:2c:bb: db:2c:bc:cf:43:c4:7a:f7:4b:ae:1b:e7:19:b2:09:cd:3a:81: 57:6f:de:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBDVHLWII8KqFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk MjUwOWRiMDItZDUyMy00MmVmLTg3NjUtZjhlNDc1ZjQ1NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWD3/G5WrmiobV7EGkrdHScw7Yrit7lwaVAM ti+TmN0rPzHXAHt1y49unLltlXUOrCiRdQgbmibrAR6hEBckYfrnhkIBy3yuEC/X jmfqH6Yuou0PRjb902m7UjlEPMWPAQpz8HTC9Qorin0vJGMyGrOB0HYSHBewUpdM YLXlC1R1FvRIDUHWzyyyhhuYzJFXOfVZfvlzQDQr8QhhaTHofu+56XiUaxLg6/bn uQrANYyyHCi55aCrSTTIwdQkAd7Mp5PszQYu/dqmlQ9EcA6q1OqDwi3te8LqaO1o XFUP1dV/CTvXB/iwzlsPH+4JHQOsrHM3IJKC4vi93dlhlKyCVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOQ6Sx2rBkDgIIFCmtHoEfvDlA7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTkyYzlkNDYtNDk0OC0z OGUwLWExOWItZjdkNWI3Y2Y5ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBCNjvkauy2N6bMfwgoI7mp/NUl4z2LMd+AZ688GMHUsMPKUfAEfih xlCmLWUH2q8JzDNi6plC4sXzj6Ftt4L34YZxQtUA3bfp+JTb/XRcFbYNGC7tkxuK nfOnI7yNvCFC80GmcvxJwxZlh28WnUdpSVVXwP4dWLUUFPpU6MtfTV0UapGXXcAr wZZ1TQz1pGBa0nCCCLxJzwDCCzfjC+DY9GIPKBEFyf1j02TXRPdJbPdCcVtOvfJ3 iqIRmsIgEJSSwmLAxI+TSY0a2dBWxBJJ3DPq/u2d6UNIFqZAkS4dqESYqIzHO7/A LLvbLLzPQ8R690uuG+cZsgnNOoFXb95i -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:32 2025 by rpki-client