$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa File: 601ec811-f30c-331c-8894-f9e1280f0f3d.roa (raw, json) Hash identifier: p+0cFyQly+3ccv+7zwJkGfnoQ81pVyKwIA2Mpr1x268= Subject key identifier: 52:34:22:AB:23:29:EE:D3:E6:AE:43:22:FE:2A:31:2D:21:95:65:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840AC1D1CC1C813B3F1580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396826 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:c1:d1:cc:1c:81:3b:3f:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=4ee0fecc-b4f3-4647-886b-6f6beb2c6808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:13:2a:ac:9c:12:ae:c9:da:a6:c3:f9:73: e1:8e:98:55:f4:32:85:25:4e:b7:13:03:e2:5e:b4: a9:6f:25:7d:84:ad:ec:85:d0:91:e7:eb:50:d0:3d: 53:61:98:03:46:65:d5:cb:f1:f8:c3:03:b6:19:cf: 8f:9e:ba:a6:79:87:a6:0d:4d:10:37:9f:96:15:1a: 48:44:fe:e0:8f:d7:4a:2a:65:f7:55:b9:50:02:0a: 28:52:55:ee:79:87:66:66:d0:42:b3:ca:4a:5c:2c: 9e:f8:4c:8b:03:62:24:ea:f7:cf:5f:8f:62:49:76: b9:d1:40:66:81:dd:44:c1:f3:4d:06:d0:b2:f3:ba: ac:3a:a4:ff:9a:f1:34:fb:91:7c:9c:98:c1:e2:78: a9:fa:5d:7f:00:03:46:bc:11:dd:bd:c9:79:1a:48: 25:41:d8:4a:61:69:b9:f1:39:4b:ae:2f:be:93:60: 02:70:82:56:74:df:36:d8:1b:d1:b8:c4:95:08:1a: 7e:61:d4:0e:cd:3d:c8:3c:48:39:be:a2:ab:73:d8: 4a:39:28:bd:db:53:60:0a:9e:d2:5b:42:2b:ec:ed: 5e:c3:3d:ae:f2:cf:71:d1:26:ef:09:13:e0:66:e0: e7:58:3b:eb:2d:14:db:b0:8f:ca:05:a5:94:bd:b9: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:22:AB:23:29:EE:D3:E6:AE:43:22:FE:2A:31:2D:21:95:65:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/601ec811-f30c-331c-8894-f9e1280f0f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:11:54:52:fc:95:bc:c7:f4:2d:5e:66:bc:0b:7b:a4:fe:d8: b9:8d:cc:66:38:b2:e0:e5:2b:e6:16:e8:54:f6:e9:06:a3:b3: 5a:89:39:c9:50:69:e9:b8:d6:06:99:d6:f8:52:cb:68:a3:7a: e1:6c:d6:61:f8:13:ee:dc:2b:bf:4f:33:53:35:ce:2b:a5:8e: 25:1b:ff:ce:2a:29:db:9d:e5:b3:fe:d4:ea:5b:b0:3c:e2:b0: 51:5a:b3:fc:37:ef:68:a2:2f:ec:55:bb:03:70:8d:13:2a:b4: 5d:74:e9:6d:e6:2b:44:ef:0b:a2:bc:a1:be:4f:c6:ad:eb:1a: 83:f8:57:20:28:74:33:b8:35:f3:3d:22:b7:2b:4d:75:e2:ef: f6:82:d9:da:8d:ff:91:58:bc:74:05:4c:41:f2:ab:2d:40:04: 31:77:6d:90:3b:16:2d:d7:a2:9f:33:64:0f:fe:fa:b0:d4:85: cf:69:7a:cd:71:b7:c9:e7:cf:1a:70:82:a6:2f:fe:0c:a2:52: 6f:57:df:7e:5e:47:46:0d:20:14:52:bf:d4:d3:6d:b4:3d:35: c0:b6:60:22:a1:34:d5:6c:7c:79:4f:d9:bb:c8:bd:9a:f5:1c: b6:bf:f4:11:f5:7c:73:24:c8:c7:30:cb:7f:97:0c:51:e4:15: 45:56:8b:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihArB0cwcgTs/FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NGVlMGZlY2MtYjRmMy00NjQ3LTg4NmItNmY2YmViMmM2ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXQTKqycEq7J2qbD+XPhjphV9DKFJU63EwPi XrSpbyV9hK3shdCR5+tQ0D1TYZgDRmXVy/H4wwO2Gc+PnrqmeYemDU0QN5+WFRpI RP7gj9dKKmX3VblQAgooUlXueYdmZtBCs8pKXCye+EyLA2Ik6vfPX49iSXa50UBm gd1EwfNNBtCy87qsOqT/mvE0+5F8nJjB4nip+l1/AANGvBHdvcl5GkglQdhKYWm5 8TlLri++k2ACcIJWdN822BvRuMSVCBp+YdQOzT3IPEg5vqKrc9hKOSi921NgCp7S W0Ir7O1ewz2u8s9x0SbvCRPgZuDnWDvrLRTbsI/KBaWUvbkXRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFI0IqsjKe7T5q5DIv4qMS0hlWWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjAxZWM4MTEtZjMwYy0z MzFjLTg4OTQtZjllMTI4MGYwZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYEVRS/JW8x/QtXma8C3uk/ti5jcxmOLLg5SvmFuhU9ukGo7NaiTnJ UGnpuNYGmdb4Ustoo3rhbNZh+BPu3Cu/TzNTNc4rpY4lG//OKinbneWz/tTqW7A8 4rBRWrP8N+9ooi/sVbsDcI0TKrRddOlt5itE7wuivKG+T8at6xqD+FcgKHQzuDXz PSK3K0114u/2gtnajf+RWLx0BUxB8qstQAQxd22QOxYt16KfM2QP/vqw1IXPaXrN cbfJ588acIKmL/4MolJvV99+XkdGDSAUUr/U0220PTXAtmAioTTVbHx5T9m7yL2a 9Ry2v/QR9XxzJMjHMMt/lwxR5BVFVot5 -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:40 2025 by rpki-client