$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62690322-a057-335e-8ff4-15c731059cd2.roa File: 62690322-a057-335e-8ff4-15c731059cd2.roa (raw, json) Hash identifier: K3lzljhbhsM6OaAv5jNnuTRyH4fCNtw/+f2F29zVP1Q= Subject key identifier: 49:F8:64:90:4F:D7:9A:04:11:73:5D:A0:DF:64:79:4B:EB:92:DC:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840B1CDF8C8B12B16C9880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62690322-a057-335e-8ff4-15c731059cd2.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396572 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:1c:df:8c:8b:12:b1:6c:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=d67469b4-8aba-4a8a-bb56-3f226865472d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:55:6b:6b:ef:16:8e:86:b0:04:37:e8:af: 5c:50:c9:fd:37:c2:5a:48:a5:f4:a9:4e:98:de:c6: 0c:b8:ef:32:4e:dc:8a:cd:08:91:9a:06:30:3c:ef: 63:9d:2f:f5:13:b3:a3:24:38:38:8b:34:63:14:cb: 7f:22:50:da:f5:b7:78:00:e5:f6:af:fe:92:0e:44: 81:53:c4:23:29:da:92:9d:84:0d:ce:1e:ac:65:c2: b8:46:a2:34:f4:08:a4:87:a3:33:51:5a:0c:59:a5: 9c:20:3d:0a:04:a4:b2:b6:08:3d:e9:61:7f:75:c6: 07:85:3b:8f:c5:5f:1f:a4:25:ef:17:ab:4d:bf:38: ad:7b:dc:39:61:59:03:f2:08:21:66:44:72:3c:83: 37:b5:b1:80:3a:fd:2c:67:ee:5b:45:d6:6a:99:04: ee:30:ec:5a:44:75:64:87:a2:70:b7:6e:43:0e:ee: c8:4a:8f:17:20:b8:d7:16:c4:81:03:75:69:f7:af: 4b:3d:d0:19:6d:aa:db:2f:ab:f6:55:e9:b8:80:4c: a6:0f:00:b5:de:8d:6e:19:1d:64:12:1e:82:53:3c: b5:22:af:a7:7c:00:99:85:bb:e8:0e:49:46:05:1e: 6b:d7:32:93:84:c6:b2:b4:d7:0b:80:ca:2f:9d:45: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F8:64:90:4F:D7:9A:04:11:73:5D:A0:DF:64:79:4B:EB:92:DC:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62690322-a057-335e-8ff4-15c731059cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:87:e9:45:67:57:21:1e:b4:88:f0:eb:38:a4:b3:d1:36:e4: 88:c2:06:9b:65:89:4e:ee:c5:a3:8f:85:cf:41:67:c5:ea:63: 1e:fb:5a:b1:d9:4b:fb:23:96:84:62:56:78:14:0e:bd:71:ce: 42:ce:27:b8:8f:b1:6e:71:3d:1b:ba:e3:f2:28:87:4f:e2:16: 21:89:9c:b3:0c:a8:ce:b0:c0:d0:4a:04:6e:3a:b8:bc:1b:08: 1a:ee:f1:6a:02:4b:bc:45:73:c1:8f:6c:b0:46:d7:ce:9b:ed: fa:f0:02:76:c9:92:c7:94:0a:23:17:5b:a0:37:7d:a9:5d:8a: 46:20:9a:be:85:ce:b8:57:85:d8:db:c4:81:97:30:ed:51:70: c8:a2:4a:8f:43:3f:f3:65:9c:78:2d:f7:27:d6:2c:d9:e1:e6: 3b:f1:b1:3e:69:c2:bb:82:77:5d:fb:11:73:03:91:61:57:00: 49:ca:de:e3:12:af:57:a4:68:b6:57:e6:c5:61:62:a6:aa:71: 53:3f:c0:84:d9:92:8d:1e:03:78:9f:9e:0f:74:23:49:30:79: ed:44:00:84:96:eb:ee:93:6e:ca:e5:80:d9:98:3a:a8:05:dd: b1:89:d6:08:09:d9:da:6c:32:dc:d3:dc:a1:95:2a:42:5d:f0: 33:3a:a5:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAsc34yLErFsmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk ZDY3NDY5YjQtOGFiYS00YThhLWJiNTYtM2YyMjY4NjU0NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1Va2vvFo6GsAQ36K9cUMn9N8JaSKX0qU6Y 3sYMuO8yTtyKzQiRmgYwPO9jnS/1E7OjJDg4izRjFMt/IlDa9bd4AOX2r/6SDkSB U8QjKdqSnYQNzh6sZcK4RqI09Aikh6MzUVoMWaWcID0KBKSytgg96WF/dcYHhTuP xV8fpCXvF6tNvzite9w5YVkD8gghZkRyPIM3tbGAOv0sZ+5bRdZqmQTuMOxaRHVk h6Jwt25DDu7ISo8XILjXFsSBA3Vp969LPdAZbarbL6v2Vem4gEymDwC13o1uGR1k Eh6CUzy1Iq+nfACZhbvoDklGBR5r1zKThMaytNcLgMovnUWxeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEn4ZJBP15oEEXNdoN9keUvrktxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjI2OTAzMjItYTA1Ny0z MzVlLThmZjQtMTVjNzMxMDU5Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjh+lFZ1chHrSI8Os4pLPRNuSIwgabZYlO7sWjj4XPQWfF6mMe+1qx 2Uv7I5aEYlZ4FA69cc5Czie4j7FucT0buuPyKIdP4hYhiZyzDKjOsMDQSgRuOri8 Gwga7vFqAku8RXPBj2ywRtfOm+368AJ2yZLHlAojF1ugN32pXYpGIJq+hc64V4XY 28SBlzDtUXDIokqPQz/zZZx4Lfcn1izZ4eY78bE+acK7gndd+xFzA5FhVwBJyt7j Eq9XpGi2V+bFYWKmqnFTP8CE2ZKNHgN4n54PdCNJMHntRACEluvuk27K5YDZmDqo Bd2xidYICdnabDLc09yhlSpCXfAzOqVL -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:13 2025 by rpki-client