$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa File: 68d04ab6-027a-3951-9f78-6c2e14655ee6.roa (raw, json) Hash identifier: MAGib1Sg4GROukRLlQMLdiOWdgh5UFaMU2WHXpY544M= Subject key identifier: 21:7A:98:3A:52:E0:6E:BF:6C:74:ED:A9:B0:4A:AC:C0:00:6D:3A:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840B6C0D4977E2B8F9C100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396554 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:6c:0d:49:77:e2:b8:f9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=29808b5f-59bc-4b94-ad4f-84a0962e3a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:bc:f9:94:51:37:06:5e:9c:f5:00:70:b1: aa:fa:40:de:b5:eb:1a:ae:6d:cd:7f:45:1e:20:ec: f4:ed:14:7b:e0:b0:97:79:96:30:36:e8:a2:2b:44: a6:d4:2e:d9:4a:fd:15:ce:d1:49:8a:58:8b:71:19: 24:39:8a:7e:84:0b:34:62:ea:2d:6c:d1:8e:9a:60: f9:09:bf:89:35:13:6a:17:48:8a:79:2c:e1:3d:dd: 9c:59:db:7b:35:48:76:ac:af:2e:91:6f:d5:ca:5d: c5:68:8a:aa:57:f8:6f:fb:a1:50:b7:98:1f:21:59: a8:3f:27:31:2a:d1:72:ac:53:1f:c6:0c:a0:4e:26: dc:3f:f5:12:31:d6:1f:da:f4:25:e4:3f:de:2d:e8: df:9c:17:d3:ad:d1:ef:bf:be:79:28:c3:49:19:3c: 7c:ff:eb:4f:7e:03:aa:0e:88:4c:bb:4f:ca:87:c4: dc:88:bf:05:82:85:5a:63:65:76:0d:88:46:79:8f: 02:d3:ac:4f:07:04:6e:a4:a5:66:d8:3f:f1:57:b3: 8c:c0:cb:e2:b0:6d:87:a0:9d:a3:1e:18:65:43:34: 0e:af:0c:06:be:b8:97:72:4d:f3:8c:cb:73:cf:f7: f6:eb:27:a0:e6:2d:13:5d:9d:82:3c:ac:22:f8:74: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7A:98:3A:52:E0:6E:BF:6C:74:ED:A9:B0:4A:AC:C0:00:6D:3A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68d04ab6-027a-3951-9f78-6c2e14655ee6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f0:42:e2:07:df:a9:55:bf:ad:58:21:cd:f3:a5:a1:2d:6e: 02:88:a3:90:b9:46:72:4e:4b:5a:7f:68:19:0a:44:02:e9:3a: 32:70:49:7e:a4:dc:95:7e:11:6b:39:30:53:bf:3e:af:bb:c2: 09:78:06:64:13:ff:fe:b9:e4:c6:61:f4:94:93:7c:9b:d9:f3: 18:ad:52:fe:c9:2e:dd:4c:a3:f4:83:3d:ee:0b:0e:a3:8d:ea: a4:15:9c:da:33:8d:bd:91:df:cd:7c:c5:60:ee:4b:38:a0:1f: d1:cf:bf:4f:e9:c6:14:ec:80:5d:48:61:ad:ef:90:9a:a7:35: 21:3a:5e:f9:f7:7b:bc:f5:a6:8d:ff:1c:15:a0:f3:51:c9:70: 61:d1:49:74:9a:b9:4b:c6:56:b7:e6:0e:c8:60:f2:89:95:0f: 5b:5a:27:47:83:6a:a3:15:b4:80:e8:b8:02:48:62:18:60:14: cb:b9:d6:49:d8:88:f1:2f:cf:0d:7f:03:f5:62:21:d6:62:9c: 5b:20:57:73:cb:ba:ad:3b:e5:d1:0e:8b:72:a2:b3:26:e7:84: c5:4d:e9:e5:27:2a:95:23:2e:ec:08:69:18:40:e2:40:be:be: 98:5a:43:75:02:78:3b:13:fa:84:ec:ae:a0:09:7c:50:7b:f7: bd:3e:32:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAtsDUl34rj5wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk Mjk4MDhiNWYtNTliYy00Yjk0LWFkNGYtODRhMDk2MmUzYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDK8+ZRRNwZenPUAcLGq+kDetesarm3Nf0Ue IOz07RR74LCXeZYwNuiiK0Sm1C7ZSv0VztFJiliLcRkkOYp+hAs0YuotbNGOmmD5 Cb+JNRNqF0iKeSzhPd2cWdt7NUh2rK8ukW/Vyl3FaIqqV/hv+6FQt5gfIVmoPycx KtFyrFMfxgygTibcP/USMdYf2vQl5D/eLejfnBfTrdHvv755KMNJGTx8/+tPfgOq DohMu0/Kh8TciL8FgoVaY2V2DYhGeY8C06xPBwRupKVm2D/xV7OMwMvisG2HoJ2j HhhlQzQOrwwGvriXck3zjMtzz/f26yeg5i0TXZ2CPKwi+HQzMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCF6mDpS4G6/bHTtqbBKrMAAbTovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhkMDRhYjYtMDI3YS0z OTUxLTlmNzgtNmMyZTE0NjU1ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBv8ELiB9+pVb+tWCHN86WhLW4CiKOQuUZyTktaf2gZCkQC6ToycEl+ pNyVfhFrOTBTvz6vu8IJeAZkE//+ueTGYfSUk3yb2fMYrVL+yS7dTKP0gz3uCw6j jeqkFZzaM429kd/NfMVg7ks4oB/Rz79P6cYU7IBdSGGt75CapzUhOl7593u89aaN /xwVoPNRyXBh0Ul0mrlLxla35g7IYPKJlQ9bWidHg2qjFbSA6LgCSGIYYBTLudZJ 2IjxL88NfwP1YiHWYpxbIFdzy7qtO+XRDotyorMm54TFTenlJyqVIy7sCGkYQOJA vr6YWkN1Ang7E/qE7K6gCXxQe/e9PjJ8 -----END CERTIFICATE-----Generated at Wed Jul 23 11:50:45 2025 by rpki-client