$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa File: 6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa (raw, json) Hash identifier: Swgiv7tCm1NX6d+VLQ4nslXmfWCvGqKTkfYC4aHW9RQ= Subject key identifier: FA:53:7E:37:78:DF:D9:BA:27:2D:92:78:BE:ED:CD:09:25:49:A6:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628405DD932AE8E882C61980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 396565 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:dd:93:2a:e8:e8:82:c6:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=aecb04f0-cf8e-4d9c-9e89-11d62e7893b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:67:82:f5:d0:fd:3f:7c:e0:cc:78:f7:37: 56:08:9d:bb:55:c5:0c:b6:d7:21:62:3f:42:35:12: bb:f3:64:68:31:73:9f:66:d1:75:15:b8:02:ee:6e: 39:54:cd:0c:eb:33:3a:4d:90:a9:a1:10:f8:d7:5b: c6:1b:1f:df:87:17:c4:88:95:ce:e7:bd:21:8b:dc: 02:c4:4e:83:5b:a0:00:76:3a:42:90:19:2e:77:fb: 6f:4f:6c:39:d3:82:a5:fc:c3:46:53:89:73:3f:22: 4e:bc:82:b9:01:62:72:af:4d:a5:d6:d7:d1:e4:e9: 46:66:61:da:b9:99:20:60:84:85:28:37:ab:21:67: b6:fc:bf:71:97:a7:76:72:9e:a4:8f:ae:98:43:32: 10:d4:1f:da:5a:fd:0c:06:97:61:a7:19:40:93:8c: c5:85:da:05:28:6f:fd:e7:e5:09:eb:8a:46:43:89: bb:f4:62:a6:90:3a:6c:74:c6:74:0d:2e:06:5c:83: c4:52:42:3a:dc:65:49:5b:61:3c:3d:c5:30:26:c0: f9:0e:35:e4:af:10:57:58:1e:37:e4:ec:55:dc:c6: 56:9c:2e:84:25:81:18:5e:39:b3:01:5e:74:0c:58: ca:08:43:c8:ab:cc:0b:25:85:39:54:8e:ec:cd:24: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:53:7E:37:78:DF:D9:BA:27:2D:92:78:BE:ED:CD:09:25:49:A6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:99:6b:2b:ca:72:10:4c:00:a5:ad:91:05:c5:4f:dd:64:30: 84:25:e7:cd:dc:9e:b8:6f:54:ba:74:ff:4d:66:31:9a:c4:57: e6:10:fa:5a:62:21:29:5f:e8:3b:ad:f1:3c:d4:d3:0d:53:e8: cc:45:af:d7:c5:e6:1f:a2:cf:18:96:92:c9:a5:06:a1:d6:05: b6:bd:c2:ed:97:2e:42:c8:e0:48:ed:48:15:cc:0c:8a:2c:56: e3:03:fc:4e:78:c7:74:9b:78:e2:b4:ad:d4:d1:1e:20:aa:7e: 3f:df:b2:61:2b:4b:95:db:06:ad:53:ae:56:fe:c8:01:32:e2: 5f:14:e4:cc:df:48:11:6c:f1:1e:f3:26:cf:8e:d7:42:61:88: 6d:0e:43:60:4f:c3:93:36:92:2c:01:e2:e1:ef:4f:ef:f5:3e: d9:94:e6:75:c8:87:9c:26:e6:2f:e2:71:64:0a:c3:f2:81:83: 81:c7:76:58:b9:b3:0f:10:af:56:8c:41:39:98:51:ec:f5:a3: 09:81:c1:00:c3:52:c4:07:e4:ff:f2:57:da:aa:c6:d7:8f:dc: 98:da:44:71:2b:86:1d:19:77:0f:05:ad:57:4e:5b:e0:44:9b: da:c2:18:8f:5b:e1:ab:16:72:27:03:d8:6a:fc:47:10:c5:d2: 2f:a5:93:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAXdkyro6ILGGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk YWVjYjA0ZjAtY2Y4ZS00ZDljLTllODktMTFkNjJlNzg5M2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLZngvXQ/T984Mx49zdWCJ27VcUMttchYj9C NRK782RoMXOfZtF1FbgC7m45VM0M6zM6TZCpoRD411vGGx/fhxfEiJXO570hi9wC xE6DW6AAdjpCkBkud/tvT2w504Kl/MNGU4lzPyJOvIK5AWJyr02l1tfR5OlGZmHa uZkgYISFKDerIWe2/L9xl6d2cp6kj66YQzIQ1B/aWv0MBpdhpxlAk4zFhdoFKG/9 5+UJ64pGQ4m79GKmkDpsdMZ0DS4GXIPEUkI63GVJW2E8PcUwJsD5DjXkrxBXWB43 5OxV3MZWnC6EJYEYXjmzAV50DFjKCEPIq8wLJYU5VI7szSQy/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPpTfjd439m6Jy2SeL7tzQklSaaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmI4ZmNkOWItOTNjZC0z MzJkLWE5YjQtNWI0NTg1NmJhZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAemWsrynIQTAClrZEFxU/dZDCEJefN3J64b1S6dP9NZjGaxFfmEPpa YiEpX+g7rfE81NMNU+jMRa/XxeYfos8YlpLJpQah1gW2vcLtly5CyOBI7UgVzAyK LFbjA/xOeMd0m3jitK3U0R4gqn4/37JhK0uV2watU65W/sgBMuJfFOTM30gRbPEe 8ybPjtdCYYhtDkNgT8OTNpIsAeLh70/v9T7ZlOZ1yIecJuYv4nFkCsPygYOBx3ZY ubMPEK9WjEE5mFHs9aMJgcEAw1LEB+T/8lfaqsbXj9yY2kRxK4YdGXcPBa1XTlvg RJvawhiPW+GrFnInA9hq/EcQxdIvpZOO -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:35 2025 by rpki-client