$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa File: 70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa (raw, json) Hash identifier: 4e8+XTys5Gy331MBlF7Wn+BxDf4hGv2HXQBq5m9Vxc0= Subject key identifier: 5C:7F:52:EA:69:30:2B:A3:0D:A3:BA:58:E3:18:AC:1A:FB:D2:38:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628408B2E45D08F74E442200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 397211 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:08:b2:e4:5d:08:f7:4e:44:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=990394f3-b334-43d3-8697-f951c67ffbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:07:0c:41:dd:df:04:f7:4c:7a:87:f4:43: 87:e8:43:6a:9d:bb:5b:2c:81:ee:a1:81:0f:23:bc: 69:a8:d1:a3:49:42:a9:1e:f8:7e:3c:00:8e:56:91: 8e:cb:b6:1d:be:29:65:c7:82:72:1d:3b:20:fd:0b: 1d:d9:0e:49:9a:5f:43:ec:85:ef:5c:12:f9:94:40: d4:af:ff:4c:86:45:d1:15:dc:9d:2c:ac:57:e3:47: b8:86:36:be:48:01:0e:ea:14:2e:11:3c:5e:45:32: 23:bf:9f:7c:fa:a4:9b:46:5d:0e:ff:67:bf:df:a1: f8:c1:c1:e4:c6:52:0c:8f:bf:56:67:97:26:ed:11: 3e:c7:f5:42:b7:33:be:d7:54:6d:5c:73:17:11:0d: 59:d5:24:0b:3b:fb:fd:cf:f6:75:3e:56:de:7c:09: 63:f3:c6:36:7f:f5:c1:6d:ce:f8:69:66:68:96:9b: b6:27:75:b7:8f:aa:ff:3d:d1:58:de:31:5a:0c:79: ce:7f:fa:f2:68:38:1e:75:96:3d:f4:7c:0d:8e:36: 4e:46:93:60:1f:98:f6:52:a8:ed:72:8d:fb:d3:82: 1c:f6:1a:c9:65:4c:6f:6f:64:f1:7a:f6:18:25:cc: af:34:9b:fa:94:66:23:c9:0b:c5:0b:67:e1:48:e8: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:52:EA:69:30:2B:A3:0D:A3:BA:58:E3:18:AC:1A:FB:D2:38:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f6:75:9c:0f:e7:56:af:f1:f5:d0:37:fa:07:41:23:e7:eb: ff:64:98:ad:d4:7a:a6:8f:23:1c:35:e2:4d:07:d0:37:06:50: 41:1d:f7:d5:df:08:42:f5:ad:0d:3f:bd:e5:b6:07:8e:9d:bb: e8:6b:00:f6:7e:4e:81:ce:f1:01:c8:5d:9e:f8:c4:8f:45:4e: 5e:fa:fa:88:b9:7b:bd:47:01:84:a0:0b:d1:51:6d:3d:c1:f8: ad:0c:7b:ab:32:16:10:f3:79:d1:bc:fe:62:35:ff:49:7f:b6: 6a:09:83:32:da:7f:09:da:6f:cf:87:f2:54:43:39:f3:17:97: 4f:7b:0a:bc:0d:90:3a:6d:cc:4b:76:22:25:86:f1:20:89:3a: 11:8d:4c:1c:6b:55:7e:53:89:00:6a:40:b3:ca:62:d0:1d:f5: 9c:58:23:00:b5:45:ea:54:32:1e:ab:20:4d:ba:b6:10:ec:02: 46:ba:02:32:63:f2:ab:17:af:80:a8:c1:6d:24:71:f8:4c:a4: 99:40:86:52:90:7c:7e:f7:2e:8b:46:f6:b8:c1:39:af:ab:91: d5:55:ca:f7:20:50:6e:f0:1e:82:f1:fc:dd:9a:30:f0:e5:f6: 42:92:b3:09:a3:d2:90:73:e8:2e:f3:42:00:57:59:f1:a7:38: b5:27:08:07 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAiy5F0I905EIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk OTkwMzk0ZjMtYjMzNC00M2QzLTg2OTctZjk1MWM2N2ZmYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cgHDEHd3wT3THqH9EOH6ENqnbtbLIHuoYEP I7xpqNGjSUKpHvh+PACOVpGOy7Ydvillx4JyHTsg/Qsd2Q5Jml9D7IXvXBL5lEDU r/9MhkXRFdydLKxX40e4hja+SAEO6hQuETxeRTIjv598+qSbRl0O/2e/36H4wcHk xlIMj79WZ5cm7RE+x/VCtzO+11RtXHMXEQ1Z1SQLO/v9z/Z1PlbefAlj88Y2f/XB bc74aWZolpu2J3W3j6r/PdFY3jFaDHnOf/ryaDgedZY99HwNjjZORpNgH5j2Uqjt co3704Ic9hrJZUxvb2TxevYYJcyvNJv6lGYjyQvFC2fhSOhlCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFx/UuppMCujDaO6WOMYrBr70jgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBjMzMxZWMtZWFlYi0z MWJmLWIyMzctMWQyOWZiZDFlOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM9nWcD+dWr/H10Df6B0Ej5+v/ZJit1HqmjyMcNeJNB9A3BlBBHffV 3whC9a0NP73ltgeOnbvoawD2fk6BzvEByF2e+MSPRU5e+vqIuXu9RwGEoAvRUW09 wfitDHurMhYQ83nRvP5iNf9Jf7ZqCYMy2n8J2m/Ph/JUQznzF5dPewq8DZA6bcxL diIlhvEgiToRjUwca1V+U4kAakCzymLQHfWcWCMAtUXqVDIeqyBNurYQ7AJGugIy Y/KrF6+AqMFtJHH4TKSZQIZSkHx+9y6LRva4wTmvq5HVVcr3IFBu8B6C8fzdmjDw 5fZCkrMJo9KQc+gu80IAV1nxpzi1JwgH -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:31 2025 by rpki-client