$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa File: 74f54a50-3e95-3486-a8f7-69d2d6a30421.roa (raw, json) Hash identifier: q1jde9d+8bkEQKT+B5vI4RMYMmeX9/MUelWXIg+7j9A= Subject key identifier: D0:44:56:7C:EE:3A:27:08:AF:02:AD:18:19:3E:50:FE:6D:A0:04:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840B37755AC80C22A0E700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396566 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0b:37:75:5a:c8:0c:22:a0:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=692af6d3-e0f8-466f-b170-99962312a3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:6d:45:1c:0c:06:fc:0b:63:1e:e8:35:29: 57:e7:a9:4b:f6:6f:5d:37:96:12:4a:00:1a:12:f5: 5a:10:e8:e9:9d:57:d5:a3:26:7f:57:8b:99:54:61: af:b9:f7:22:6d:7c:a4:b7:c3:0a:ef:d4:fd:75:f8: d3:10:7b:cc:40:4c:42:1d:83:a7:c2:1b:c1:c6:57: ca:2d:bc:a5:d8:01:23:b0:4d:0a:53:08:a8:5e:80: f2:6c:67:96:b4:62:89:60:ec:bc:a2:bb:09:f8:00: d5:15:e1:33:44:f5:2a:a3:03:f1:24:2f:48:ca:85: bf:cf:44:71:4b:f4:c2:8f:54:74:c6:0c:76:c4:b1: a2:65:25:b9:18:fe:fb:de:d7:80:5a:86:b4:60:78: 20:72:e6:99:3f:e0:8f:0d:4a:46:5e:f4:32:6d:a3: 8d:73:ae:f4:6e:9f:04:13:76:63:b1:b2:8f:ae:05: c4:57:ac:70:4a:63:13:53:d4:1c:3e:15:ba:db:58: 2f:00:70:bf:e1:4e:98:74:b1:11:ca:e3:31:a0:50: a5:a8:a0:05:ba:a9:48:57:fe:89:32:71:ba:8a:41: 3c:46:b1:b4:17:ce:75:52:7c:c2:b0:3f:ca:9d:88: 9c:d9:58:3d:b5:19:58:9c:b9:a3:36:6b:6e:10:23: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:44:56:7C:EE:3A:27:08:AF:02:AD:18:19:3E:50:FE:6D:A0:04:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9e:a5:72:71:38:de:ce:cc:be:cb:d5:2d:33:69:a1:0f:36: 30:43:3c:e5:97:4b:67:6f:a5:17:be:7e:45:bb:a5:5c:c9:ad: 7b:13:88:09:4c:8b:2d:05:c0:c3:2e:0b:8d:36:bc:01:26:a5: 6d:f2:ab:e6:09:8a:b1:6a:b0:4b:b4:7b:db:7f:6e:7a:97:b1: ce:87:02:51:d1:ec:af:48:44:38:c9:df:ed:b7:e1:d7:e3:40: a6:e0:72:43:8e:ac:92:41:36:79:32:24:3a:66:b0:ff:7e:f9: 79:e4:74:04:95:9a:84:59:6f:0d:58:de:df:4a:55:f4:11:8d: 8f:b9:d1:02:2d:e2:d8:30:84:95:65:7c:d2:fb:b9:96:0c:de: 1e:7f:e6:af:64:f7:66:91:72:07:3a:f7:e4:f6:a6:5b:79:50: be:d3:fa:f3:bb:ab:88:e7:3b:1b:b6:e7:74:54:6d:47:50:d7: 10:7c:56:16:b8:fa:0f:0d:46:8b:64:22:89:62:81:f4:fe:bb: b5:bf:42:12:a2:49:d5:a5:6d:7e:48:9f:67:99:1d:2d:65:5b: 6c:57:8e:8e:1c:c0:eb:6a:81:a8:f8:72:56:81:89:1d:d4:c8: f1:ef:3b:f1:91:fc:03:ad:24:2b:fd:56:dc:c5:2e:4e:d4:43: 40:fa:74:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAs3dVrIDCKg5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NjkyYWY2ZDMtZTBmOC00NjZmLWIxNzAtOTk5NjIzMTJhM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpRtRRwMBvwLYx7oNSlX56lL9m9dN5YSSgAa EvVaEOjpnVfVoyZ/V4uZVGGvufcibXykt8MK79T9dfjTEHvMQExCHYOnwhvBxlfK Lbyl2AEjsE0KUwioXoDybGeWtGKJYOy8orsJ+ADVFeEzRPUqowPxJC9IyoW/z0Rx S/TCj1R0xgx2xLGiZSW5GP773teAWoa0YHggcuaZP+CPDUpGXvQybaONc670bp8E E3ZjsbKPrgXEV6xwSmMTU9QcPhW621gvAHC/4U6YdLERyuMxoFClqKAFuqlIV/6J MnG6ikE8RrG0F851UnzCsD/KnYic2Vg9tRlYnLmjNmtuECPt1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNBEVnzuOicIrwKtGBk+UP5toARqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzRmNTRhNTAtM2U5NS0z NDg2LWE4ZjctNjlkMmQ2YTMwNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZnqVycTjezsy+y9UtM2mhDzYwQzzll0tnb6UXvn5Fu6Vcya17E4gJ TIstBcDDLguNNrwBJqVt8qvmCYqxarBLtHvbf256l7HOhwJR0eyvSEQ4yd/tt+HX 40Cm4HJDjqySQTZ5MiQ6ZrD/fvl55HQElZqEWW8NWN7fSlX0EY2PudECLeLYMISV ZXzS+7mWDN4ef+avZPdmkXIHOvfk9qZbeVC+0/rzu6uI5zsbtud0VG1HUNcQfFYW uPoPDUaLZCKJYoH0/ru1v0ISoknVpW1+SJ9nmR0tZVtsV46OHMDraoGo+HJWgYkd 1Mjx7zvxkfwDrSQr/VbcxS5O1ENA+nSA -----END CERTIFICATE-----Generated at Wed Jul 23 11:47:43 2025 by rpki-client