$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa File: 9c6774a8-98b8-3a57-a608-38afdb985dda.roa (raw, json) Hash identifier: jtRdAVymB+cO3pDJfiRVEa0dAelOPd2gpjNy/RU6m2s= Subject key identifier: 1F:37:11:16:A2:2B:5D:BA:15:7A:C1:6E:52:CA:6E:D2:E9:41:AB:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840E345DEC7B10B6FC1180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 211369 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:34:5d:ec:7b:10:b6:fc:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=41fcfc5d-0ca1-4a26-adc1-eff9ec6580d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:01:84:b8:78:34:2b:ad:55:54:24:4a:e4: 67:9b:44:47:a5:d7:0f:da:3a:70:9b:96:18:f5:4c: 2e:94:30:75:d0:bf:82:2e:1e:7e:77:7c:86:ae:83: f9:7f:a1:a8:f8:24:9c:d8:af:21:87:68:aa:7f:cc: 41:55:fa:6a:ae:46:71:4b:76:d8:67:06:4e:b9:71: 8e:36:4b:f7:03:34:cf:1d:80:cd:4a:3c:73:36:3f: 86:90:43:30:a8:e3:f2:e9:dd:6b:d0:93:4f:be:15: 4e:8b:84:ee:74:ae:1a:3b:a5:ed:3c:61:c2:8d:a8: 92:41:04:47:d7:21:ba:79:25:83:4c:ee:c4:81:80: ad:02:d3:bb:90:30:fe:30:cc:bd:6c:15:82:82:bf: bc:73:2e:fc:eb:f4:f2:27:04:42:ef:87:c1:49:03: 4a:3d:ae:e6:09:8a:8a:65:8e:e7:2b:75:f5:60:28: 5b:37:11:6b:13:68:a6:a8:9f:5a:05:65:e9:93:35: d1:a9:29:6b:31:5e:6d:42:af:06:bf:e0:84:8d:29: 5c:9e:85:07:74:05:45:d0:59:78:7f:11:95:ef:cb: 3d:3f:bd:02:46:3b:a3:d0:15:ad:be:7a:d8:3f:0d: e6:dd:ca:44:a0:19:68:55:fb:f1:f6:bf:03:54:4a: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:37:11:16:A2:2B:5D:BA:15:7A:C1:6E:52:CA:6E:D2:E9:41:AB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c6774a8-98b8-3a57-a608-38afdb985dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:54:ad:4f:fd:6b:82:61:ea:87:b4:8f:ed:59:08:fb:90:71: c2:10:2d:09:20:45:b5:ca:d2:30:21:59:eb:eb:5d:23:de:af: 39:7f:aa:e7:4b:43:8e:6b:62:d9:bc:1a:71:e9:a1:7a:bd:ec: 85:9a:3a:6c:ff:5b:d4:75:64:b1:a9:10:9f:6e:26:85:4b:ed: 22:c5:e1:8f:38:11:96:9c:69:66:91:b4:b3:c9:6b:c6:cc:05: aa:c9:6b:2c:ca:4f:ac:9d:cf:56:be:b6:b0:a5:02:20:5a:a9: 1c:aa:bb:43:ed:92:70:93:19:f9:9b:b9:ed:c1:d0:47:cb:8b: 75:29:34:92:08:7f:9c:12:9e:0c:e6:8e:49:5b:85:1c:14:2f: d1:eb:3f:e9:40:55:bc:69:c9:de:a5:5e:04:b6:1b:0e:ea:de: 26:67:0c:fd:dc:2e:93:e5:26:2c:6d:fd:10:db:29:b0:2a:d0: f1:b0:11:01:9d:71:39:2f:e0:c3:7c:c3:ce:6d:bd:19:f8:57: 7e:da:d8:aa:ca:5b:24:f6:35:57:d9:a5:03:ac:c9:13:64:0a: c1:5e:06:a5:ee:2e:69:3c:44:1a:2b:3c:03:85:a9:19:e4:ba: 03:58:63:56:ad:f0:4c:58:63:3d:01:e9:02:09:c0:4e:e4:d6: c4:bd:98:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA40Xex7ELb8EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NDFmY2ZjNWQtMGNhMS00YTI2LWFkYzEtZWZmOWVjNjU4MGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUcBhLh4NCutVVQkSuRnm0RHpdcP2jpwm5YY 9UwulDB10L+CLh5+d3yGroP5f6Go+CSc2K8hh2iqf8xBVfpqrkZxS3bYZwZOuXGO Nkv3AzTPHYDNSjxzNj+GkEMwqOPy6d1r0JNPvhVOi4TudK4aO6XtPGHCjaiSQQRH 1yG6eSWDTO7EgYCtAtO7kDD+MMy9bBWCgr+8cy786/TyJwRC74fBSQNKPa7mCYqK ZY7nK3X1YChbNxFrE2imqJ9aBWXpkzXRqSlrMV5tQq8Gv+CEjSlcnoUHdAVF0Fl4 fxGV78s9P70CRjuj0BWtvnrYPw3m3cpEoBloVfvx9r8DVEqVJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB83ERaiK126FXrBblLKbtLpQauDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWM2Nzc0YTgtOThiOC0z YTU3LWE2MDgtMzhhZmRiOTg1ZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBpVK1P/WuCYeqHtI/tWQj7kHHCEC0JIEW1ytIwIVnr610j3q85f6rn S0OOa2LZvBpx6aF6veyFmjps/1vUdWSxqRCfbiaFS+0ixeGPOBGWnGlmkbSzyWvG zAWqyWssyk+snc9WvrawpQIgWqkcqrtD7ZJwkxn5m7ntwdBHy4t1KTSSCH+cEp4M 5o5JW4UcFC/R6z/pQFW8acnepV4EthsO6t4mZwz93C6T5SYsbf0Q2ymwKtDxsBEB nXE5L+DDfMPObb0Z+Fd+2tiqylsk9jVX2aUDrMkTZArBXgal7i5pPEQaKzwDhakZ 5LoDWGNWrfBMWGM9AekCCcBO5NbEvZhr -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:33 2025 by rpki-client