$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa File: a88ae204-02d7-3894-948d-7e85b2b229e5.roa (raw, json) Hash identifier: qlKLLzC8AE6sNzX6+Hhtj7hv6byQKxAj3W9kUETEcSI= Subject key identifier: B6:30:00:61:FC:00:4A:F7:99:06:DB:C5:E1:58:CE:03:B8:41:83:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840C5528E06D2EBB36B280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 36621 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0c:55:28:e0:6d:2e:bb:36:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=3faa3018-148b-4b85-a71d-4e831cf05f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:18:5b:ba:ec:d0:c5:18:63:50:8f:ac:f1: 16:25:d3:18:50:4d:42:38:5c:8e:7f:e7:0d:b7:c7: 6d:76:fc:39:f5:91:59:96:27:c9:3f:43:2e:29:3e: 09:53:6d:e3:f1:6c:62:d2:d2:b9:23:01:54:af:0f: ca:99:0f:40:a1:6d:d1:39:20:c2:2e:b3:fd:cc:e8: ea:37:19:64:b2:e0:64:06:5b:d0:46:29:2d:ca:7e: cb:a2:31:e4:7c:a1:2b:25:00:8c:0a:a3:3f:6f:d9: cb:22:32:32:95:b1:89:b7:b3:4e:ee:c3:d5:cd:81: ab:6c:f3:dd:c7:99:ba:1d:f3:e7:e8:d2:ec:30:7c: 70:eb:82:d5:77:d0:04:19:55:06:24:8b:74:cc:ab: fb:01:58:b6:ec:ac:97:db:27:f1:4c:e0:f0:d6:3f: c5:c8:e4:80:63:d8:e1:78:b0:3c:58:58:ad:0b:f1: 46:35:df:ed:df:05:08:5c:6c:a5:e6:b7:1e:4d:d3: 13:8b:59:96:7a:a7:fa:88:ee:73:46:07:0a:a5:ca: a1:c5:db:3c:1d:41:74:a8:67:e9:26:dd:d1:1c:59: 17:90:9c:37:b0:ba:50:1d:3d:04:23:a2:eb:54:ea: 94:ee:8d:17:17:ad:77:3c:7f:7a:ee:1e:48:0f:37: 01:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:30:00:61:FC:00:4A:F7:99:06:DB:C5:E1:58:CE:03:B8:41:83:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:65:f6:04:3d:39:c0:f5:c1:9b:12:7a:ed:ce:d1:52:53:37: 5d:ef:ab:39:b0:7c:b1:69:e4:4d:9a:55:bd:c1:e1:27:6e:c7: 68:ed:fa:5f:6a:e8:a9:75:78:d8:3d:12:f7:52:7b:c8:9b:6a: f9:07:d1:4e:33:e9:26:99:7e:80:60:2d:2e:bb:f7:b7:78:9e: 92:07:74:e3:69:cb:27:90:ce:bb:d0:2a:33:e7:12:85:0b:5b: f0:98:fe:7d:fa:62:c3:9e:58:db:30:4f:23:72:d4:f4:e4:09: c4:e2:f8:37:25:34:77:16:65:ec:9a:cf:09:1b:d9:31:4e:35: 27:53:0b:aa:98:99:75:bb:a5:cc:ef:4d:8c:53:22:48:52:74: 8d:79:8a:89:45:c5:bc:c9:6f:c6:de:1d:85:b4:e4:65:e2:6c: fc:38:a0:eb:d2:e9:75:34:24:79:a5:08:cd:e5:0b:23:11:3d: 95:75:d5:ec:77:68:4f:56:46:14:d0:31:5c:bd:10:75:9e:c7: 86:0d:00:9d:26:93:b5:d9:75:50:71:e0:f6:20:ab:e8:49:01: 86:0a:73:1f:87:be:61:0c:b8:c5:9b:c3:cd:fa:4e:09:73:30: 46:2c:89:72:57:c6:f9:01:76:33:fc:b8:bb:ba:6a:41:89:69: cf:c6:29:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAxVKOBtLrs2soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk M2ZhYTMwMTgtMTQ4Yi00Yjg1LWE3MWQtNGU4MzFjZjA1ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAMYW7rs0MUYY1CPrPEWJdMYUE1COFyOf+cN t8dtdvw59ZFZlifJP0MuKT4JU23j8Wxi0tK5IwFUrw/KmQ9AoW3ROSDCLrP9zOjq NxlksuBkBlvQRiktyn7LojHkfKErJQCMCqM/b9nLIjIylbGJt7NO7sPVzYGrbPPd x5m6HfPn6NLsMHxw64LVd9AEGVUGJIt0zKv7AVi27KyX2yfxTODw1j/FyOSAY9jh eLA8WFitC/FGNd/t3wUIXGyl5rceTdMTi1mWeqf6iO5zRgcKpcqhxds8HUF0qGfp Jt3RHFkXkJw3sLpQHT0EI6LrVOqU7o0XF613PH967h5IDzcB8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLYwAGH8AEr3mQbbxeFYzgO4QYMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4YWUyMDQtMDJkNy0z ODk0LTk0OGQtN2U4NWIyYjIyOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRZfYEPTnA9cGbEnrtztFSUzdd76s5sHyxaeRNmlW9weEnbsdo7fpf auipdXjYPRL3UnvIm2r5B9FOM+kmmX6AYC0uu/e3eJ6SB3TjacsnkM670Coz5xKF C1vwmP59+mLDnljbME8jctT05AnE4vg3JTR3FmXsms8JG9kxTjUnUwuqmJl1u6XM 702MUyJIUnSNeYqJRcW8yW/G3h2FtORl4mz8OKDr0ul1NCR5pQjN5QsjET2VddXs d2hPVkYU0DFcvRB1nseGDQCdJpO12XVQceD2IKvoSQGGCnMfh75hDLjFm8PN+k4J czBGLIlyV8b5AXYz/Li7umpBiWnPxikB -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:34 2025 by rpki-client