$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa File: b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa (raw, json) Hash identifier: ylsyCry7Sfgt+VD70Wz57zk7Of4jHoNAqdslA3Wla8w= Subject key identifier: AF:51:B5:F5:12:6F:A0:0F:AC:09:D0:24:07:EE:26:E8:F1:3F:B8:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840AB4429E66BADC6513C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa Signing time: Wed 02 Jul 2025 12:36:02 +0000 ROA not before: Wed 02 Jul 2025 12:36:02 +0000 ROA not after: Tue 30 Sep 2025 12:36:02 +0000 asID: 396606 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:b4:42:9e:66:ba:dc:65:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:02 2025 GMT Not After : Sep 30 12:36:02 2025 GMT Subject: CN=4ddd470f-7387-45ef-80df-c041f2d9cfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:27:15:4a:df:5b:57:03:63:2f:18:9c:cc: df:e7:20:6b:89:97:eb:ba:e7:d0:fa:80:93:2d:a1: ee:a1:36:36:c5:33:98:b5:e1:c6:84:a2:fa:04:16: 0a:2b:aa:aa:fe:61:7a:4a:df:73:72:c0:ac:f7:b5: f6:c5:e4:09:ea:67:97:d7:ed:88:92:7e:24:ec:63: 40:a7:d6:78:f4:98:1a:c6:6f:f7:f9:35:47:38:32: a1:1e:21:f0:25:3f:47:57:83:0f:60:ee:a0:47:43: 7d:c4:8e:e5:6c:f5:f5:69:42:8c:53:3c:b6:02:93: 1b:1f:df:66:02:ef:22:cb:df:47:b8:c9:99:1d:ee: b2:f6:fb:2a:84:02:5c:1d:c9:37:a1:42:d2:27:25: 06:93:7a:da:f4:9d:32:11:a6:6f:5f:ba:f2:13:b1: 90:1c:c5:41:8f:48:6d:4b:1e:65:d3:81:80:9b:d4: 5b:9f:e3:b7:30:b9:1e:1f:31:bd:b9:74:f0:97:d0: 1a:06:d9:52:a2:cf:8d:71:12:06:f7:3b:3d:bb:9d: 8b:f4:fa:1d:66:ca:b5:a3:d8:a0:f0:70:e7:2b:d3: cc:32:5e:c9:5a:cf:3a:7f:85:20:46:21:cb:23:eb: 54:b2:68:43:5e:bf:eb:9f:12:38:ba:4e:4a:d5:6f: ad:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:B5:F5:12:6F:A0:0F:AC:09:D0:24:07:EE:26:E8:F1:3F:B8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:23:97:b6:14:43:8a:21:76:cd:64:71:d9:56:78:b3:3b:fa: d4:54:68:35:82:47:4c:7e:f1:e0:2a:b7:e0:ee:69:29:f6:91: 93:5f:64:67:5d:b6:3b:27:37:4e:19:ca:44:e5:1a:80:d2:a2: 23:e5:75:13:51:8e:b8:e2:7d:5c:36:82:05:17:6a:3c:fe:35: c4:c0:d8:24:26:5f:95:b5:33:b9:dc:0c:c4:02:57:cc:37:a2: 69:92:48:8d:76:6b:d8:1d:8e:11:e4:9e:1c:16:65:6c:2c:48: 47:16:a4:61:2f:70:91:7f:76:7e:40:7c:d2:d1:c7:4b:e8:fa: 7c:5f:4e:0b:1a:39:29:b1:60:f0:17:31:f7:28:f2:fc:5f:cb: d2:25:82:47:c2:4c:2b:35:6b:a4:e9:84:a2:12:e6:4c:e5:71: 40:3a:e2:fd:ce:f7:07:13:ac:bc:49:72:01:e7:f2:01:a6:fb: 75:8e:87:f9:d8:a4:cc:be:1e:f2:aa:3a:c6:35:08:7b:30:fd: b8:43:e4:99:07:27:d1:cb:8a:a0:1f:30:25:64:1d:bd:de:00: 8b:2d:14:70:a6:3a:67:86:21:f0:aa:c6:55:0b:e7:3b:49:5a: ca:e0:cb:35:32:d0:89:cc:d8:55:05:e0:a7:d7:7a:24:07:c3: e9:29:2d:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAq0Qp5mutxlE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMloXDTI1MDkzMDEyMzYwMlowLzEtMCsGA1UEAxMk NGRkZDQ3MGYtNzM4Ny00NWVmLTgwZGYtYzA0MWYyZDljZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VwnFUrfW1cDYy8YnMzf5yBriZfruufQ+oCT LaHuoTY2xTOYteHGhKL6BBYKK6qq/mF6St9zcsCs97X2xeQJ6meX1+2Ikn4k7GNA p9Z49Jgaxm/3+TVHODKhHiHwJT9HV4MPYO6gR0N9xI7lbPX1aUKMUzy2ApMbH99m Au8iy99HuMmZHe6y9vsqhAJcHck3oULSJyUGk3ra9J0yEaZvX7ryE7GQHMVBj0ht Sx5l04GAm9Rbn+O3MLkeHzG9uXTwl9AaBtlSos+NcRIG9zs9u52L9PodZsq1o9ig 8HDnK9PMMl7JWs86f4UgRiHLI+tUsmhDXr/rnxI4uk5K1W+tJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK9RtfUSb6APrAnQJAfuJujxP7hUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjljMjYyMGQtYWQ3ZC0z ZGY4LTkzNTgtODhiMGNkZjA1ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCI5e2FEOKIXbNZHHZVnizO/rUVGg1gkdMfvHgKrfg7mkp9pGTX2Rn XbY7JzdOGcpE5RqA0qIj5XUTUY644n1cNoIFF2o8/jXEwNgkJl+VtTO53AzEAlfM N6JpkkiNdmvYHY4R5J4cFmVsLEhHFqRhL3CRf3Z+QHzS0cdL6Pp8X04LGjkpsWDw FzH3KPL8X8vSJYJHwkwrNWuk6YSiEuZM5XFAOuL9zvcHE6y8SXIB5/IBpvt1jof5 2KTMvh7yqjrGNQh7MP24Q+SZByfRy4qgHzAlZB293gCLLRRwpjpnhiHwqsZVC+c7 SVrK4Ms1MtCJzNhVBeCn13okB8PpKS1S -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:10 2025 by rpki-client