$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa File: c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa (raw, json) Hash identifier: THh5IQVd4UgvtCgBSOBIxj0DhD2zkwK7OgmKSiDeeiU= Subject key identifier: 9E:F6:43:1A:EF:FC:10:5B:EC:88:CE:33:5E:B4:4E:5E:5B:4F:8A:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840D6BCCDE0345FEE14D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 36632 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:6b:cc:de:03:45:fe:e1:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=06301629-c393-4505-8147-3918538bc489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9a:71:54:dd:7c:0b:09:47:59:d7:f2:8d:a4: 36:bc:26:ac:2e:82:8b:47:a5:56:67:21:71:9b:77: 96:ea:19:58:d9:08:4a:7e:2f:b3:59:d7:dc:6c:e5: 25:5f:f6:d9:46:23:ab:67:92:dd:ca:2a:33:a4:db: b5:69:2c:43:ff:46:ab:93:ca:b9:89:0a:08:31:19: 3e:7d:a0:5e:29:eb:7e:62:17:15:7d:e3:b4:72:bb: 26:4c:db:a5:fd:cb:8e:23:ce:93:35:78:f6:2a:4a: fe:a9:fa:63:b9:22:5e:8f:92:c6:e5:46:56:66:b9: 83:a0:6d:e8:13:b7:b9:d8:51:66:a7:35:a1:da:01: 43:86:da:a8:1d:3e:fc:38:8e:20:28:f6:58:7d:3b: 00:4e:46:d4:fe:65:d0:a7:7c:6d:95:ef:df:fa:5d: cd:c7:62:66:a8:cf:75:21:70:9a:e6:29:5c:51:d9: 23:6f:9f:e6:06:38:88:20:b5:76:a1:40:65:87:92: 65:78:0f:03:75:c8:ba:5a:4d:88:39:77:f5:ba:7b: 0b:ef:20:62:e9:79:c8:22:e2:8d:fe:39:59:6c:b0: 99:f8:86:d9:c6:13:fc:e4:2c:9f:80:e1:3f:ed:3c: 88:35:39:41:3a:5b:54:59:36:4b:6c:ec:41:e2:23: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:43:1A:EF:FC:10:5B:EC:88:CE:33:5E:B4:4E:5E:5B:4F:8A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9d:ee:df:93:7d:88:e4:ea:85:36:87:de:c8:63:00:b6:21: 2e:e5:23:7d:21:41:8a:85:31:23:64:63:cc:40:a0:ff:d2:4f: 91:95:d6:24:9d:db:06:9f:08:19:cf:06:e9:0d:bf:c2:30:f8: dd:d3:c0:6c:93:e2:50:28:83:d7:fc:b8:7f:c2:d6:62:71:a8: 79:33:cf:51:5a:44:1e:9f:e1:ac:7f:6c:62:30:81:53:03:b9: 45:73:24:7c:05:3f:d1:2a:ea:29:9d:b2:65:07:a0:1d:4a:4e: e2:31:03:69:d4:32:d7:e3:24:ef:5b:ff:5a:95:ad:fd:f2:ea: 4b:ea:dc:d8:f9:57:68:7b:7d:d8:22:a5:e5:7a:a8:07:1b:0b: 52:15:6c:b4:f4:c4:13:71:b4:a3:2a:f7:b8:b8:8f:b4:e9:2d: a3:64:44:d2:de:e6:cd:a1:d1:4b:46:8e:52:fa:b7:a5:ab:e8: f1:ea:fa:67:f0:15:3f:fd:e3:41:d7:82:68:b6:83:4c:67:6b: 71:bb:a2:9a:fb:e0:9e:54:37:b4:63:a7:32:04:74:e3:9a:d4: 85:27:da:43:9d:e2:11:fa:bb:8b:96:1b:3c:ea:dc:e5:32:75: 21:85:d6:87:93:a6:19:cb:a4:e2:e4:6f:d2:a7:9b:4e:41:8a: c2:86:0a:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA1rzN4DRf7hTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MDYzMDE2MjktYzM5My00NTA1LTgxNDctMzkxODUzOGJjNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05pxVN18CwlHWdfyjaQ2vCasLoKLR6VWZyFx m3eW6hlY2QhKfi+zWdfcbOUlX/bZRiOrZ5LdyiozpNu1aSxD/0ark8q5iQoIMRk+ faBeKet+YhcVfeO0crsmTNul/cuOI86TNXj2Kkr+qfpjuSJej5LG5UZWZrmDoG3o E7e52FFmpzWh2gFDhtqoHT78OI4gKPZYfTsATkbU/mXQp3xtle/f+l3Nx2JmqM91 IXCa5ilcUdkjb5/mBjiIILV2oUBlh5JleA8Ddci6Wk2IOXf1unsL7yBi6XnIIuKN /jlZbLCZ+IbZxhP85CyfgOE/7TyINTlBOltUWTZLbOxB4iNq/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ72Qxrv/BBb7IjOM160Tl5bT4p8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJjN2E3NDEtMDQyMy0z YjlkLTk3NjktYTFmODBkZTJmOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgne7fk32I5OqFNofeyGMAtiEu5SN9IUGKhTEjZGPMQKD/0k+RldYk ndsGnwgZzwbpDb/CMPjd08Bsk+JQKIPX/Lh/wtZicah5M89RWkQen+Gsf2xiMIFT A7lFcyR8BT/RKuopnbJlB6AdSk7iMQNp1DLX4yTvW/9ala398upL6tzY+Vdoe33Y IqXleqgHGwtSFWy09MQTcbSjKve4uI+06S2jZETS3ubNodFLRo5S+relq+jx6vpn 8BU//eNB14JotoNMZ2txu6Ka++CeVDe0Y6cyBHTjmtSFJ9pDneIR+ruLlhs86tzl MnUhhdaHk6YZy6Ti5G/Sp5tOQYrChgqC -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:06 2025 by rpki-client