$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa File: c3877f0a-c649-355e-b669-96633b8e090d.roa (raw, json) Hash identifier: NsAQcpsixZtuO/5bJ64GHLJkuDSbiyVICwQxk2+Ap9A= Subject key identifier: 00:0D:92:53:B0:1F:B6:A9:E8:77:02:46:A6:24:AD:34:1D:42:12:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840DF095DE3643DACC00C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396599 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:f0:95:de:36:43:da:cc:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=c7594a2d-a7f2-4eae-b0d3-c0898cc673f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:8a:6b:1d:ba:84:32:2e:a2:37:80:77:d1: 47:d8:9a:b6:93:de:0f:4d:87:6c:e9:28:43:56:9b: b7:c3:c8:ab:54:3c:ff:a3:ac:58:e6:96:1b:f6:0f: 33:06:73:8a:ec:d8:c3:59:6c:28:a0:b7:9a:63:04: c5:18:c5:be:93:13:13:0b:70:d6:ea:88:74:8c:99: 6a:ef:e5:83:ea:d2:9c:a9:03:b7:bc:6f:5a:d0:f2: 2a:42:6e:e0:36:b5:c5:39:da:f7:f1:e6:98:76:e9: 4a:aa:e4:68:45:64:1c:c3:1b:73:5f:11:d8:40:8e: de:d6:5b:0e:67:fa:ba:1d:c8:b6:83:ff:13:db:d1: 3f:6f:72:91:a0:97:0d:9b:2c:90:b6:17:a5:6b:00: 99:57:5f:57:5c:9d:81:75:de:19:57:46:1a:56:83: 73:06:87:71:94:fa:c3:5b:99:bd:e7:e1:8c:bb:d0: 65:ee:86:2d:51:2e:33:16:aa:61:8a:b1:35:54:00: f3:ad:6c:f1:07:13:61:d7:71:34:a4:f3:c8:6b:fb: b4:a6:48:6c:f2:92:31:18:f5:e8:7b:29:9f:cd:b7: ab:4a:a3:b3:d4:24:c0:3c:c8:cd:50:44:5c:b1:0e: de:56:51:ec:d1:bd:6c:a8:9c:09:95:36:3d:de:7c: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:92:53:B0:1F:B6:A9:E8:77:02:46:A6:24:AD:34:1D:42:12:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0b:f1:18:70:48:8c:c5:bf:e8:6d:f4:4f:74:02:ea:e9:e2: b5:2b:19:b7:06:1e:f8:57:ec:0b:68:70:64:de:74:95:13:47: cf:4b:68:df:38:1d:54:25:ec:38:10:56:80:e1:89:d5:95:dd: 6f:c4:86:85:7f:a2:59:e4:1f:cc:0f:b0:b4:07:8d:5d:68:c4: 7d:9c:0b:ed:12:fd:06:58:49:0c:13:a4:fb:b2:8a:af:5b:37: e1:c6:7c:45:50:af:42:a2:65:ba:02:d6:eb:f5:97:e3:48:29: 16:80:d3:b0:c6:23:1b:ac:ba:33:fb:32:f9:ad:22:bd:34:45: a9:35:b0:37:d2:9e:24:18:83:64:33:69:22:ad:33:89:9b:26: 12:20:03:f9:42:ba:9a:10:99:b5:93:64:cd:d4:ac:9d:e3:d4: 55:20:b8:5f:10:c1:d0:94:88:73:87:c9:be:60:f2:8a:ba:da: 08:4a:68:dd:f8:8d:58:a5:a5:21:82:3f:40:01:cd:df:6b:be: 9d:14:b4:6c:0a:f8:3c:9f:a7:a7:b6:45:e4:8f:81:5b:52:43: 3b:36:f4:c3:48:26:c0:60:ad:9e:94:55:fc:92:6a:65:d3:c8: f2:f6:03:4e:47:84:7f:39:d7:46:93:3a:0a:06:7b:0a:5c:d2: b9:e4:1d:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA3wld42Q9rMAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk Yzc1OTRhMmQtYTdmMi00ZWFlLWIwZDMtYzA4OThjYzY3M2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDiKax26hDIuojeAd9FH2Jq2k94PTYds6ShD Vpu3w8irVDz/o6xY5pYb9g8zBnOK7NjDWWwooLeaYwTFGMW+kxMTC3DW6oh0jJlq 7+WD6tKcqQO3vG9a0PIqQm7gNrXFOdr38eaYdulKquRoRWQcwxtzXxHYQI7e1lsO Z/q6Hci2g/8T29E/b3KRoJcNmyyQthelawCZV19XXJ2Bdd4ZV0YaVoNzBodxlPrD W5m95+GMu9Bl7oYtUS4zFqphirE1VADzrWzxBxNh13E0pPPIa/u0pkhs8pIxGPXo eymfzberSqOz1CTAPMjNUERcsQ7eVlHs0b1sqJwJlTY93nwojQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAANklOwH7ap6HcCRqYkrTQdQhKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM4NzdmMGEtYzY0OS0z NTVlLWI2NjktOTY2MzNiOGUwOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0C/EYcEiMxb/obfRPdALq6eK1Kxm3Bh74V+wLaHBk3nSVE0fPS2jf OB1UJew4EFaA4YnVld1vxIaFf6JZ5B/MD7C0B41daMR9nAvtEv0GWEkME6T7soqv WzfhxnxFUK9ComW6Atbr9ZfjSCkWgNOwxiMbrLoz+zL5rSK9NEWpNbA30p4kGINk M2kirTOJmyYSIAP5QrqaEJm1k2TN1Kyd49RVILhfEMHQlIhzh8m+YPKKutoISmjd +I1YpaUhgj9AAc3fa76dFLRsCvg8n6entkXkj4FbUkM7NvTDSCbAYK2elFX8kmpl 08jy9gNOR4R/OddGkzoKBnsKXNK55B3M -----END CERTIFICATE-----Generated at Wed Jul 23 11:43:04 2025 by rpki-client