$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bd8f6b-e6eb-312f-b66c-d715bfd892f4.roa File: c9bd8f6b-e6eb-312f-b66c-d715bfd892f4.roa (raw, json) Hash identifier: JVtXXZtRX5fLXm8Ib+cQbV+U7XxtON7LJuTGmcRiDJI= Subject key identifier: CF:5C:CD:4F:57:28:38:FB:14:C3:1B:0C:4D:62:64:77:12:0A:15:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840E5BEB270B62C87DC780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bd8f6b-e6eb-312f-b66c-d715bfd892f4.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 36631 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0e:5b:eb:27:0b:62:c8:7d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=17c6c278-36b4-4021-ad24-fab3ee5e06b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:a7:b3:89:36:10:7c:37:b2:62:36:00:78: 47:27:12:04:86:19:b6:b3:f9:81:e9:09:f8:e9:6f: 8e:66:1f:3f:5a:9a:28:e3:26:52:e0:68:02:45:9b: ad:ba:b6:cd:1d:e5:d3:1c:83:7e:2e:fb:9c:2f:51: 7b:07:9f:b8:b0:b8:a2:a8:fd:ce:fc:5f:1e:4e:05: d3:4a:b5:c6:10:3a:6d:ca:ae:61:3a:1b:c3:b5:5b: bb:9d:cd:d2:ca:c8:1b:63:f5:ab:d7:c1:56:e5:fc: 79:de:a7:13:db:96:a2:09:e0:fe:b3:c7:9b:7a:b1: 1f:36:fa:b6:7b:43:f1:91:76:81:8c:35:ad:35:50: 35:2f:6c:4a:dc:fd:1a:10:77:a5:52:a2:bc:5d:e9: c7:d2:32:33:68:45:c6:b6:e4:75:0a:ec:8a:10:b0: 17:a0:34:dd:58:3c:5d:6f:12:fa:58:b6:68:c1:29: d8:cb:f7:06:60:39:9b:f9:85:78:d5:7e:d8:f9:0c: 7a:a1:4a:3b:e6:b1:42:44:de:7d:5e:ab:f7:15:c4: 88:bb:c7:b6:88:e6:ac:86:0b:47:04:07:a9:71:d4: 6e:5f:09:f3:ea:3d:fa:68:32:9b:f5:e4:74:53:c3: b8:10:99:2e:95:d5:e9:5e:68:00:f2:58:8f:fc:a0: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5C:CD:4F:57:28:38:FB:14:C3:1B:0C:4D:62:64:77:12:0A:15:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9bd8f6b-e6eb-312f-b66c-d715bfd892f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3e:db:ff:6c:67:98:78:dd:6e:49:b2:56:ea:22:e7:18:b9: 15:63:1b:ac:3b:70:52:7f:e4:a0:d8:91:44:d5:b6:b9:25:43: 88:e3:2e:1c:89:6d:47:22:c1:51:80:1d:51:b7:6b:b1:a8:5b: 5d:d1:08:ce:71:27:fc:14:d9:81:7a:3d:39:e2:be:bb:31:29: a2:73:be:70:91:7d:83:17:6e:fd:ce:39:af:ed:57:55:b4:e0: 72:03:83:f9:24:a2:a6:31:35:28:0c:ff:2a:30:aa:72:c1:f2: b4:34:8e:05:8c:48:68:0f:aa:c8:2c:c3:44:24:18:91:4e:db: ca:70:22:f4:cf:e8:0d:5a:d3:d4:b7:23:76:a8:4a:f7:2b:30: 15:1d:d1:06:c4:b0:06:33:84:b1:9f:9d:11:3b:2a:6a:78:6b: cb:ce:a0:29:03:10:02:80:77:bd:4a:4e:c0:ad:56:6b:bc:50: 60:44:66:94:7c:38:83:c3:c1:f7:c3:b8:84:63:ba:1d:6c:28: 9b:94:0f:67:ef:cd:7a:49:94:27:99:72:88:2f:75:c5:b1:5a: 79:89:c7:8f:e9:f1:5e:68:af:04:29:0c:3f:dd:51:14:c7:6f: 4f:a2:9a:e4:ec:97:c6:57:6e:c9:18:82:aa:82:8f:fe:7f:97: f9:cf:88:41 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA5b6ycLYsh9x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MTdjNmMyNzgtMzZiNC00MDIxLWFkMjQtZmFiM2VlNWUwNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv06ns4k2EHw3smI2AHhHJxIEhhm2s/mB6Qn4 6W+OZh8/Wpoo4yZS4GgCRZuturbNHeXTHIN+LvucL1F7B5+4sLiiqP3O/F8eTgXT SrXGEDptyq5hOhvDtVu7nc3SysgbY/Wr18FW5fx53qcT25aiCeD+s8eberEfNvq2 e0PxkXaBjDWtNVA1L2xK3P0aEHelUqK8XenH0jIzaEXGtuR1CuyKELAXoDTdWDxd bxL6WLZowSnYy/cGYDmb+YV41X7Y+Qx6oUo75rFCRN59Xqv3FcSIu8e2iOashgtH BAepcdRuXwnz6j36aDKb9eR0U8O4EJkuldXpXmgA8liP/KCw5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9czU9XKDj7FMMbDE1iZHcSChWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzliZDhmNmItZTZlYi0z MTJmLWI2NmMtZDcxNWJmZDg5MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKPtv/bGeYeN1uSbJW6iLnGLkVYxusO3BSf+Sg2JFE1ba5JUOI4y4c iW1HIsFRgB1Rt2uxqFtd0QjOcSf8FNmBej054r67MSmic75wkX2DF279zjmv7VdV tOByA4P5JKKmMTUoDP8qMKpywfK0NI4FjEhoD6rILMNEJBiRTtvKcCL0z+gNWtPU tyN2qEr3KzAVHdEGxLAGM4Sxn50ROypqeGvLzqApAxACgHe9Sk7ArVZrvFBgRGaU fDiDw8H3w7iEY7odbCiblA9n7816SZQnmXKIL3XFsVp5iceP6fFeaK8EKQw/3VEU x29Poprk7JfGV27JGIKqgo/+f5f5z4hB -----END CERTIFICATE-----Generated at Wed Jul 23 11:34:55 2025 by rpki-client