$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad1fa4-51be-33de-8ad9-d729a81dcb59.roa File: cdad1fa4-51be-33de-8ad9-d729a81dcb59.roa (raw, json) Hash identifier: 0fh8dILKAp70Y3O4rFf+5gGsw+eLXcu9KOxIxK4YFEk= Subject key identifier: 60:B0:5E:DE:F2:DB:30:1B:61:80:1D:B5:86:67:85:CF:D9:1B:45:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840591AE09B5F046BC8280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad1fa4-51be-33de-8ad9-d729a81dcb59.roa Signing time: Wed 02 Jul 2025 12:35:59 +0000 ROA not before: Wed 02 Jul 2025 12:35:59 +0000 ROA not after: Tue 30 Sep 2025 12:35:59 +0000 asID: 396588 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:05:91:ae:09:b5:f0:46:bc:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:35:59 2025 GMT Not After : Sep 30 12:35:59 2025 GMT Subject: CN=de30d57e-ccc8-4ce2-9c5e-d8d917f1abf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:3d:19:e4:76:0f:a7:c8:77:79:27:cc:b5: 37:8d:8d:c3:89:ba:16:e9:e6:c4:2b:2e:0a:20:c8: fe:bc:fe:ed:0b:91:d1:88:25:4e:91:05:20:f5:9b: 01:30:da:b1:46:63:32:54:78:69:44:26:87:46:f9: 03:8e:18:07:e9:49:a1:82:39:2f:3d:0c:dc:d7:99: 4e:1a:16:11:55:f3:4a:d5:31:29:43:51:c0:11:29: 0c:14:01:94:0f:6d:a6:d3:2a:31:a4:cc:bc:57:f7: ce:e1:9e:f7:8b:7a:ca:52:ea:fe:4a:5d:60:9e:41: 77:43:75:68:56:c8:95:ec:e3:94:b7:37:e0:28:05: e3:6a:6a:04:28:cf:03:3b:3e:56:5b:95:8b:6e:5b: 4f:b4:13:c7:b4:3e:a6:8f:65:e3:cb:4e:fe:59:a3: 42:d4:24:b5:4a:44:41:9c:c0:63:ed:06:22:8a:74: 38:62:a6:d5:e7:4a:32:e3:78:7a:2a:98:ef:80:d3: e4:94:9f:98:54:a2:04:09:97:22:46:ca:af:bb:63: 2d:91:c1:3f:32:b0:8b:fa:67:04:48:05:66:6b:ad: 89:eb:17:5d:7f:ab:82:a2:ab:98:13:91:f6:1f:39: ed:7d:3b:2a:a0:89:32:ff:24:46:65:c2:87:24:3e: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:5E:DE:F2:DB:30:1B:61:80:1D:B5:86:67:85:CF:D9:1B:45:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad1fa4-51be-33de-8ad9-d729a81dcb59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:af:71:91:55:35:76:69:3e:02:a7:6c:01:06:7a:81:8a:c6: 0a:e8:af:fd:47:40:d3:79:10:f5:aa:84:47:8b:4b:84:63:1d: 2b:4d:61:d1:c4:43:31:8f:95:f4:64:84:2e:5a:eb:5b:b7:fb: 64:3b:ff:84:ad:ca:c1:99:c7:76:f7:f1:6f:69:fa:d9:0c:7d: f8:ab:57:06:13:b6:25:03:c9:e7:39:8d:01:82:ac:af:cb:ab: d2:b4:43:49:ad:28:9d:5d:87:b7:b5:e4:e6:ab:fa:47:a4:6b: 7f:0d:1e:b9:c6:0e:54:1c:32:4c:94:b7:61:52:b2:72:87:8d: e4:5c:f9:14:d4:c3:57:de:d9:b4:b8:96:d7:7c:41:81:d6:13: f1:70:a4:c3:11:ac:1e:9a:c2:c1:c6:7c:f9:de:78:d2:80:21: 8a:f1:67:59:f6:0b:4e:5e:f5:0f:79:7d:34:82:03:cc:4b:df: f8:9a:4e:4a:2d:c0:7e:1c:1f:95:58:ee:dc:c8:4a:80:f1:0f: 3c:32:c1:86:d1:99:90:54:0d:99:cc:0c:dc:0a:33:ea:df:a1: c8:5f:b4:93:a7:58:97:67:97:b4:a3:5f:58:36:51:42:97:bb: 9b:9f:32:a9:3c:f1:e7:51:2f:45:97:cd:3b:3e:05:b7:6f:07: 94:da:15:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAWRrgm18Ea8goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzU1OVoXDTI1MDkzMDEyMzU1OVowLzEtMCsGA1UEAxMk ZGUzMGQ1N2UtY2NjOC00Y2UyLTljNWUtZDhkOTE3ZjFhYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN49GeR2D6fId3knzLU3jY3DiboW6ebEKy4K IMj+vP7tC5HRiCVOkQUg9ZsBMNqxRmMyVHhpRCaHRvkDjhgH6UmhgjkvPQzc15lO GhYRVfNK1TEpQ1HAESkMFAGUD22m0yoxpMy8V/fO4Z73i3rKUur+Sl1gnkF3Q3Vo VsiV7OOUtzfgKAXjamoEKM8DOz5WW5WLbltPtBPHtD6mj2Xjy07+WaNC1CS1SkRB nMBj7QYiinQ4YqbV50oy43h6KpjvgNPklJ+YVKIECZciRsqvu2MtkcE/MrCL+mcE SAVma62J6xddf6uCoquYE5H2HzntfTsqoIky/yRGZcKHJD7SbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGCwXt7y2zAbYYAdtYZnhc/ZG0WzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RhZDFmYTQtNTFiZS0z M2RlLThhZDktZDcyOWE4MWRjYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkr3GRVTV2aT4Cp2wBBnqBisYK6K/9R0DTeRD1qoRHi0uEYx0rTWHR xEMxj5X0ZIQuWutbt/tkO/+ErcrBmcd29/FvafrZDH34q1cGE7YlA8nnOY0Bgqyv y6vStENJrSidXYe3teTmq/pHpGt/DR65xg5UHDJMlLdhUrJyh43kXPkU1MNX3tm0 uJbXfEGB1hPxcKTDEawemsLBxnz53njSgCGK8WdZ9gtOXvUPeX00ggPMS9/4mk5K LcB+HB+VWO7cyEqA8Q88MsGG0ZmQVA2ZzAzcCjPq36HIX7STp1iXZ5e0o19YNlFC l7ubnzKpPPHnUS9Fl807PgW3bweU2hV1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:33 2025 by rpki-client