$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa File: cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa (raw, json) Hash identifier: 7KcdAtbKbSfxTVMtDCkbtGXSRFI104MejJJbQAC0p6Q= Subject key identifier: 0D:EC:E0:F5:C0:9A:85:8E:36:7A:88:4C:2B:4D:BD:61:A2:BE:BA:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840DBAE559E35AEB5C851C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396604 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:ba:e5:59:e3:5a:eb:5c:85:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=4307f8bf-cebe-4b3e-aea8-6ddf0600684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:43:6b:bd:f6:7e:10:4c:8c:70:dd:f9:fc: ab:2f:08:9e:94:17:fa:33:f6:63:63:ff:69:44:46: c6:ab:87:aa:e6:2e:c9:5b:0d:c7:15:49:a6:69:4c: c3:41:45:17:36:2a:03:2f:59:ec:82:86:ec:b0:c8: 0e:72:5d:7f:f8:64:ea:04:8a:95:56:4a:40:27:40: ff:58:8e:67:1c:11:82:84:d0:b6:61:51:ff:1d:67: c0:bd:a7:da:96:02:ea:58:bc:23:52:0d:b7:e8:80: 23:27:f6:65:9b:21:2f:e4:52:9d:32:bb:b0:9e:cf: 49:47:e1:c4:79:87:9c:80:70:0f:ab:4e:9f:7e:bd: 1a:34:3d:f6:2e:73:1d:32:98:87:9c:64:f4:30:71: 25:fc:fc:1b:5f:82:9d:2e:56:28:5d:79:b2:26:4c: 23:5c:f4:77:1b:d1:ec:b7:35:8b:3b:0b:13:a6:0f: 1f:4c:fb:10:6f:45:be:62:a4:83:2e:97:15:6d:4b: a1:91:25:a9:7e:67:21:44:9e:2b:6b:e4:70:7c:b8: c7:ad:17:17:10:a6:0f:11:20:7f:0b:77:25:74:ce: 7c:e2:54:de:df:b7:99:1b:4b:66:a5:ca:40:f7:b9: d2:2c:83:05:c1:b8:2c:04:c1:8a:f2:03:6f:b7:68: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:E0:F5:C0:9A:85:8E:36:7A:88:4C:2B:4D:BD:61:A2:BE:BA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:41:e6:6e:a9:4d:65:b7:bc:37:40:9e:35:9f:d8:7f:4a:80: fd:e9:ab:a9:a7:02:cc:09:a2:bb:42:db:6d:95:9b:8b:f9:ed: d4:75:fb:22:c5:80:60:72:d8:7e:4c:6e:dc:a9:bb:c4:ae:e6: 6d:11:4b:be:b9:43:ff:bb:bb:67:b6:20:6a:2a:f0:82:b7:72: 95:0a:93:c2:b5:d3:80:a7:cc:dc:a4:2d:42:0b:dd:a8:a8:44: 7f:c3:fc:97:f4:5d:28:7b:bd:4d:52:2e:cc:26:22:77:21:ed: fd:fd:d3:51:76:77:a1:11:63:f2:cd:06:42:fc:65:83:99:db: f0:53:bb:39:47:1a:2f:a5:78:c4:24:ad:ad:f5:ee:84:21:68: cb:09:e5:ea:f6:ac:53:af:10:58:7c:fe:4a:0b:bf:15:9f:d6: 8f:ef:cd:2a:31:39:ee:10:08:27:49:2f:88:a3:66:99:3b:2e: b2:d7:ee:fc:c3:b1:09:de:fe:b6:a8:5c:bd:2a:23:e9:42:1f: d8:3f:fa:fb:ed:57:d9:59:ab:f5:2e:14:77:94:4c:b3:2a:fb: 75:f3:2d:3a:18:d6:6d:2e:39:6b:be:66:c5:8d:eb:a8:b9:40: 1e:33:f1:b2:fe:f4:99:b4:4a:9f:4a:84:47:28:92:1f:c1:4a: 03:f3:64:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA265VnjWutchRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NDMwN2Y4YmYtY2ViZS00YjNlLWFlYTgtNmRkZjA2MDA2ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaNDa732fhBMjHDd+fyrLwielBf6M/ZjY/9p REbGq4eq5i7JWw3HFUmmaUzDQUUXNioDL1nsgobssMgOcl1/+GTqBIqVVkpAJ0D/ WI5nHBGChNC2YVH/HWfAvafalgLqWLwjUg236IAjJ/ZlmyEv5FKdMruwns9JR+HE eYecgHAPq06ffr0aND32LnMdMpiHnGT0MHEl/PwbX4KdLlYoXXmyJkwjXPR3G9Hs tzWLOwsTpg8fTPsQb0W+YqSDLpcVbUuhkSWpfmchRJ4ra+RwfLjHrRcXEKYPESB/ C3cldM584lTe37eZG0tmpcpA97nSLIMFwbgsBMGK8gNvt2j+PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA3s4PXAmoWONnqITCtNvWGivrrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y2NTZlYjktNWQxOS0z M2IyLTkyMjEtNWFmYWY4NzYyYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhQeZuqU1lt7w3QJ41n9h/SoD96auppwLMCaK7QtttlZuL+e3Udfsi xYBgcth+TG7cqbvEruZtEUu+uUP/u7tntiBqKvCCt3KVCpPCtdOAp8zcpC1CC92o qER/w/yX9F0oe71NUi7MJiJ3Ie39/dNRdnehEWPyzQZC/GWDmdvwU7s5RxovpXjE JK2t9e6EIWjLCeXq9qxTrxBYfP5KC78Vn9aP780qMTnuEAgnSS+Io2aZOy6y1+78 w7EJ3v62qFy9KiPpQh/YP/r77VfZWav1LhR3lEyzKvt18y06GNZtLjlrvmbFjeuo uUAeM/Gy/vSZtEqfSoRHKJIfwUoD82Sj -----END CERTIFICATE-----Generated at Wed Jul 23 11:45:24 2025 by rpki-client