$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa File: d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa (raw, json) Hash identifier: UAuOgo91ywHmI5JgmLO5J/ZB7vZQa6UO9Qn4Xb9kjUU= Subject key identifier: C1:67:BC:5C:8D:10:2B:54:39:8B:E8:E3:C5:02:04:FF:FC:53:AF:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840F8A6E6A37226383A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396555 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:8a:6e:6a:37:22:63:83:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=e71b3c7c-d8b3-4e7e-88a8-a658df18bdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:04:93:81:51:a3:51:d8:59:67:4e:aa:e7: 23:62:31:36:59:66:32:1f:41:2f:ab:a9:ab:49:fb: 10:3c:98:df:d1:04:da:fc:9f:41:d4:d9:c2:b5:72: 2e:92:2b:3c:cf:32:da:be:2d:8c:e4:b3:b0:83:ca: 9d:82:ff:59:cc:c7:02:f5:f1:0e:12:dc:25:45:1c: d1:fe:49:04:90:49:b3:3d:74:45:a5:8f:89:a9:4f: b0:9e:96:52:01:87:52:dc:d2:84:da:6d:5b:90:37: 19:74:81:ff:ba:71:4e:e1:d7:e7:51:96:4e:f5:d3: 73:e7:ab:92:b2:a6:b6:ea:58:60:7b:a9:ea:5a:32: 2d:6c:85:f6:67:23:af:f6:c0:1d:12:4a:77:3b:a3: b1:81:19:cf:62:c3:32:54:d1:cc:59:ef:f9:ba:7b: b9:0f:43:42:5e:54:4e:88:5b:fc:32:8f:9c:a5:07: 29:0e:3e:a8:f1:1b:f6:52:e2:62:ea:00:71:0a:b7: e6:cc:be:b3:c3:47:cb:de:2c:31:90:6c:35:f3:7c: 15:bf:65:1f:96:bc:21:fe:bd:02:60:ca:cf:26:11: 0e:41:48:47:9f:84:68:88:e6:c6:e5:1c:70:44:01: 75:f3:bb:c8:e1:b9:5b:36:dd:d0:54:cf:42:f0:d7: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:67:BC:5C:8D:10:2B:54:39:8B:E8:E3:C5:02:04:FF:FC:53:AF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:aa:02:76:53:04:fd:da:56:ed:40:83:29:f6:09:73:b5:a1: 14:59:38:17:5a:f6:f9:a8:95:24:13:dd:8c:f9:7b:e8:96:af: a4:ce:5b:52:a6:dd:f6:8f:3b:db:b4:37:b1:0d:d6:5f:20:42: cf:87:66:50:d1:35:ac:8b:be:b8:e8:56:6f:46:a6:cc:58:07: f7:5b:a3:8b:9a:57:4d:71:d8:03:23:1d:e8:66:db:f3:7d:17: f6:ea:5b:f4:4a:91:c6:4c:5a:33:92:98:09:55:2d:79:8e:50: ff:01:19:b7:24:37:e6:2d:7b:d6:ae:c5:54:36:a1:d9:5e:7b: 6e:38:ac:57:ba:79:71:ba:6b:82:c4:4b:ee:e8:f3:de:16:54: c7:fe:81:63:ab:af:9c:1b:ae:34:9c:77:48:f1:5a:b2:ac:fd: 8e:e1:21:8b:3a:c7:7a:ef:20:93:88:0b:e9:8c:5c:38:90:3c: a5:92:e3:77:ff:5d:fc:a4:8e:9d:f9:a1:f7:08:06:f8:db:7c: ce:ef:d9:b3:42:ea:b4:21:26:c5:87:de:08:86:7b:8b:41:d3: 92:c8:ed:a5:bd:92:fb:de:49:28:9a:e0:fc:9e:7b:cf:f9:bd: 6d:06:75:7f:ed:4f:6f:cc:9d:6e:83:78:d3:a7:57:be:83:3d: ee:29:77:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA+Kbmo3ImODqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk ZTcxYjNjN2MtZDhiMy00ZTdlLTg4YTgtYTY1OGRmMThiZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsEEk4FRo1HYWWdOqucjYjE2WWYyH0Evq6mr SfsQPJjf0QTa/J9B1NnCtXIukis8zzLavi2M5LOwg8qdgv9ZzMcC9fEOEtwlRRzR /kkEkEmzPXRFpY+JqU+wnpZSAYdS3NKE2m1bkDcZdIH/unFO4dfnUZZO9dNz56uS sqa26lhge6nqWjItbIX2ZyOv9sAdEkp3O6OxgRnPYsMyVNHMWe/5unu5D0NCXlRO iFv8Mo+cpQcpDj6o8Rv2UuJi6gBxCrfmzL6zw0fL3iwxkGw183wVv2Uflrwh/r0C YMrPJhEOQUhHn4RoiObG5RxwRAF187vI4blbNt3QVM9C8NekmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMFnvFyNECtUOYvo48UCBP/8U69UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBmNzExZjktZWEyZC0z OGViLWJhMDUtNTYzYzBmMGEwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5qgJ2UwT92lbtQIMp9glztaEUWTgXWvb5qJUkE92M+Xvolq+kzltS pt32jzvbtDexDdZfIELPh2ZQ0TWsi7646FZvRqbMWAf3W6OLmldNcdgDIx3oZtvz fRf26lv0SpHGTFozkpgJVS15jlD/ARm3JDfmLXvWrsVUNqHZXntuOKxXunlxumuC xEvu6PPeFlTH/oFjq6+cG640nHdI8VqyrP2O4SGLOsd67yCTiAvpjFw4kDylkuN3 /138pI6d+aH3CAb423zO79mzQuq0ISbFh94IhnuLQdOSyO2lvZL73kkomuD8nnvP +b1tBnV/7U9vzJ1ug3jTp1e+gz3uKXeP -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:16 2025 by rpki-client