$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa File: d2eb248e-d864-39df-ad59-05847a5e4be4.roa (raw, json) Hash identifier: 4jVQZ1k1JySwJrUh/AKhwGVQ5zOcBELOnKT5E6M8HJs= Subject key identifier: 15:8B:D9:C8:4F:32:8C:41:9C:90:BC:DA:B8:2B:0C:A5:71:7E:BB:0F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628410FEDDC8734906C17A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 32651 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:fe:dd:c8:73:49:06:c1:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=c1ef0a7f-c61a-497f-9d24-b8e71f6c19ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:84:d4:bf:88:4f:86:c6:20:02:ea:02:b7: 88:be:00:44:54:0a:fc:09:1d:1b:1b:b5:f6:f9:41: 9c:61:a6:70:1e:c9:fb:f4:38:c9:20:55:65:e8:f4: c3:ac:e3:0c:42:60:df:f0:5c:46:36:9c:68:5b:f6: 4c:d8:58:5f:a7:1f:57:54:33:be:27:bc:7d:4b:98: 69:b8:bb:6a:f7:c6:24:bb:06:3e:b3:8f:2a:ce:de: af:78:31:97:ac:67:49:f4:7f:c0:58:bc:31:39:24: ec:36:27:ac:33:dc:76:46:d3:71:5c:d8:44:95:8a: e4:c5:d7:d3:04:6f:7a:90:c7:26:35:12:f3:c7:c5: 88:06:9d:a6:a7:a4:91:70:bd:0e:d9:2b:2c:69:58: 65:2e:58:c4:84:e8:15:c1:cf:72:ba:57:08:9e:e5: 26:92:fe:d4:62:74:fc:e6:9e:5b:fb:10:6b:96:0c: e0:5c:89:d9:46:c9:72:f4:14:23:5b:8b:6b:73:80: 90:cb:86:8a:a8:e7:cf:6f:b5:06:54:9f:34:73:21: 0a:16:62:69:b9:9b:10:69:e0:8d:53:bc:4e:a3:3e: b2:9e:71:78:af:0d:7d:03:94:38:9a:6d:56:32:d7: f0:4f:db:99:25:a7:1b:6d:10:57:f9:22:cd:e3:c1: e6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:D9:C8:4F:32:8C:41:9C:90:BC:DA:B8:2B:0C:A5:71:7E:BB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9c:67:46:4e:6a:72:e5:76:14:51:d9:a0:32:72:45:af:ff: b0:c0:cf:30:ba:ee:93:f3:30:52:8c:26:b2:04:ea:6b:8a:74: ed:c5:93:aa:2f:0d:e9:3e:e6:cf:66:d6:33:24:51:5c:94:5d: 9e:20:e0:cd:d2:41:c8:e4:0c:70:e4:d6:0f:ff:d3:de:52:1a: 2d:c1:87:68:c5:d8:d8:a2:80:e1:a4:5b:a4:b1:c9:fb:82:2d: 37:a2:5b:61:47:79:96:72:a3:e5:99:df:5b:79:0c:8b:d0:e6: f1:02:53:09:4d:d9:1f:73:30:ff:31:a3:a8:4a:de:42:a4:7c: e6:c5:49:d1:f8:82:c1:ab:51:88:17:2e:0d:ef:d4:16:e1:c7: 53:06:6c:9f:1a:0c:8c:93:84:fa:6e:43:c2:b9:22:bc:31:c0: f4:d8:0e:aa:c4:02:96:d2:8b:d3:77:4d:41:f4:12:63:32:b3: ee:c0:45:0c:a1:23:86:6a:60:48:ad:d5:f4:31:8a:84:43:77: 26:52:3a:c7:02:a5:f5:d5:c1:e5:de:24:d7:fe:ff:44:1e:6b: 16:9a:55:4d:e8:3d:d7:af:81:d7:dc:10:08:2a:d0:d2:7d:ee: 30:23:59:13:52:61:15:ac:20:10:74:8d:88:ac:1c:2f:3f:3a: 26:9d:b5:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBD+3chzSQbBegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk YzFlZjBhN2YtYzYxYS00OTdmLTlkMjQtYjhlNzFmNmMxOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjryE1L+IT4bGIALqAreIvgBEVAr8CR0bG7X2 +UGcYaZwHsn79DjJIFVl6PTDrOMMQmDf8FxGNpxoW/ZM2Fhfpx9XVDO+J7x9S5hp uLtq98YkuwY+s48qzt6veDGXrGdJ9H/AWLwxOSTsNiesM9x2RtNxXNhElYrkxdfT BG96kMcmNRLzx8WIBp2mp6SRcL0O2SssaVhlLljEhOgVwc9yulcInuUmkv7UYnT8 5p5b+xBrlgzgXInZRsly9BQjW4trc4CQy4aKqOfPb7UGVJ80cyEKFmJpuZsQaeCN U7xOoz6ynnF4rw19A5Q4mm1WMtfwT9uZJacbbRBX+SLN48HmhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBWL2chPMoxBnJC82rgrDKVxfrsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJlYjI0OGUtZDg2NC0z OWRmLWFkNTktMDU4NDdhNWU0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgnGdGTmpy5XYUUdmgMnJFr/+wwM8wuu6T8zBSjCayBOprinTtxZOq Lw3pPubPZtYzJFFclF2eIODN0kHI5Axw5NYP/9PeUhotwYdoxdjYooDhpFukscn7 gi03olthR3mWcqPlmd9beQyL0ObxAlMJTdkfczD/MaOoSt5CpHzmxUnR+ILBq1GI Fy4N79QW4cdTBmyfGgyMk4T6bkPCuSK8McD02A6qxAKW0ovTd01B9BJjMrPuwEUM oSOGamBIrdX0MYqEQ3cmUjrHAqX11cHl3iTX/v9EHmsWmlVN6D3Xr4HX3BAIKtDS fe4wI1kTUmEVrCAQdI2IrBwvPzomnbVs -----END CERTIFICATE-----Generated at Wed Jul 23 11:42:39 2025 by rpki-client