$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d0e08c-1320-382f-a2f9-6a427589cae0.roa File: e9d0e08c-1320-382f-a2f9-6a427589cae0.roa (raw, json) Hash identifier: NFH42FhZWOqGdUdkOwSvcIxCiYKSlCaLcXZC9aSntqs= Subject key identifier: EB:EE:30:08:42:7E:0B:B1:A8:73:2D:3E:35:69:73:F3:3E:7E:24:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840A097BC75A54A001DDA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d0e08c-1320-382f-a2f9-6a427589cae0.roa Signing time: Wed 02 Jul 2025 12:36:01 +0000 ROA not before: Wed 02 Jul 2025 12:36:01 +0000 ROA not after: Tue 30 Sep 2025 12:36:01 +0000 asID: 396587 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0a:09:7b:c7:5a:54:a0:01:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:01 2025 GMT Not After : Sep 30 12:36:01 2025 GMT Subject: CN=9c73d423-841f-46d2-9b55-6fa5c14c1204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:4e:68:d7:c3:05:be:bd:d9:de:2e:f8:08: 8d:dd:a2:13:2a:06:f5:ac:9a:c4:20:6c:7b:9d:54: 54:74:07:c2:58:e3:e1:75:73:d2:ec:d0:03:16:9c: 42:54:2a:9a:0a:a6:d3:08:97:19:bd:85:e5:98:d8: 86:6e:c9:ec:f5:1f:25:fa:08:9d:37:d3:cb:b7:21: be:d6:2e:92:b2:25:27:f5:84:88:79:9f:b4:c9:11: 0d:91:18:d4:c7:1b:69:29:33:3e:0b:25:2c:4c:6e: db:1d:4f:f5:91:c9:c6:bb:2f:49:23:45:e4:7b:72: 43:28:a4:4b:76:4a:a1:71:fa:1f:2b:cd:94:0e:df: b6:20:6e:bc:94:b9:cc:ec:67:4f:7f:18:fd:01:fa: 71:9b:1d:25:d8:74:e3:0c:90:12:f1:6e:11:b7:e3: 5e:04:fb:60:78:3a:44:6b:bd:25:96:48:d8:1b:16: f3:9d:c2:48:37:c0:05:68:eb:7d:18:09:c2:68:d7: 28:a5:c6:e8:6a:e1:47:b7:5a:79:e4:55:76:dd:2c: 3f:08:32:97:36:af:b4:bb:e3:73:11:10:c8:ac:31: c8:0e:a8:70:8b:cc:70:f8:41:2e:d4:66:92:34:5e: 4d:eb:65:c9:b6:1f:30:ba:8a:8d:35:26:94:bc:a3: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EE:30:08:42:7E:0B:B1:A8:73:2D:3E:35:69:73:F3:3E:7E:24:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d0e08c-1320-382f-a2f9-6a427589cae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ad:b7:83:5d:17:45:e5:f2:ee:ed:61:4f:bb:9a:da:97:19: c5:98:02:8b:ba:97:9b:73:d4:6d:19:0f:4b:22:17:95:d5:93: 2e:3b:41:cb:30:a5:4c:2f:91:32:7e:36:5a:85:52:7b:08:a2: 25:e0:01:10:9b:d9:14:4f:21:22:f2:62:4c:c9:36:dd:fa:b0: 62:c0:19:6e:9e:ba:80:92:b3:c1:3b:f2:3f:ea:91:9e:9a:2d: 67:ee:09:6f:89:80:de:d2:43:81:f1:a1:42:b5:8e:8c:cf:73: 5d:a0:45:46:bb:bc:92:e3:da:59:e2:94:30:2f:ee:63:ee:f8: 22:20:8b:cf:00:bb:ca:20:28:94:71:64:08:e1:4e:d0:49:56: c7:9d:4b:53:fa:16:bc:91:8e:46:30:12:3c:76:f7:3f:c8:2a: f3:d5:a8:bb:35:9b:b6:7d:26:1b:02:03:47:0d:55:e2:e1:e6: 4d:9a:55:8e:57:67:ff:09:d9:ad:4c:b2:31:53:cd:5b:e9:d6: c0:08:0a:52:31:ac:67:04:34:09:39:cc:82:f4:8d:4d:ae:82: 14:ca:31:c2:e2:0b:d3:e2:c0:75:d0:6e:6e:77:19:10:c3:cf: e2:4a:8a:8e:ac:da:d6:1c:18:07:78:4d:07:94:37:92:cc:45: 80:e3:96:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAoJe8daVKAB3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMVoXDTI1MDkzMDEyMzYwMVowLzEtMCsGA1UEAxMk OWM3M2Q0MjMtODQxZi00NmQyLTliNTUtNmZhNWMxNGMxMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfdOaNfDBb692d4u+AiN3aITKgb1rJrEIGx7 nVRUdAfCWOPhdXPS7NADFpxCVCqaCqbTCJcZvYXlmNiGbsns9R8l+gidN9PLtyG+ 1i6SsiUn9YSIeZ+0yRENkRjUxxtpKTM+CyUsTG7bHU/1kcnGuy9JI0Xke3JDKKRL dkqhcfofK82UDt+2IG68lLnM7GdPfxj9Afpxmx0l2HTjDJAS8W4Rt+NeBPtgeDpE a70llkjYGxbzncJIN8AFaOt9GAnCaNcopcboauFHt1p55FV23Sw/CDKXNq+0u+Nz ERDIrDHIDqhwi8xw+EEu1GaSNF5N62XJth8wuoqNNSaUvKMdoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOvuMAhCfguxqHMtPjVpc/M+fiTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTlkMGUwOGMtMTMyMC0z ODJmLWEyZjktNmE0Mjc1ODljYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKrbeDXRdF5fLu7WFPu5ralxnFmAKLupebc9RtGQ9LIheV1ZMuO0HL MKVML5EyfjZahVJ7CKIl4AEQm9kUTyEi8mJMyTbd+rBiwBlunrqAkrPBO/I/6pGe mi1n7glviYDe0kOB8aFCtY6Mz3NdoEVGu7yS49pZ4pQwL+5j7vgiIIvPALvKICiU cWQI4U7QSVbHnUtT+ha8kY5GMBI8dvc/yCrz1ai7NZu2fSYbAgNHDVXi4eZNmlWO V2f/CdmtTLIxU81b6dbACApSMaxnBDQJOcyC9I1NroIUyjHC4gvT4sB10G5udxkQ w8/iSoqOrNrWHBgHeE0HlDeSzEWA45ZV -----END CERTIFICATE-----Generated at Wed Jul 23 11:37:15 2025 by rpki-client