$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa File: ea634f65-8078-3511-abbf-238bf529bd3a.roa (raw, json) Hash identifier: dqo32msCmuUV/0Dutr9LqwBvoCoKHv8ZWtOvLHYa17g= Subject key identifier: F7:9E:BF:BE:D4:27:C8:AF:36:C2:64:62:66:C4:47:AA:6B:AA:82:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62841014A0AFF2A10301A4D2 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396591 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:14:a0:af:f2:a1:03:01:a4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=20424478-5ca3-4566-8d1a-2be1d08974ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:fe:15:00:8c:eb:84:1b:00:7f:7c:ba:15: 11:b6:98:d1:12:fc:37:06:9a:09:1c:9a:2f:33:92: 74:33:da:7f:d0:ea:49:f7:af:bb:25:41:08:22:5a: d1:cb:1a:aa:73:21:1e:88:30:ff:3d:82:77:1f:2c: 2d:79:b6:74:a5:24:e5:e5:33:97:7a:6c:2c:b5:1f: b1:12:f7:b0:60:4f:3d:83:52:52:27:9d:35:b6:d3: 4d:dc:3b:c5:5e:ee:63:b0:d7:ae:61:cf:15:67:76: 56:70:02:1a:7b:c6:e5:27:85:7c:21:d7:70:b3:36: 90:ab:f3:70:7d:70:38:61:4c:4d:9a:46:6b:23:90: 23:37:cd:9b:b1:5b:3d:da:b8:f3:f5:ec:82:b8:18: b5:51:81:20:16:51:f3:d2:ba:4a:1b:45:14:1c:c2: 02:5a:b5:63:51:fd:1a:36:a9:ed:9d:5e:85:29:ff: b0:43:bb:84:ca:3b:8b:41:0e:6a:3e:22:8d:46:49: 60:a5:b9:40:01:4b:53:0f:b4:46:ba:97:a4:0a:28: bc:14:ee:45:b4:5e:18:2d:2e:4f:48:84:c4:07:5c: d1:9d:bc:32:d9:e5:07:8c:a1:2d:a4:e4:d2:6c:07: 8c:6f:38:44:2c:7b:5e:4b:d9:36:a1:54:21:e6:4b: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:BF:BE:D4:27:C8:AF:36:C2:64:62:66:C4:47:AA:6B:AA:82:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:57:34:4f:57:0d:f8:58:ab:87:5f:a0:7e:03:a9:49:dd:a9: 9e:fa:b9:60:4e:da:18:e5:83:80:71:27:fd:44:a6:91:7b:99: b7:5e:0e:77:94:fc:62:ae:a5:73:d3:9e:87:71:44:8a:7c:85: 23:49:8f:ec:38:bd:9b:a6:10:36:b0:c7:a5:c0:ba:3e:f0:d7: d7:eb:bc:67:b5:a2:4f:ba:57:ee:e9:a7:cc:63:db:78:24:57: 1e:75:87:38:7c:0e:17:3a:c4:42:b4:99:13:3d:3a:2e:e4:94: 30:c8:8b:0d:07:b3:20:42:b2:9c:1d:46:16:d1:52:7c:44:f7: 43:ee:d0:8b:08:74:94:b4:b3:6a:b7:82:47:12:dd:c7:cb:a0: a0:28:09:fd:f5:4c:c2:02:94:b2:fa:71:82:72:84:3c:56:67: bf:1d:0f:4f:83:9a:80:89:64:1d:8d:29:12:72:04:59:9b:a0: e1:84:68:0f:6f:b2:b6:ff:47:49:ef:db:1b:77:81:90:77:f1: f8:52:51:a7:28:39:37:5b:c8:e0:bd:fe:0d:aa:01:a9:db:82: 36:7a:bd:5c:ba:27:58:2f:7a:47:28:bf:21:7c:55:f4:ea:60: d3:d9:8a:4d:dc:4c:eb:b4:51:61:04:ff:f1:54:c6:eb:96:a9: 14:ee:1b:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBAUoK/yoQMBpNIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk MjA0MjQ0NzgtNWNhMy00NTY2LThkMWEtMmJlMWQwODk3NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoT+FQCM64QbAH98uhURtpjREvw3BpoJHJov M5J0M9p/0OpJ96+7JUEIIlrRyxqqcyEeiDD/PYJ3HywtebZ0pSTl5TOXemwstR+x EvewYE89g1JSJ501ttNN3DvFXu5jsNeuYc8VZ3ZWcAIae8blJ4V8IddwszaQq/Nw fXA4YUxNmkZrI5AjN82bsVs92rjz9eyCuBi1UYEgFlHz0rpKG0UUHMICWrVjUf0a NqntnV6FKf+wQ7uEyjuLQQ5qPiKNRklgpblAAUtTD7RGupekCii8FO5FtF4YLS5P SITEB1zRnbwy2eUHjKEtpOTSbAeMbzhELHteS9k2oVQh5ku2pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPeev77UJ8ivNsJkYmbER6prqoLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE2MzRmNjUtODA3OC0z NTExLWFiYmYtMjM4YmY1MjliZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlVzRPVw34WKuHX6B+A6lJ3ame+rlgTtoY5YOAcSf9RKaRe5m3Xg53 lPxirqVz056HcUSKfIUjSY/sOL2bphA2sMelwLo+8NfX67xntaJPulfu6afMY9t4 JFcedYc4fA4XOsRCtJkTPTou5JQwyIsNB7MgQrKcHUYW0VJ8RPdD7tCLCHSUtLNq t4JHEt3Hy6CgKAn99UzCApSy+nGCcoQ8Vme/HQ9Pg5qAiWQdjSkScgRZm6DhhGgP b7K2/0dJ79sbd4GQd/H4UlGnKDk3W8jgvf4NqgGp24I2er1cuidYL3pHKL8hfFX0 6mDT2YpN3EzrtFFhBP/xVMbrlqkU7huh -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:17 2025 by rpki-client