$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee366db4-b7cf-3822-b1a5-7e7591778c31.roa File: ee366db4-b7cf-3822-b1a5-7e7591778c31.roa (raw, json) Hash identifier: Z3KIBp5ez6Bt8hhQV72HG2fLlwDUmy3iDUh11mPSTHE= Subject key identifier: CC:68:FD:94:27:CC:59:3D:D9:24:89:E3:E3:3A:49:DB:1E:D5:78:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840FDDEC7091937989B980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee366db4-b7cf-3822-b1a5-7e7591778c31.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 19836 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0f:dd:ec:70:91:93:79:89:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=46ccd0a7-0b26-4080-ab41-022cc0a6e837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:40:60:60:19:4e:13:ed:7d:6e:d4:1c:ba: a9:08:8d:28:86:16:38:bc:2e:98:1e:21:ab:49:49: b6:4e:0e:bc:4b:18:66:a8:dd:fa:00:87:52:34:58: de:fc:d8:88:d1:27:0f:36:11:f4:58:52:4b:28:49: fd:8e:f3:02:9b:f1:5c:d3:9e:b0:be:43:8a:41:21: e3:3f:11:8a:b9:64:bd:09:e0:7d:db:f9:47:39:94: 4b:e0:d4:fd:20:ad:f2:a6:d5:8b:ca:fe:37:68:5e: 2b:5b:17:62:a9:1b:f2:92:98:65:3f:07:6b:5f:f6: 15:6a:4b:17:4d:c1:dc:96:93:55:40:1b:c2:f8:b0: a6:09:86:8d:4b:bc:d5:57:6f:50:c5:5e:92:89:ab: 87:20:2c:25:78:b6:43:bc:cc:d1:51:9a:de:fd:9d: 38:b7:41:a8:ff:be:9e:f1:52:81:1a:1a:2f:88:c8: 0a:ed:69:37:e4:55:93:35:19:06:30:54:29:0b:ca: 23:bf:dc:b2:31:b6:99:48:b9:24:56:05:ff:c8:78: 9d:92:4e:9d:d9:c8:24:2e:11:df:03:bf:1e:ba:ee: b9:1a:80:99:78:44:2a:10:11:6d:ae:04:04:33:56: a8:f5:f4:f5:53:c7:fe:34:72:ca:6b:62:99:f2:9b: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:FD:94:27:CC:59:3D:D9:24:89:E3:E3:3A:49:DB:1E:D5:78:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee366db4-b7cf-3822-b1a5-7e7591778c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fe:b3:df:a7:1d:94:a9:86:78:d6:a5:d8:bf:32:5f:02:dd: 72:43:8f:be:84:22:43:d8:d1:b8:31:6a:3e:dc:b5:c0:8b:bf: 6c:3b:73:ba:36:d3:1b:91:e1:ed:2f:0f:b1:f2:5d:3e:8f:64: 3d:dc:29:1c:87:8c:68:8e:69:91:c4:10:49:dd:44:d1:d4:05: 18:45:26:9e:d3:25:80:a6:b9:be:5e:9e:e0:c6:f6:93:a3:02: 02:f7:9b:33:bb:c3:07:b6:ef:05:5d:2a:9c:1a:b4:7c:e4:10: 80:14:bc:e9:12:29:9e:43:c7:95:a9:d5:7b:73:63:fc:25:22: 9e:cf:15:00:3a:0f:a2:be:2c:66:0d:0e:2f:d8:aa:b3:62:2c: e7:3b:46:b5:dd:5a:0f:b7:ae:cc:7b:b6:04:07:cb:8d:9e:8e: 61:f0:c5:60:c1:f3:30:cc:60:d8:d7:73:04:43:6c:0a:82:36: 26:02:f6:02:5d:50:f9:41:b2:e9:8d:82:a6:e6:f6:b2:2b:a3: 05:0a:eb:7e:07:fe:1d:f3:4b:a4:30:5c:21:56:f2:ab:11:55: 6a:f5:f8:45:d8:99:d7:08:cd:f4:16:6f:b1:20:cc:f6:6d:75: 0b:46:9f:da:18:07:45:a6:d0:8f:5a:03:da:82:80:0f:c3:18: 58:a5:02:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA/d7HCRk3mJuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk NDZjY2QwYTctMGIyNi00MDgwLWFiNDEtMDIyY2MwYTZlODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdAYGAZThPtfW7UHLqpCI0ohhY4vC6YHiGr SUm2Tg68SxhmqN36AIdSNFje/NiI0ScPNhH0WFJLKEn9jvMCm/Fc056wvkOKQSHj PxGKuWS9CeB92/lHOZRL4NT9IK3yptWLyv43aF4rWxdiqRvykphlPwdrX/YVaksX TcHclpNVQBvC+LCmCYaNS7zVV29QxV6SiauHICwleLZDvMzRUZre/Z04t0Go/76e 8VKBGhoviMgK7Wk35FWTNRkGMFQpC8ojv9yyMbaZSLkkVgX/yHidkk6d2cgkLhHf A78euu65GoCZeEQqEBFtrgQEM1ao9fT1U8f+NHLKa2KZ8psCzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMxo/ZQnzFk92SSJ4+M6Sdse1XhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWUzNjZkYjQtYjdjZi0z ODIyLWIxYTUtN2U3NTkxNzc4YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq/rPfpx2UqYZ41qXYvzJfAt1yQ4++hCJD2NG4MWo+3LXAi79sO3O6 NtMbkeHtLw+x8l0+j2Q93Ckch4xojmmRxBBJ3UTR1AUYRSae0yWAprm+Xp7gxvaT owIC95szu8MHtu8FXSqcGrR85BCAFLzpEimeQ8eVqdV7c2P8JSKezxUAOg+ivixm DQ4v2KqzYiznO0a13VoPt67Me7YEB8uNno5h8MVgwfMwzGDY13MEQ2wKgjYmAvYC XVD5QbLpjYKm5vayK6MFCut+B/4d80ukMFwhVvKrEVVq9fhF2JnXCM30Fm+xIMz2 bXULRp/aGAdFptCPWgPagoAPwxhYpQI1 -----END CERTIFICATE-----Generated at Wed Jul 23 11:44:41 2025 by rpki-client