$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f132d110-ca9f-3e60-beb9-6d23236a6169.roa File: f132d110-ca9f-3e60-beb9-6d23236a6169.roa (raw, json) Hash identifier: dO9GlYfnF7rtDZbRNhOoL7M6uOB+/SeYaVDArnGo5mI= Subject key identifier: 2A:F2:57:27:83:3E:89:99:FA:D2:F4:77:F3:8B:5F:22:48:E2:63:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628406906D20A84C4AED3160 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f132d110-ca9f-3e60-beb9-6d23236a6169.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396590 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:06:90:6d:20:a8:4c:4a:ed:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=28f4a114-9ac3-4a4f-882b-339a5146613d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:80:87:09:93:9d:d4:d9:c7:8f:d2:02:85:ec: b1:33:60:f9:01:0f:07:b1:5b:88:64:bf:1c:3d:05: ad:65:66:5c:ff:0c:39:d1:dc:e0:6b:3f:f9:ef:4e: 66:08:85:b5:7c:72:df:9d:2c:37:82:1a:02:e6:3e: 11:f2:07:08:4a:00:57:00:8d:2f:37:44:e7:2c:79: cc:f0:18:bd:95:d3:6d:2d:04:d2:dd:2f:f0:76:de: 22:a8:ac:a7:87:d0:88:cd:ab:a6:18:ef:91:96:7f: 90:4e:64:e7:8b:09:81:7f:1f:8a:20:73:28:d0:d7: 3d:56:d4:61:1c:ac:3c:39:97:11:a7:db:53:bf:44: 62:e7:3a:c8:98:03:0f:97:af:ed:db:03:c9:0f:f8: 42:15:ca:23:5e:de:74:dc:24:ea:e9:5b:a8:e1:01: 10:35:85:a4:a6:00:ed:e2:b3:24:23:aa:d6:5b:e9: ff:c7:bd:fe:f8:72:82:6f:d6:88:18:d3:e5:b7:c9: a9:7e:36:1d:80:cb:2d:70:09:81:e9:e6:be:30:3e: 85:57:33:b1:2e:89:4b:2e:0f:a1:5e:4c:6b:02:69: 35:37:28:28:22:28:fe:a4:7a:28:00:40:5f:32:8f: d4:ef:27:f9:a1:c4:f2:a2:58:c9:a3:74:50:2d:00: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F2:57:27:83:3E:89:99:FA:D2:F4:77:F3:8B:5F:22:48:E2:63:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f132d110-ca9f-3e60-beb9-6d23236a6169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:98:56:c7:c3:dd:f9:7a:08:4a:2f:09:7e:2d:bb:14:b7:f3: 5a:c5:04:35:72:77:2f:f2:c9:2d:31:d0:91:f4:78:ae:7f:56: e1:37:eb:18:e8:c9:6d:10:f3:cc:cf:30:0a:83:99:a9:03:73: 84:7b:3c:f8:5e:9d:f6:59:2a:33:c4:f8:8c:51:cb:b1:f6:10: 9a:a7:cf:be:dd:f7:47:0a:87:31:d2:d9:ef:fc:65:c4:45:76: 2d:29:91:10:81:af:71:b7:cc:1c:e7:ec:e2:6a:25:ea:2b:31: a4:8e:e0:db:99:b4:86:55:01:dc:96:28:50:f6:c4:2a:c2:be: cf:d3:f9:16:ea:53:d2:b6:08:5f:2d:0f:2c:b6:1a:63:7d:6d: e1:fc:18:54:f7:9d:4a:1f:fb:e8:89:01:65:e4:33:f2:80:83: 13:60:2e:5f:28:d1:16:81:a6:c3:0c:51:d6:8f:bf:80:c6:a5: 84:39:4d:f3:8b:a9:bc:95:6d:54:8a:b2:22:fa:87:27:68:a6: f6:06:27:eb:b2:44:5a:91:ed:f6:53:e3:3e:5e:e2:9c:bc:30: 33:5f:68:46:25:e7:28:fd:87:32:8b:32:0d:92:7e:97:a0:64: 30:e4:d0:0b:79:d0:96:cb:be:cb:95:7a:5f:e8:23:70:51:0a: 28:54:a8:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAaQbSCoTErtMWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MjhmNGExMTQtOWFjMy00YTRmLTg4MmItMzM5YTUxNDY2MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgICHCZOd1NnHj9ICheyxM2D5AQ8HsVuIZL8c PQWtZWZc/ww50dzgaz/5705mCIW1fHLfnSw3ghoC5j4R8gcISgBXAI0vN0TnLHnM 8Bi9ldNtLQTS3S/wdt4iqKynh9CIzaumGO+Rln+QTmTniwmBfx+KIHMo0Nc9VtRh HKw8OZcRp9tTv0Ri5zrImAMPl6/t2wPJD/hCFcojXt503CTq6Vuo4QEQNYWkpgDt 4rMkI6rWW+n/x73++HKCb9aIGNPlt8mpfjYdgMstcAmB6ea+MD6FVzOxLolLLg+h XkxrAmk1NygoIij+pHooAEBfMo/U7yf5ocTyoljJo3RQLQBBHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCryVyeDPomZ+tL0d/OLXyJI4mNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjEzMmQxMTAtY2E5Zi0z ZTYwLWJlYjktNmQyMzIzNmE2MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANmFbHw935eghKLwl+LbsUt/NaxQQ1cncv8sktMdCR9Hiuf1bhN+sY 6MltEPPMzzAKg5mpA3OEezz4Xp32WSozxPiMUcux9hCap8++3fdHCocx0tnv/GXE RXYtKZEQga9xt8wc5+ziaiXqKzGkjuDbmbSGVQHclihQ9sQqwr7P0/kW6lPStghf LQ8sthpjfW3h/BhU951KH/voiQFl5DPygIMTYC5fKNEWgabDDFHWj7+AxqWEOU3z i6m8lW1UirIi+ocnaKb2BifrskRake32U+M+XuKcvDAzX2hGJeco/YcyizINkn6X oGQw5NALedCWy77LlXpf6CNwUQooVKhp -----END CERTIFICATE-----Generated at Wed Jul 23 11:46:03 2025 by rpki-client