$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ca7976-3b4a-301f-8e03-f8e7a446238a.roa File: f6ca7976-3b4a-301f-8e03-f8e7a446238a.roa (raw, json) Hash identifier: vZMWedqy5ZExUuwdrQtLbv/A6Iiujo1wIbbcbX3Oy0o= Subject key identifier: 47:B9:94:A8:63:19:61:C6:A4:B8:AF:B7:38:A6:6A:D3:60:A1:D8:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840D935ACC43499AE39A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ca7976-3b4a-301f-8e03-f8e7a446238a.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 396546 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:93:5a:cc:43:49:9a:e3:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=36a44d84-889d-411d-b627-c180ac96f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:1d:01:8b:f2:25:04:3e:5b:9e:3b:58:63: d5:f3:62:06:09:b7:8f:8f:e7:0f:3e:39:2c:0c:aa: 41:a9:ed:90:4e:40:14:6d:d4:5c:da:9e:a9:4d:1f: 6d:22:a6:a0:5b:f4:b8:43:7d:98:09:3b:7b:14:5c: 01:b5:d5:52:c6:c4:f0:c5:d0:d4:a8:73:ba:d4:4c: 63:d1:f6:fe:0e:84:b5:6b:f1:b5:9c:14:dc:25:02: 4b:8c:84:35:4a:38:ce:db:c6:0b:06:57:20:59:0b: 75:4f:33:6f:59:a4:ef:dd:9d:39:f3:c3:65:44:c5: 1b:88:08:54:04:8b:18:b7:0d:f5:da:87:87:9d:da: 3c:1d:3f:78:78:5c:16:fd:f7:08:21:ca:11:c9:7c: 45:3a:99:c9:d6:b2:7d:3a:40:03:f5:95:28:00:b9: 45:5a:e8:84:2c:b9:39:c0:23:e4:97:90:94:39:b2: 9e:b3:76:13:de:bf:a4:73:d4:18:d4:8e:ce:68:49: 94:de:9e:b2:3c:34:e7:98:f4:29:a6:40:48:5d:70: ab:77:45:2e:2d:7c:a4:fb:3f:67:50:0d:43:b3:e8: c1:80:89:3f:30:c7:f0:90:19:7c:b8:c6:b8:62:41: c4:49:96:30:e5:2c:fd:6b:1a:f3:5c:93:fb:3c:27: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B9:94:A8:63:19:61:C6:A4:B8:AF:B7:38:A6:6A:D3:60:A1:D8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6ca7976-3b4a-301f-8e03-f8e7a446238a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b0:32:c1:31:27:a1:e3:70:ad:cf:09:81:4d:05:ab:34:92: a2:fe:53:37:0f:4f:f6:cb:08:d9:1c:56:57:15:3e:c9:2e:cd: aa:30:c3:3d:2b:ac:1a:c4:dd:13:f2:6a:79:47:23:58:ea:6e: 69:d0:a6:4e:d7:72:8c:7d:e6:e4:46:78:d5:96:3a:50:df:0a: e4:3b:44:4a:43:d0:9a:1b:7b:1c:1b:91:18:0a:31:86:e9:6e: 39:76:a4:a0:c5:70:43:45:af:bd:12:ba:1d:a9:af:d0:4f:ca: c6:84:c0:2d:76:07:e5:ba:87:8f:cd:f2:5f:ab:61:9b:06:0b: ba:75:53:d5:2c:f2:cc:cf:b1:35:2a:4e:88:fd:d3:70:2c:91: 5b:88:dc:6e:79:3a:73:d1:a1:3c:ad:89:4c:12:97:e9:0b:94: 95:ba:04:c0:7a:59:aa:be:25:9c:fd:e4:ce:8c:20:3a:3a:56: 64:92:63:67:75:e5:be:7a:d9:42:6c:c7:dd:66:e1:0e:cd:6c: 21:ed:9f:65:17:a6:aa:b9:37:3a:ba:39:44:2f:fe:27:1e:09: 10:64:23:db:7b:df:a0:88:7d:37:b8:45:9b:37:af:fa:a5:9d: ba:78:03:6b:91:be:b8:e6:69:73:ab:5a:12:a5:81:13:87:60: 25:ce:99:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA2TWsxDSZrjmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk MzZhNDRkODQtODg5ZC00MTFkLWI2MjctYzE4MGFjOTZmMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UsdAYvyJQQ+W547WGPV82IGCbePj+cPPjks DKpBqe2QTkAUbdRc2p6pTR9tIqagW/S4Q32YCTt7FFwBtdVSxsTwxdDUqHO61Exj 0fb+DoS1a/G1nBTcJQJLjIQ1SjjO28YLBlcgWQt1TzNvWaTv3Z0588NlRMUbiAhU BIsYtw312oeHndo8HT94eFwW/fcIIcoRyXxFOpnJ1rJ9OkAD9ZUoALlFWuiELLk5 wCPkl5CUObKes3YT3r+kc9QY1I7OaEmU3p6yPDTnmPQppkBIXXCrd0UuLXyk+z9n UA1Ds+jBgIk/MMfwkBl8uMa4YkHESZYw5Sz9axrzXJP7PCf09QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEe5lKhjGWHGpLivtzimatNgodjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjZjYTc5NzYtM2I0YS0z MDFmLThlMDMtZjhlN2E0NDYyMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9sDLBMSeh43CtzwmBTQWrNJKi/lM3D0/2ywjZHFZXFT7JLs2qMMM9 K6waxN0T8mp5RyNY6m5p0KZO13KMfebkRnjVljpQ3wrkO0RKQ9CaG3scG5EYCjGG 6W45dqSgxXBDRa+9Erodqa/QT8rGhMAtdgfluoePzfJfq2GbBgu6dVPVLPLMz7E1 Kk6I/dNwLJFbiNxueTpz0aE8rYlMEpfpC5SVugTAelmqviWc/eTOjCA6OlZkkmNn deW+etlCbMfdZuEOzWwh7Z9lF6aquTc6ujlEL/4nHgkQZCPbe9+giH03uEWbN6/6 pZ26eANrkb645mlzq1oSpYETh2AlzpmE -----END CERTIFICATE-----Generated at Wed Jul 23 11:41:30 2025 by rpki-client