$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa File: f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa (raw, json) Hash identifier: ZaPCX5rwYjfKIffH1hCB+aV92r/H07rFP1xb/z0Ft3g= Subject key identifier: A3:EB:9A:FA:BA:FA:AA:11:31:1C:50:13:A6:4A:5C:66:A6:F3:C8:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628407F38C580A150E72B300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa Signing time: Wed 02 Jul 2025 12:36:00 +0000 ROA not before: Wed 02 Jul 2025 12:36:00 +0000 ROA not after: Tue 30 Sep 2025 12:36:00 +0000 asID: 396595 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:07:f3:8c:58:0a:15:0e:72:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:00 2025 GMT Not After : Sep 30 12:36:00 2025 GMT Subject: CN=2a7d1077-0e16-426b-8d9f-053a1fc8dfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:3b:7f:75:7a:a9:ca:76:13:ac:99:c8:8d: dd:6e:af:03:f6:03:c7:cf:6a:0a:39:2e:d9:aa:23: 46:9c:e1:02:da:84:c5:a0:b3:ab:20:be:e2:64:c3: d2:d6:c0:f3:8c:f1:c9:de:ef:95:9e:76:4c:a6:23: 67:8c:e8:35:6a:f3:9e:67:eb:4e:8a:8d:fe:3d:20: f3:9a:76:a9:cb:16:ec:df:88:c8:18:f3:ab:94:96: 74:6d:a3:f9:da:89:b2:39:4e:22:4f:00:62:a3:64: ba:0a:2e:ec:d5:a2:77:d0:f5:32:1b:71:6f:b4:9c: d8:fc:1f:50:8b:c6:f0:23:f7:56:16:92:3d:a0:2b: 48:7c:af:7c:d9:98:4b:ff:a7:df:6f:89:ba:35:f2: 36:60:13:97:80:9e:a3:59:01:fe:f4:a1:b8:1a:de: 06:d5:a9:0d:bf:2c:18:ba:8b:6b:78:cf:5e:12:5c: a4:35:01:19:5f:b4:51:79:0d:a2:71:41:f5:46:29: 89:59:20:69:15:4d:08:8a:a0:a4:87:ff:10:11:14: 3b:38:a3:89:6a:c0:5a:d2:fa:47:51:94:b8:b2:1f: d6:f0:26:ed:84:97:fc:d2:d0:07:87:eb:07:51:c5: 36:62:2b:c3:fe:cc:e7:a6:2f:be:77:ea:6b:89:b7: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:9A:FA:BA:FA:AA:11:31:1C:50:13:A6:4A:5C:66:A6:F3:C8:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5f:f5:4d:38:46:3d:e1:fa:4d:8b:f0:7a:bf:6b:31:15:d7: 21:20:e7:57:1d:e0:c7:14:29:84:e5:14:87:8e:81:65:3e:ff: c7:f3:61:fb:1d:10:72:cf:cf:15:50:ce:0c:6a:fa:24:6c:ba: 8d:3a:8e:61:cf:20:92:bb:a9:6c:e3:8b:be:28:d5:93:c3:69: 00:24:2d:f7:cd:eb:2a:4f:a7:31:b3:a5:37:cc:d0:08:71:7a: e4:16:3b:64:e9:13:2b:54:c2:1a:ee:91:09:c4:22:6e:36:90: f3:2d:dc:b3:6f:38:f9:82:86:94:e7:e4:8b:46:f0:19:6c:ea: 8d:87:68:04:07:f8:b3:66:0c:d7:53:d9:b3:9b:54:69:b9:57: cd:a4:c9:4d:89:e6:67:ca:4e:3e:0b:64:c5:63:6b:c2:77:6a: ff:7a:3d:04:70:f6:37:af:4b:de:aa:51:d9:7d:02:15:0b:4b: 42:5f:dd:27:47:5d:0c:09:c4:56:0a:20:fc:9a:12:db:3e:8a: 6f:ce:ef:e8:f3:6e:00:13:90:93:16:6c:7c:03:24:26:f4:bb: 59:ea:ea:04:5f:e9:89:83:52:d0:28:94:9b:44:c5:23:d0:6b: 16:39:97:65:08:16:af:d8:55:db:50:5d:56:46:ad:99:c3:06: ae:65:d9:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihAfzjFgKFQ5yswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwMFoXDTI1MDkzMDEyMzYwMFowLzEtMCsGA1UEAxMk MmE3ZDEwNzctMGUxNi00MjZiLThkOWYtMDUzYTFmYzhkZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm07f3V6qcp2E6yZyI3dbq8D9gPHz2oKOS7Z qiNGnOEC2oTFoLOrIL7iZMPS1sDzjPHJ3u+VnnZMpiNnjOg1avOeZ+tOio3+PSDz mnapyxbs34jIGPOrlJZ0baP52omyOU4iTwBio2S6Ci7s1aJ30PUyG3FvtJzY/B9Q i8bwI/dWFpI9oCtIfK982ZhL/6ffb4m6NfI2YBOXgJ6jWQH+9KG4Gt4G1akNvywY uotreM9eElykNQEZX7RReQ2icUH1RimJWSBpFU0IiqCkh/8QERQ7OKOJasBa0vpH UZS4sh/W8CbthJf80tAHh+sHUcU2YivD/sznpi++d+pribeOAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKPrmvq6+qoRMRxQE6ZKXGam88i6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhhZmY0MWUtZWIwNS0z NDdkLTkyMzYtYjM2YThhMTdjZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnX/VNOEY94fpNi/B6v2sxFdchIOdXHeDHFCmE5RSHjoFlPv/H82H7 HRByz88VUM4MavokbLqNOo5hzyCSu6ls44u+KNWTw2kAJC33zesqT6cxs6U3zNAI cXrkFjtk6RMrVMIa7pEJxCJuNpDzLdyzbzj5goaU5+SLRvAZbOqNh2gEB/izZgzX U9mzm1RpuVfNpMlNieZnyk4+C2TFY2vCd2r/ej0EcPY3r0veqlHZfQIVC0tCX90n R10MCcRWCiD8mhLbPopvzu/o824AE5CTFmx8AyQm9LtZ6uoEX+mJg1LQKJSbRMUj 0GsWOZdlCBav2FXbUF1WRq2ZwwauZdmF -----END CERTIFICATE-----Generated at Wed Jul 23 11:38:47 2025 by rpki-client