$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf61cbe-4c94-3890-b59b-cb8cfc26ca9e.roa File: faf61cbe-4c94-3890-b59b-cb8cfc26ca9e.roa (raw, json) Hash identifier: L1KWJ3l4lIZuURvP5R/Jky8ZdQvoBNprfYfkycKQ3as= Subject key identifier: B9:C5:0C:96:75:3C:64:BE:0D:41:18:CB:99:BD:65:82:03:A7:4F:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628410071EE58A2180AB2300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf61cbe-4c94-3890-b59b-cb8cfc26ca9e.roa Signing time: Wed 02 Jul 2025 12:36:04 +0000 ROA not before: Wed 02 Jul 2025 12:36:04 +0000 ROA not after: Tue 30 Sep 2025 12:36:04 +0000 asID: 396594 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:10:07:1e:e5:8a:21:80:ab:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:04 2025 GMT Not After : Sep 30 12:36:04 2025 GMT Subject: CN=4d8f39df-ce46-4d25-b6b1-0d37d265e29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:85:3b:3d:6a:89:1a:0c:9d:c0:64:9f:6e: d4:0e:fa:30:21:53:cb:a5:f4:85:1d:57:6b:79:c3: 29:e4:9b:2c:ac:c9:05:18:4b:99:46:ff:68:32:ee: ce:fd:88:3b:66:2e:a9:4d:af:84:3c:2a:7a:ee:c4: d3:42:36:58:ea:de:e7:89:d2:73:5c:82:1f:d0:3b: bd:c1:55:67:46:d8:df:01:d3:c3:00:fe:12:df:c1: 0b:2d:56:27:be:e5:07:90:0a:15:9c:d0:10:f0:e0: 89:e1:82:c5:27:08:94:38:94:43:d8:96:9a:db:b0: 02:4e:55:f0:63:1e:9e:78:79:43:2f:46:b2:e1:8b: 4a:b1:f8:d8:f6:12:64:a9:4a:6f:ce:db:5b:e8:8f: fd:63:fa:4b:df:59:29:71:bb:1b:7b:01:98:18:e3: ad:c8:51:5a:df:8b:5b:a6:8f:3f:f3:0a:47:13:53: f3:93:96:98:83:29:2b:53:c1:d2:8f:89:b8:30:c6: 13:e8:f6:4e:dc:9b:23:8b:b8:91:d3:49:85:21:b6: 1f:a9:61:5a:be:cc:a3:a1:03:ac:7f:40:10:ba:14: 00:a1:1f:5d:e2:09:14:5d:a2:b1:55:73:6d:22:dd: 9e:b8:80:c7:53:47:35:43:93:8a:4d:3d:0e:47:3d: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:0C:96:75:3C:64:BE:0D:41:18:CB:99:BD:65:82:03:A7:4F:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/faf61cbe-4c94-3890-b59b-cb8cfc26ca9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d1:bd:38:a5:26:67:90:81:a9:cd:4e:63:5f:a7:f1:4c:5e: ec:96:9b:21:75:9a:b5:fb:3c:77:3c:6c:ad:9f:9e:b6:a6:99: 53:33:c6:73:7c:99:41:34:13:18:2b:9c:52:15:c5:e0:3b:45: fb:4f:67:fd:09:25:36:59:a8:e6:90:3e:86:08:59:21:b3:16: cd:d1:94:4d:1b:2d:98:1f:95:ed:bf:4a:8a:c1:db:4c:df:f4: 51:1f:7d:5d:45:69:08:6e:67:ac:4d:cb:c3:18:34:6d:c3:26: 9c:e1:01:10:ef:4a:69:b2:a0:33:02:ad:09:e8:90:c6:ae:a9: 8f:f5:3d:ad:61:6f:cf:05:2a:9a:34:a0:4e:fe:3c:be:65:40: a6:8d:64:ff:aa:65:8a:a6:d4:82:f2:7c:65:8f:9f:6b:8f:9e: 5a:3e:1b:6c:5b:71:99:48:a0:bb:f5:fe:07:cb:ee:40:e3:9a: e4:3c:12:1b:42:7f:13:de:a4:b0:25:b5:12:5e:fc:db:70:2b: e2:42:78:f0:15:f9:0d:b2:d2:25:01:3f:b3:20:0a:fb:13:1f: 40:58:cc:48:2f:c8:f8:49:47:3e:54:56:e7:c2:35:38:78:2d: 27:60:54:fb:5b:27:e9:a0:d9:1d:0a:47:77:c1:92:f9:fa:21: ba:c6:8d:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBAHHuWKIYCrIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNFoXDTI1MDkzMDEyMzYwNFowLzEtMCsGA1UEAxMk NGQ4ZjM5ZGYtY2U0Ni00ZDI1LWI2YjEtMGQzN2QyNjVlMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72GFOz1qiRoMncBkn27UDvowIVPLpfSFHVdr ecMp5JssrMkFGEuZRv9oMu7O/Yg7Zi6pTa+EPCp67sTTQjZY6t7nidJzXIIf0Du9 wVVnRtjfAdPDAP4S38ELLVYnvuUHkAoVnNAQ8OCJ4YLFJwiUOJRD2Jaa27ACTlXw Yx6eeHlDL0ay4YtKsfjY9hJkqUpvzttb6I/9Y/pL31kpcbsbewGYGOOtyFFa34tb po8/8wpHE1Pzk5aYgykrU8HSj4m4MMYT6PZO3Jsji7iR00mFIbYfqWFavsyjoQOs f0AQuhQAoR9d4gkUXaKxVXNtIt2euIDHU0c1Q5OKTT0ORz2x7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLnFDJZ1PGS+DUEYy5m9ZYIDp0/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmFmNjFjYmUtNGM5NC0z ODkwLWI1OWItY2I4Y2ZjMjZjYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq0b04pSZnkIGpzU5jX6fxTF7slpshdZq1+zx3PGytn562pplTM8Zz fJlBNBMYK5xSFcXgO0X7T2f9CSU2WajmkD6GCFkhsxbN0ZRNGy2YH5Xtv0qKwdtM 3/RRH31dRWkIbmesTcvDGDRtwyac4QEQ70ppsqAzAq0J6JDGrqmP9T2tYW/PBSqa NKBO/jy+ZUCmjWT/qmWKptSC8nxlj59rj55aPhtsW3GZSKC79f4Hy+5A45rkPBIb Qn8T3qSwJbUSXvzbcCviQnjwFfkNstIlAT+zIAr7Ex9AWMxIL8j4SUc+VFbnwjU4 eC0nYFT7WyfpoNkdCkd3wZL5+iG6xo2r -----END CERTIFICATE-----Generated at Wed Jul 23 11:49:20 2025 by rpki-client