$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa File: fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa (raw, json) Hash identifier: TUzFCPHCr67zMBYJF29hyGE+8j9Fd83uuAZwh8O58fQ= Subject key identifier: DB:D3:66:F0:13:44:AB:36:82:49:2B:44:FF:73:76:25:90:6D:60:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62841126F342149E000993C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 40647 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:26:f3:42:14:9e:00:09:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=c0f8dd9c-da31-4896-b2d9-e071be0bc8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:05:ce:50:4e:a7:a6:b0:48:8c:42:c2:a0: 14:9e:43:43:d9:99:c0:d6:cf:71:99:36:66:dc:21: 3c:df:a9:f9:a3:8e:7a:d8:cd:56:40:96:a5:21:13: 9b:e6:03:e0:b2:47:2d:92:d9:8f:b4:69:9a:2f:82: 72:30:e5:5e:21:95:c7:ff:4b:35:b7:09:d5:ee:a5: 5a:82:ec:21:65:7f:02:fa:0e:56:71:fd:d9:8f:14: 51:92:7d:8e:79:d4:39:c9:cf:47:d9:9c:1c:36:f0: a4:7f:11:bd:48:30:6b:13:53:0d:06:82:6e:2d:91: a2:6c:74:67:94:fd:8a:f6:d7:9a:d0:58:50:6e:8d: 15:83:b5:b9:ef:da:ff:48:80:a7:6e:15:f2:3c:75: 88:ab:f0:ca:09:15:41:f0:a5:cf:69:30:f6:20:1f: d4:71:51:19:03:6b:9d:f5:59:da:58:8a:36:5c:56: 41:4d:08:22:f2:39:3a:dd:88:65:88:b6:20:8a:a7: 5f:45:54:cb:ab:f2:5e:15:2c:e8:0b:71:c5:9c:ae: 83:6b:09:9d:5f:24:78:59:2c:26:38:de:fe:7c:89: 85:7a:6f:53:ae:0f:21:7f:c9:68:6c:36:52:57:79: 80:39:72:47:9d:fb:0a:f1:8c:b1:5e:bb:74:1f:a8: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:66:F0:13:44:AB:36:82:49:2B:44:FF:73:76:25:90:6D:60:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d4:43:97:60:5e:14:e7:b9:b5:4d:96:ec:28:e7:bb:f3:51: a9:c5:47:f4:0b:c1:7f:b4:e6:31:ee:7a:55:0f:ea:93:24:a2: 0d:a6:cc:b4:b4:7b:e7:43:88:09:ca:bf:7b:e1:8f:58:14:10: 4c:4f:a6:10:62:02:7b:fc:fd:7d:cc:55:1d:18:0d:82:2a:d5: f3:82:04:64:7a:86:14:da:f0:14:70:7b:0c:c2:37:72:21:58: 75:67:ef:ec:3d:e6:14:4a:75:f5:a5:8e:c8:fb:58:47:72:dd: 8f:f0:fa:71:3e:93:5e:b0:70:d1:73:4a:b6:c6:a8:a6:83:95: e4:ac:42:72:1d:c0:1e:79:b6:5d:2f:ba:dc:51:14:2c:d8:67: 8d:fb:d0:b7:0a:0c:d8:ff:80:e4:f3:48:9f:df:af:92:1f:31: f3:01:f1:5c:19:12:c3:b1:58:cc:f3:74:51:3f:a0:f4:24:1d: e1:19:a6:84:cb:38:ef:40:35:20:79:e5:e1:7d:62:cf:a9:e8: 03:53:ba:48:07:d6:b3:6e:c7:b6:80:4b:90:62:cb:b5:4d:c3: 6d:e7:3d:bb:f3:6f:26:f0:b5:e9:90:bf:63:eb:04:27:74:1c: b4:7e:07:c2:13:65:bf:17:4d:cd:48:ba:b1:5d:24:e8:07:72: 9f:4d:8d:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBEm80IUngAJk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk YzBmOGRkOWMtZGEzMS00ODk2LWIyZDktZTA3MWJlMGJjOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbkFzlBOp6awSIxCwqAUnkND2ZnA1s9xmTZm 3CE836n5o4562M1WQJalIROb5gPgskctktmPtGmaL4JyMOVeIZXH/0s1twnV7qVa guwhZX8C+g5Wcf3ZjxRRkn2OedQ5yc9H2ZwcNvCkfxG9SDBrE1MNBoJuLZGibHRn lP2K9tea0FhQbo0Vg7W579r/SICnbhXyPHWIq/DKCRVB8KXPaTD2IB/UcVEZA2ud 9VnaWIo2XFZBTQgi8jk63YhliLYgiqdfRVTLq/JeFSzoC3HFnK6DawmdXyR4WSwm ON7+fImFem9Trg8hf8lobDZSV3mAOXJHnfsK8YyxXrt0H6jyWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNvTZvATRKs2gkkrRP9zdiWQbWDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI1MGM5NmQtNzQyZi0z MGNiLWIwOGItYTdkNDBmYWI2OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBk1EOXYF4U57m1TZbsKOe781GpxUf0C8F/tOYx7npVD+qTJKINpsy0 tHvnQ4gJyr974Y9YFBBMT6YQYgJ7/P19zFUdGA2CKtXzggRkeoYU2vAUcHsMwjdy IVh1Z+/sPeYUSnX1pY7I+1hHct2P8PpxPpNesHDRc0q2xqimg5XkrEJyHcAeebZd L7rcURQs2GeN+9C3CgzY/4Dk80if36+SHzHzAfFcGRLDsVjM83RRP6D0JB3hGaaE yzjvQDUgeeXhfWLPqegDU7pIB9azbse2gEuQYsu1TcNt5z27828m8LXpkL9j6wQn dBy0fgfCE2W/F03NSLqxXSToB3KfTY3q -----END CERTIFICATE-----Generated at Wed Jul 23 11:36:34 2025 by rpki-client