$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5be7f10-402b-3f52-a7d5-7230d6c86cf5.roa File: b5be7f10-402b-3f52-a7d5-7230d6c86cf5.roa (raw, json) Hash identifier: Gp4COaV95FaxVy1IB3wCmCGz0YSloGRBwpE/E3kubA0= Subject key identifier: 37:47:DD:A7:E1:01:98:B9:90:AD:B1:1E:5C:56:89:DB:D8:B6:BA:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A628411F7A6D4D7CCF5A4A2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5be7f10-402b-3f52-a7d5-7230d6c86cf5.roa Signing time: Wed 02 Jul 2025 12:36:05 +0000 ROA not before: Wed 02 Jul 2025 12:36:05 +0000 ROA not after: Tue 30 Sep 2025 12:36:05 +0000 asID: 397205 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:11:f7:a6:d4:d7:cc:f5:a4:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:05 2025 GMT Not After : Sep 30 12:36:05 2025 GMT Subject: CN=2b9ed74e-1f9e-4016-8726-e5a84c1a5700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:0b:69:17:14:76:e5:3e:9a:91:c4:05:12: e5:b4:2b:fc:71:53:6f:13:e6:9d:b7:b5:11:1e:f3: 09:04:70:09:19:17:73:d5:93:18:4b:09:06:5e:75: 94:06:af:b6:e9:92:d1:95:b0:eb:c7:c2:1e:d4:93: c4:e9:d8:98:36:5e:f3:79:4e:af:7a:75:7d:9b:7f: 0e:46:d7:b9:f5:2f:19:fc:d9:bd:f1:43:06:81:f4: de:f9:80:3c:e7:df:4f:9c:de:9d:47:2d:66:a5:92: 0b:f2:b4:d4:45:a4:4e:cc:1f:7d:5a:09:c8:b3:25: 81:f8:1e:fe:01:d9:b1:c4:c9:07:d7:39:29:c6:2e: f5:87:52:56:33:a1:39:01:57:cd:ba:d5:56:9b:df: 8b:d9:a5:c9:f4:23:9d:60:21:37:5b:7b:d3:a0:6a: d0:c3:3a:ac:d5:03:e8:21:d6:f3:fc:dc:03:7a:b9: 5f:d2:60:2e:3e:76:69:9c:e0:fd:5b:bf:24:52:f2: 96:f7:78:90:11:1d:92:fa:2f:c8:88:0d:44:b8:17: df:17:0a:1e:58:5a:64:1b:54:bb:b9:5a:a2:b2:2e: 55:62:62:c2:85:7c:f0:dc:e3:35:d7:c3:9d:9c:f9: 04:8a:04:01:c8:fc:ce:a7:ac:02:eb:2c:28:a6:b8: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:47:DD:A7:E1:01:98:B9:90:AD:B1:1E:5C:56:89:DB:D8:B6:BA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5be7f10-402b-3f52-a7d5-7230d6c86cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2f:c6:f3:92:52:ae:1a:b6:b8:85:c3:a0:79:c2:75:9a:f1: a1:24:29:7a:bb:bd:8a:4c:dc:30:3d:1b:ab:86:e0:14:06:56: fb:d2:96:28:c2:de:32:89:32:4c:11:36:fe:bd:3e:f8:bf:a5: 3e:e2:36:e2:df:d8:04:bc:cf:6b:88:7a:84:6d:20:ff:46:ad: c8:29:b3:47:bb:e5:11:0d:15:9b:31:f7:3f:28:77:90:76:ef: b9:0d:a3:77:8a:26:b6:4e:65:89:03:bc:4d:ca:2e:4c:23:85: 85:61:b8:95:21:ab:34:c1:65:6d:f7:f7:c9:1a:67:3e:46:ba: 35:a0:8e:dc:62:f5:49:6c:b8:70:ca:02:c7:4f:e6:7f:eb:d5: df:01:a8:ba:19:27:d9:55:d6:d1:9e:62:d6:b2:8d:e4:2d:a7: b2:9b:c0:21:d0:be:5a:c9:08:aa:5d:05:46:59:f4:5d:13:71: 38:f1:1c:1c:08:48:80:88:ba:71:d8:5a:88:2b:3a:2c:cc:1b: 42:6e:d6:c5:ce:1e:78:97:b0:92:0c:63:a6:30:15:7d:63:fc: 71:fc:d8:d9:41:6a:9d:87:67:0e:18:43:a9:66:9d:28:12:ff: cc:ba:71:df:30:c7:d5:71:59:49:42:ba:56:ea:d4:20:5b:8f: 15:ac:11:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihBH3ptTXzPWkosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwNVoXDTI1MDkzMDEyMzYwNVowLzEtMCsGA1UEAxMk MmI5ZWQ3NGUtMWY5ZS00MDE2LTg3MjYtZTVhODRjMWE1NzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYLaRcUduU+mpHEBRLltCv8cVNvE+adt7UR HvMJBHAJGRdz1ZMYSwkGXnWUBq+26ZLRlbDrx8Ie1JPE6diYNl7zeU6venV9m38O Rte59S8Z/Nm98UMGgfTe+YA8599PnN6dRy1mpZIL8rTURaROzB99WgnIsyWB+B7+ AdmxxMkH1zkpxi71h1JWM6E5AVfNutVWm9+L2aXJ9COdYCE3W3vToGrQwzqs1QPo Idbz/NwDerlf0mAuPnZpnOD9W78kUvKW93iQER2S+i/IiA1EuBffFwoeWFpkG1S7 uVqisi5VYmLChXzw3OM118OdnPkEigQByPzOp6wC6ywoprjk7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDdH3afhAZi5kK2xHlxWidvYtrqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjViZTdmMTAtNDAyYi0z ZjUyLWE3ZDUtNzIzMGQ2Yzg2Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRL8bzklKuGra4hcOgecJ1mvGhJCl6u72KTNwwPRurhuAUBlb70pYo wt4yiTJMETb+vT74v6U+4jbi39gEvM9riHqEbSD/Rq3IKbNHu+URDRWbMfc/KHeQ du+5DaN3iia2TmWJA7xNyi5MI4WFYbiVIas0wWVt9/fJGmc+Rro1oI7cYvVJbLhw ygLHT+Z/69XfAai6GSfZVdbRnmLWso3kLaeym8Ah0L5ayQiqXQVGWfRdE3E48Rwc CEiAiLpx2FqIKzoszBtCbtbFzh54l7CSDGOmMBV9Y/xx/NjZQWqdh2cOGEOpZp0o Ev/MunHfMMfVcVlJQrpW6tQgW48VrBGU -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:56 2025 by rpki-client