$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa File: 1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa (raw, json) Hash identifier: GPpsnqR8iMr4rRfLyq4rvfLIJ1ERw3Z4QDcQ8EtDfh0= Subject key identifier: 16:2E:FB:4A:AA:38:AE:27:33:25:BC:5B:4D:FA:CF:87:2E:25:3A:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7398170CCD221BE029D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397206 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:39:81:70:cc:d2:21:be:02:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0b99c02b-4030-4a37-b043-79f50b19e73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:3e:e0:16:34:72:e9:8c:c1:3d:50:5c:e1: 40:e2:46:d1:b8:07:d9:98:41:27:0c:d6:c3:71:77: 07:61:4c:39:55:5a:89:e0:b0:d4:e0:53:d8:57:e4: 1a:ac:74:fc:1e:6a:64:d8:e4:cf:89:85:f6:9f:7a: a7:b7:7b:18:10:d6:08:88:14:a2:c7:8c:0a:73:61: 43:76:66:66:b8:30:9c:4e:21:bd:0d:47:ea:ac:35: a3:50:d1:55:33:34:29:28:4c:d0:9f:d1:e4:2c:dd: 31:65:12:bb:d5:ea:2e:06:26:bb:d8:fd:90:32:4a: e5:be:2c:27:89:e4:f4:7a:06:0e:6f:6b:dc:9f:e3: 66:55:7b:b3:1e:5b:46:a1:e4:91:93:35:f3:e1:ed: bb:68:d7:7e:e9:31:09:e8:a8:b7:b1:93:f8:3f:73: da:08:1d:29:76:f1:89:83:f5:4d:e3:07:2e:d6:d7: 97:0c:9a:db:13:6a:0b:20:80:12:10:53:85:56:99: 62:3c:9d:10:23:f2:c3:ca:98:6d:43:27:b2:6f:fd: f2:60:bc:3a:f6:7e:73:b7:db:18:4f:f2:16:0d:a4: ed:58:fa:ce:ac:8f:fd:2d:7a:30:77:98:16:ad:00: 17:07:1f:b9:fe:22:42:a7:c8:ca:9a:25:6d:ac:8a: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:FB:4A:AA:38:AE:27:33:25:BC:5B:4D:FA:CF:87:2E:25:3A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b9e641f-0faa-3950-8650-0ef826d2cc0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:32:06:18:52:47:a1:b4:4f:c0:f3:02:1f:d5:b7:5f:b7:4b: e7:7d:e6:c6:12:e9:e8:20:0d:b2:6c:11:60:00:80:14:dd:e3: fb:69:85:b2:7d:5b:72:39:15:5d:bd:10:e3:62:59:a3:98:62: 88:9b:8b:ae:f0:2a:fa:0f:45:ff:93:d3:ea:38:ff:62:f1:ca: 96:e3:fb:eb:ba:a7:5c:bf:6d:ec:41:35:9e:17:6d:06:10:af: 6d:d3:b3:75:de:ef:12:b9:fc:00:54:44:e0:82:9a:b0:4b:3f: e4:56:35:20:79:1e:50:55:25:1e:2a:ac:7f:cd:6b:ef:32:96: ed:47:7a:83:b8:e0:f2:60:7f:33:83:55:44:fc:f5:b0:51:80: c0:c9:94:b3:cd:d8:05:21:1d:00:40:52:c9:89:33:9f:45:4d: 97:56:36:72:c4:af:49:15:e6:1f:08:35:79:69:94:49:e8:7f: 85:48:d8:20:a5:ca:ff:89:a7:bc:e5:4f:95:e3:12:85:a1:e2: ec:bf:56:64:6a:1e:72:a2:77:ee:f7:c3:5f:03:59:f7:95:73: 11:b4:5e:ad:81:01:96:6e:22:de:43:a9:54:c8:ed:96:9f:f1: ba:98:82:35:24:84:d1:72:8c:ee:34:55:2f:d5:69:d5:c0:28: d9:3f:51:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zmBcMzSIb4CnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGI5OWMwMmItNDAzMC00YTM3LWIwNDMtNzlmNTBiMTllNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ms+4BY0cumMwT1QXOFA4kbRuAfZmEEnDNbD cXcHYUw5VVqJ4LDU4FPYV+QarHT8Hmpk2OTPiYX2n3qnt3sYENYIiBSix4wKc2FD dmZmuDCcTiG9DUfqrDWjUNFVMzQpKEzQn9HkLN0xZRK71eouBia72P2QMkrlviwn ieT0egYOb2vcn+NmVXuzHltGoeSRkzXz4e27aNd+6TEJ6Ki3sZP4P3PaCB0pdvGJ g/VN4wcu1teXDJrbE2oLIIASEFOFVpliPJ0QI/LDyphtQyeyb/3yYLw69n5zt9sY T/IWDaTtWPrOrI/9LXowd5gWrQAXBx+5/iJCp8jKmiVtrIr6uwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBYu+0qqOK4nMyW8W036z4cuJTqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI5ZTY0MWYtMGZhYS0z OTUwLTg2NTAtMGVmODI2ZDJjYzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuMgYYUkehtE/A8wIf1bdft0vnfebGEunoIA2ybBFgAIAU3eP7aYWy fVtyORVdvRDjYlmjmGKIm4uu8Cr6D0X/k9PqOP9i8cqW4/vruqdcv23sQTWeF20G EK9t07N13u8SufwAVETggpqwSz/kVjUgeR5QVSUeKqx/zWvvMpbtR3qDuODyYH8z g1VE/PWwUYDAyZSzzdgFIR0AQFLJiTOfRU2XVjZyxK9JFeYfCDV5aZRJ6H+FSNgg pcr/iae85U+V4xKFoeLsv1Zkah5yonfu98NfA1n3lXMRtF6tgQGWbiLeQ6lUyO2W n/G6mII1JITRcozuNFUv1WnVwCjZP1Ee -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:56 2025 by rpki-client