$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa File: 39ee7223-574a-3025-8c2b-2816b5636e65.roa (raw, json) Hash identifier: uwCUbCtosS3/MjLUMVGji18O8LRfsmaOwN4s5uZlsMY= Subject key identifier: 4B:CA:BF:7F:28:D2:0B:AA:9C:1B:37:C4:E0:31:57:1D:7E:97:35:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7308A2D74ACE826C5BC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397209 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:8a:2d:74:ac:e8:26:c5:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=b46a89ed-dde9-42a1-9178-2d005005d5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:50:d9:58:69:76:cc:35:1b:47:25:50:13: ba:fa:2b:66:3a:be:94:08:63:8e:3d:4b:fb:7a:9d: 86:a6:d5:4f:5e:ac:1d:23:79:83:eb:02:4e:f8:5b: 6c:fe:e6:93:9c:11:3b:0b:5a:2e:1a:a9:5f:a9:02: 23:f9:30:38:75:dc:17:f7:0a:6f:bd:da:8e:55:ed: f7:76:d3:df:f3:39:38:17:f3:40:0c:29:83:af:d4: ca:67:d1:07:2e:9c:92:23:df:ff:30:a3:f8:2e:29: c6:5b:72:f6:64:d5:c7:81:8f:e3:f0:e2:16:d7:c3: aa:de:1b:e4:3e:18:22:56:1c:cd:34:84:13:58:eb: 9a:8a:00:b4:61:e4:b6:e2:b2:3f:fa:d8:4c:11:a5: 9d:fb:95:ac:8a:d7:ab:f4:7f:8d:2b:24:42:2e:d1: eb:52:6f:10:c1:f9:b4:67:8e:3a:b0:1b:ad:6d:e6: d8:ba:2e:eb:6f:a8:d6:70:ae:be:52:75:29:22:1a: a6:02:b1:d5:03:4b:f2:99:00:0a:50:a3:fd:27:a3: 17:1d:00:00:6c:35:2c:15:8f:a7:77:76:0e:16:99: ed:55:30:b3:ef:e5:0e:3d:79:43:3f:09:d0:52:f3: 37:24:d6:6a:4d:d0:52:85:74:6f:f7:cf:59:cc:ed: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:BF:7F:28:D2:0B:AA:9C:1B:37:C4:E0:31:57:1D:7E:97:35:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0f:3a:35:51:7f:f9:28:d5:7d:9a:db:fb:81:1b:fc:c5:ca: e7:02:0b:e5:d4:61:92:02:09:c6:7b:87:e7:b3:ff:f5:c6:05: 4b:fd:c9:e2:e8:71:e1:26:6b:84:bb:7e:16:8e:3d:f0:85:29: a7:4d:9a:e2:0d:25:a6:da:43:02:65:2b:7c:72:cf:7d:1c:1f: 22:d5:69:4c:67:ac:ac:ab:f9:67:5f:ca:b7:4d:66:b3:e9:6c: 1c:d4:02:63:4a:74:ee:41:a9:8b:df:d3:58:6a:48:3b:dc:9f: f8:8a:52:bd:dc:16:e9:c2:7f:81:af:bd:01:7d:82:1f:36:44: 66:6c:9c:d1:e2:cf:ea:69:f7:4f:ae:a4:a3:60:70:cd:da:37: 88:d1:84:db:82:43:8e:ab:38:93:47:75:73:9f:d9:b1:d5:16: 9b:68:e3:32:70:b8:fe:f4:e7:28:66:dd:69:b4:d6:b3:5e:b0: 43:94:aa:1f:26:f3:99:19:97:18:f6:e9:d6:9a:06:79:04:13: ae:96:03:6c:55:06:e9:22:fc:7d:b3:d8:ee:67:49:3e:f3:d4: 0e:41:54:c4:37:25:07:c6:82:97:c8:f6:4e:48:34:ed:0d:eb: 2b:73:c8:dc:06:67:f5:ad:eb:f8:5a:37:73:b1:37:dc:9d:1a: 76:8b:c0:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zCKLXSs6CbFvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YjQ2YTg5ZWQtZGRlOS00MmExLTkxNzgtMmQwMDUwMDVkNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodNQ2Vhpdsw1G0clUBO6+itmOr6UCGOOPUv7 ep2GptVPXqwdI3mD6wJO+Fts/uaTnBE7C1ouGqlfqQIj+TA4ddwX9wpvvdqOVe33 dtPf8zk4F/NADCmDr9TKZ9EHLpySI9//MKP4LinGW3L2ZNXHgY/j8OIW18Oq3hvk PhgiVhzNNIQTWOuaigC0YeS24rI/+thMEaWd+5Wsiter9H+NKyRCLtHrUm8Qwfm0 Z446sButbebYui7rb6jWcK6+UnUpIhqmArHVA0vymQAKUKP9J6MXHQAAbDUsFY+n d3YOFpntVTCz7+UOPXlDPwnQUvM3JNZqTdBShXRv989ZzO21VQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEvKv38o0guqnBs3xOAxVx1+lzV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzllZTcyMjMtNTc0YS0z MDI1LThjMmItMjgxNmI1NjM2ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaDzo1UX/5KNV9mtv7gRv8xcrnAgvl1GGSAgnGe4fns//1xgVL/cni 6HHhJmuEu34Wjj3whSmnTZriDSWm2kMCZSt8cs99HB8i1WlMZ6ysq/lnX8q3TWaz 6Wwc1AJjSnTuQamL39NYakg73J/4ilK93Bbpwn+Br70BfYIfNkRmbJzR4s/qafdP rqSjYHDN2jeI0YTbgkOOqziTR3Vzn9mx1RabaOMycLj+9OcoZt1ptNazXrBDlKof JvOZGZcY9unWmgZ5BBOulgNsVQbpIvx9s9juZ0k+89QOQVTENyUHxoKXyPZOSDTt Desrc8jcBmf1rev4WjdzsTfcnRp2i8AE -----END CERTIFICATE-----Generated at Wed Oct 29 20:29:21 2025 by rpki-client