$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa File: b14a861d-627f-3443-a30d-58f5ca0da609.roa (raw, json) Hash identifier: LkufMbtD4YkAsB3s9y5z3x6gfdwX0bfI71FDbqXc9Dk= Subject key identifier: F4:FB:E4:D1:21:55:A7:55:8E:8B:77:01:B4:A7:80:3E:61:D0:46:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73102806591A4B14A5F78 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397197 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:31:02:80:65:91:a4:b1:4a:5f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=67208dd5-515d-4604-93a4-8902f0aa1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:b0:2b:f0:06:6a:21:24:81:d7:84:3e:1a: 64:d5:d1:9a:13:5c:cb:47:28:e0:46:a1:26:0c:2d: 83:1c:26:15:ee:68:f4:db:8f:e5:6f:b7:42:9c:bd: 06:b7:e3:1c:07:ea:ae:85:bf:40:e1:a0:0c:27:1c: 60:be:45:2c:c1:41:4f:77:0b:13:ca:f6:19:90:d6: 1e:f1:bd:13:b1:bd:95:d3:14:6a:55:ad:98:28:55: f7:c7:bd:82:06:e5:d7:68:47:9c:87:70:9e:d9:ac: db:aa:be:11:14:06:3a:d6:4f:2e:f7:ec:03:41:03: 0a:52:f1:08:c2:9f:36:e3:ad:17:66:b5:83:62:2a: ee:ba:22:ff:b4:65:8e:da:08:27:45:4d:f4:78:19: d3:89:7a:1c:50:c0:cd:b2:9b:d9:dd:01:08:1b:fd: 1c:df:f4:fa:60:d9:f2:44:cb:da:e6:2c:3a:26:47: 93:3a:4b:4d:3a:f9:9f:02:50:1e:7c:8b:81:6c:bd: e6:3b:be:76:95:24:27:63:a6:fc:0a:93:0b:42:64: dd:a4:b0:77:f7:ef:62:c5:fb:13:2b:53:c4:b5:83: 28:a3:99:9c:19:50:d3:de:64:9c:da:46:ce:29:a3: 81:c4:5e:b1:cb:70:fa:78:d3:de:e0:d7:f9:ef:05: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FB:E4:D1:21:55:A7:55:8E:8B:77:01:B4:A7:80:3E:61:D0:46:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b14a861d-627f-3443-a30d-58f5ca0da609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:65:3f:bc:b5:4b:32:62:31:07:10:e9:f4:49:cf:70:be:9b: 17:a7:61:5c:d5:14:c5:56:81:86:16:c6:9c:b9:1d:4e:62:12: 97:de:ab:e4:b8:0f:e1:84:36:92:4f:55:eb:3d:16:28:ef:95: a3:3c:42:c2:c3:09:e4:f7:65:e4:44:af:d5:d6:54:d6:e8:77: a9:2e:77:28:00:75:2d:4d:df:6d:88:cc:50:d4:c4:a6:0e:13: 1e:e9:17:ad:da:60:79:83:71:5f:41:d3:46:eb:56:b5:a4:7d: d7:d5:0a:88:65:b2:e1:55:43:06:6e:ca:af:86:3c:52:db:84: 46:d6:a7:18:29:6d:6a:08:38:d5:47:d1:e9:fc:5a:11:62:e4: 55:c9:a5:10:1b:3e:3e:bd:09:b0:d3:7b:ac:0a:45:75:5a:6a: 31:da:b5:7a:a3:d3:a2:70:4b:6d:39:57:24:61:49:76:e5:ef: b3:bb:ee:c8:37:84:7f:65:fc:9d:57:17:a9:ae:9e:db:3d:4e: 6d:12:65:b2:d1:20:cc:87:10:99:6c:70:02:3e:85:9a:4a:03: 23:bb:e7:a4:a5:16:3a:fb:cb:67:e7:f1:1c:26:41:13:7f:55: 86:f8:2f:09:30:9c:90:09:35:28:c1:39:5d:2b:60:67:f1:81: 65:a2:74:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zECgGWRpLFKX3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjcyMDhkZDUtNTE1ZC00NjA0LTkzYTQtODkwMmYwYWExMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZawK/AGaiEkgdeEPhpk1dGaE1zLRyjgRqEm DC2DHCYV7mj024/lb7dCnL0Gt+McB+quhb9A4aAMJxxgvkUswUFPdwsTyvYZkNYe 8b0Tsb2V0xRqVa2YKFX3x72CBuXXaEech3Ce2azbqr4RFAY61k8u9+wDQQMKUvEI wp82460XZrWDYiruuiL/tGWO2ggnRU30eBnTiXocUMDNspvZ3QEIG/0c3/T6YNny RMva5iw6JkeTOktNOvmfAlAefIuBbL3mO752lSQnY6b8CpMLQmTdpLB39+9ixfsT K1PEtYMoo5mcGVDT3mSc2kbOKaOBxF6xy3D6eNPe4Nf57wW/awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPT75NEhVadVjot3AbSngD5h0EYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE0YTg2MWQtNjI3Zi0z NDQzLWEzMGQtNThmNWNhMGRhNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAZT+8tUsyYjEHEOn0Sc9wvpsXp2Fc1RTFVoGGFsacuR1OYhKX3qvk uA/hhDaST1XrPRYo75WjPELCwwnk92XkRK/V1lTW6HepLncoAHUtTd9tiMxQ1MSm DhMe6Ret2mB5g3FfQdNG61a1pH3X1QqIZbLhVUMGbsqvhjxS24RG1qcYKW1qCDjV R9Hp/FoRYuRVyaUQGz4+vQmw03usCkV1Wmox2rV6o9OicEttOVckYUl25e+zu+7I N4R/ZfydVxeprp7bPU5tEmWy0SDMhxCZbHACPoWaSgMju+ekpRY6+8tn5/EcJkET f1WG+C8JMJyQCTUowTldK2Bn8YFlonQQ -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:32 2025 by rpki-client