$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa File: d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa (raw, json) Hash identifier: 2hCbs8847bXFKRBzvVUTn5fc0fVLNG4Fi2X3Cktb4Ic= Subject key identifier: 29:A3:A9:76:E8:BD:D3:24:62:BE:C2:80:5B:B9:A4:40:7A:CC:8C:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7370618C13EDA8DFDA880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396555 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:37:06:18:c1:3e:da:8d:fd:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0685b879-a164-4cb7-bcbc-e10d72242f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:59:0a:f4:7f:45:78:e0:97:a8:56:d6:37: 95:c3:2d:3e:bd:d5:f0:b2:93:93:24:64:2d:14:89: 0a:0e:14:46:f6:be:e8:8d:89:14:ee:d6:5d:37:7c: 86:19:64:c6:43:68:a5:48:ed:b1:2f:ca:f5:0d:90: 7e:f8:98:a3:bc:e6:f6:43:e9:11:c9:93:fe:6b:e7: 8d:84:2b:35:a2:9b:95:81:42:c6:72:59:da:66:35: c3:27:88:d4:59:dd:09:45:31:5c:04:10:e6:ac:bd: 17:b3:b4:28:0c:b4:5c:94:89:f1:43:8b:03:60:63: 31:0a:ea:7c:71:ac:d6:c2:b0:ab:bf:a9:9d:91:35: d2:cc:7c:ce:e3:b8:7d:78:0c:16:9a:5d:8c:2f:6d: 04:6a:96:44:22:f4:02:f8:36:78:c7:3d:16:87:09: b5:75:4d:90:26:53:b6:a6:c2:9a:8b:5d:0d:90:2f: 50:2b:a1:ed:f5:c4:70:2b:17:1f:21:be:5c:fd:bd: b4:9b:37:77:e6:0c:ff:42:99:26:c6:73:5c:2d:73: 44:22:40:ed:2e:8e:4a:bf:b9:06:64:2a:4c:ae:75: 7e:69:f2:59:0d:93:d6:23:57:13:ec:0f:76:87:c5: 1a:d7:9f:01:c9:a8:6b:1d:2c:44:f8:ab:48:6f:cd: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A3:A9:76:E8:BD:D3:24:62:BE:C2:80:5B:B9:A4:40:7A:CC:8C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0f711f9-ea2d-38eb-ba05-563c0f0a00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:94:64:41:79:c9:fe:bb:08:72:ef:2b:75:c4:fc:90:b9:f8: d7:43:cf:64:c0:c2:7c:e7:3b:8b:76:e5:e1:22:31:b8:bf:26: cf:8d:52:9e:1e:ea:f1:87:2b:77:73:85:e2:76:03:3e:b1:61: 18:2b:10:2a:dc:d0:a4:f3:0d:1a:ec:f3:cf:51:92:96:83:d0: 36:9b:c4:59:6d:07:45:52:15:dc:5f:b7:27:25:d8:ba:df:d9: ff:e1:9e:eb:d2:23:a1:d3:27:b8:bf:5c:0f:58:86:2f:c1:b5: 12:f9:0f:d5:13:70:6b:75:2e:f0:68:5f:2e:05:42:79:62:85: cc:0d:f5:a3:c6:a5:85:0c:53:bb:8c:8c:1f:43:2f:e8:6e:0c: f8:1c:b6:cd:82:f5:60:c1:23:47:ae:b4:a0:df:c0:96:9c:90: 3a:d4:6d:70:d6:d7:c1:02:13:8d:c6:a7:ed:1b:83:37:d6:3f: 16:86:1e:85:c4:42:60:2e:1d:bb:0b:54:8d:2d:b6:e2:59:e2: e9:17:35:79:51:97:c8:97:4f:5f:9b:b9:19:3a:03:17:ed:d2: 09:f4:2b:2d:c4:14:6f:fb:ab:23:da:91:0e:27:58:bf:79:ef: 2e:01:b6:38:dc:db:f0:78:12:c7:3d:9e:50:e3:c5:48:46:93: 69:2a:e2:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zcGGME+2o39qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDY4NWI4NzktYTE2NC00Y2I3LWJjYmMtZTEwZDcyMjQyZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gdZCvR/RXjgl6hW1jeVwy0+vdXwspOTJGQt FIkKDhRG9r7ojYkU7tZdN3yGGWTGQ2ilSO2xL8r1DZB++JijvOb2Q+kRyZP+a+eN hCs1opuVgULGclnaZjXDJ4jUWd0JRTFcBBDmrL0Xs7QoDLRclInxQ4sDYGMxCup8 cazWwrCrv6mdkTXSzHzO47h9eAwWml2ML20EapZEIvQC+DZ4xz0Whwm1dU2QJlO2 psKai10NkC9QK6Ht9cRwKxcfIb5c/b20mzd35gz/QpkmxnNcLXNEIkDtLo5Kv7kG ZCpMrnV+afJZDZPWI1cT7A92h8Ua158ByahrHSxE+KtIb80x9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCmjqXbovdMkYr7CgFu5pEB6zIz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDBmNzExZjktZWEyZC0z OGViLWJhMDUtNTYzYzBmMGEwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBlGRBecn+uwhy7yt1xPyQufjXQ89kwMJ85zuLduXhIjG4vybPjVKe Hurxhyt3c4XidgM+sWEYKxAq3NCk8w0a7PPPUZKWg9A2m8RZbQdFUhXcX7cnJdi6 39n/4Z7r0iOh0ye4v1wPWIYvwbUS+Q/VE3BrdS7waF8uBUJ5YoXMDfWjxqWFDFO7 jIwfQy/obgz4HLbNgvVgwSNHrrSg38CWnJA61G1w1tfBAhONxqftG4M31j8Whh6F xEJgLh27C1SNLbbiWeLpFzV5UZfIl09fm7kZOgMX7dIJ9CstxBRv+6sj2pEOJ1i/ ee8uAbY43NvweBLHPZ5Q48VIRpNpKuJd -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:26 2025 by rpki-client