$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa File: f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa (raw, json) Hash identifier: tlu2PvsCK3kbInyCEQp2it80dEOyVa8D2l15rz91gSE= Subject key identifier: A0:12:3F:9A:87:BD:DB:56:D0:48:16:15:41:6F:02:77:73:3B:EC:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72D4D4DBA69E550EA1080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396595 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:4d:4d:ba:69:e5:50:ea:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c83c6bc6-0b4b-42ca-bec5-39eb625dcb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0e:c2:d0:fb:b0:bd:ab:7a:94:78:57:6c:a5: af:a5:24:a0:84:58:48:73:6b:06:71:43:0a:18:c8: 20:df:71:6e:e6:84:e1:57:2c:db:d5:66:62:3a:87: df:78:8e:94:e5:aa:4a:09:db:8c:27:a9:d1:0c:89: fc:11:2d:a2:dc:fd:c8:fa:66:2d:5a:62:9d:a0:ea: 48:34:01:ab:45:1f:a4:d3:c8:80:3d:17:ec:fb:2b: 26:cb:a8:2d:16:b7:63:a9:e7:98:89:7a:1b:66:3b: 3a:10:63:3a:0c:e6:35:a0:0b:e3:0e:bc:d4:1e:93: 86:3c:2d:cd:77:72:a4:91:9c:8f:72:a0:92:92:68: 85:ba:b4:e8:4b:83:55:7a:31:02:8b:29:8c:9f:7e: ad:8e:2e:8f:e2:8d:59:cb:de:3e:3e:bb:58:33:d9: 71:08:52:fe:53:74:ba:a6:ba:72:4c:85:10:e8:b3: e6:b4:0f:be:bc:62:2e:a2:43:b2:c6:02:9f:bc:a2: 74:59:66:2f:b2:7d:71:9d:14:89:08:68:d7:81:65: fe:e3:e5:ff:27:40:8e:37:06:31:06:89:bb:f9:15: d5:4d:ae:31:15:84:b8:2c:8b:5f:c5:26:f7:8f:f9: 6a:d5:5c:71:fb:8c:1b:45:aa:20:e7:7b:31:ef:56: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:3F:9A:87:BD:DB:56:D0:48:16:15:41:6F:02:77:73:3B:EC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aff41e-eb05-347d-9236-b36a8a17cf9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d8:57:a8:70:ac:69:a0:d3:0a:f6:ba:f4:7b:4c:a8:1a:51: a9:87:60:0c:2a:c0:41:72:5a:16:e5:37:9f:5e:5a:d5:26:96: a4:70:ce:b9:86:68:c4:b7:b2:65:04:cb:70:f9:81:96:24:fe: 8c:69:21:fd:4e:7f:83:e4:0c:74:6e:bb:84:4f:b0:1f:71:8e: 8e:86:c6:1d:19:cd:c1:ec:05:f9:a1:55:c8:27:e9:71:4d:48: 62:09:0a:30:72:81:35:b2:0b:e4:c0:74:d0:3c:93:9a:2d:23: bd:55:20:8a:ec:26:28:07:4d:60:6c:d3:a9:0b:f8:82:66:5d: b0:2d:61:c0:f2:c0:b1:e8:9a:fa:88:70:04:c6:b6:03:a6:33: 9c:8d:5d:23:a2:d6:9a:4b:43:c0:c6:b1:b8:c5:25:da:d7:5b: 45:12:49:6e:67:7d:8f:b0:12:95:a1:c1:28:10:01:cf:de:9a: 27:36:2b:d8:f6:0d:c2:0b:a6:8d:c8:fb:e2:e2:13:d2:fd:4c: b9:5f:77:04:e3:62:68:06:13:e8:20:4f:4b:e7:b7:41:17:d4: 38:86:7e:5c:37:d4:f1:9b:4a:59:22:bb:f4:84:69:56:b9:4d: 00:bb:89:2c:6d:31:d2:ad:2a:69:10:46:08:94:b9:86:1b:0b: 4c:7b:00:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y1NTbpp5VDqEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YzgzYzZiYzYtMGI0Yi00MmNhLWJlYzUtMzllYjYyNWRjYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ7C0Puwvat6lHhXbKWvpSSghFhIc2sGcUMK GMgg33Fu5oThVyzb1WZiOoffeI6U5apKCduMJ6nRDIn8ES2i3P3I+mYtWmKdoOpI NAGrRR+k08iAPRfs+ysmy6gtFrdjqeeYiXobZjs6EGM6DOY1oAvjDrzUHpOGPC3N d3KkkZyPcqCSkmiFurToS4NVejECiymMn36tji6P4o1Zy94+PrtYM9lxCFL+U3S6 prpyTIUQ6LPmtA++vGIuokOyxgKfvKJ0WWYvsn1xnRSJCGjXgWX+4+X/J0CONwYx Bom7+RXVTa4xFYS4LItfxSb3j/lq1Vxx+4wbRaog53sx71aeFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKASP5qHvdtW0EgWFUFvAndzO+z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhhZmY0MWUtZWIwNS0z NDdkLTkyMzYtYjM2YThhMTdjZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+2FeocKxpoNMK9rr0e0yoGlGph2AMKsBBcloW5TefXlrVJpakcM65 hmjEt7JlBMtw+YGWJP6MaSH9Tn+D5Ax0bruET7AfcY6OhsYdGc3B7AX5oVXIJ+lx TUhiCQowcoE1sgvkwHTQPJOaLSO9VSCK7CYoB01gbNOpC/iCZl2wLWHA8sCx6Jr6 iHAExrYDpjOcjV0jotaaS0PAxrG4xSXa11tFEkluZ32PsBKVocEoEAHP3ponNivY 9g3CC6aNyPvi4hPS/Uy5X3cE42JoBhPoIE9L57dBF9Q4hn5cN9Txm0pZIrv0hGlW uU0Au4ksbTHSrSppEEYIlLmGGwtMewB0 -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:38 2025 by rpki-client