$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa File: 0407bc30-a500-36bb-8d65-948441a8aafa.roa (raw, json) Hash identifier: 1B6/Pqm0/udZe22Is5cjKDZT95/QzZrFFxX4KmO9gjY= Subject key identifier: C4:A0:3D:63:B6:1B:B8:57:A8:42:F7:41:12:DE:13:0B:5E:94:64:1D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E738619805CB43B4860E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36625 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:38:61:98:05:cb:43:b4:86:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7b20b641-e06d-43ff-a51c-d41b5b421f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:a6:65:01:59:09:a6:2a:06:12:e1:7c:b6: cd:4e:92:4a:4c:44:b7:e6:b7:73:e1:7b:2b:59:c5: d8:10:33:95:90:69:26:da:80:ea:57:8c:d4:b4:5e: 69:cf:44:68:de:bf:3a:dc:fb:27:6d:24:c1:1b:cb: a1:de:f8:fe:09:c4:b8:94:d4:61:bb:d8:ba:06:51: e8:87:be:35:e7:87:fe:37:d5:96:88:94:99:5e:50: e9:22:49:da:a9:49:aa:e2:79:4c:53:ca:ff:de:06: 4c:b3:ec:4b:ce:1f:93:fc:5d:52:8e:ae:1d:e4:b2: ff:f4:ce:d9:fb:0a:ee:22:b1:81:58:5d:28:ec:dd: 9f:87:a7:37:5f:a3:bb:8c:10:64:80:0b:80:51:44: d5:f5:8f:e7:64:41:7b:0d:36:35:40:09:58:dc:b1: 29:32:c0:58:f2:e4:93:56:c9:30:51:d3:15:9e:7b: ee:2a:f3:24:69:98:15:b7:61:1f:a4:8d:21:23:8b: 57:ed:0b:1f:81:be:2f:b4:70:cf:e2:f6:f9:74:6f: a8:cf:45:95:bb:21:4f:94:32:e0:89:84:6c:b5:c5: 9a:e5:4f:bd:c2:b2:1d:9e:40:72:91:fd:06:58:17: e2:fa:c6:52:31:80:a1:cb:d0:5e:d9:9a:2e:cd:a3: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A0:3D:63:B6:1B:B8:57:A8:42:F7:41:12:DE:13:0B:5E:94:64:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0407bc30-a500-36bb-8d65-948441a8aafa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:5d:a9:92:fa:36:d4:76:c3:db:db:7f:fc:1f:7b:b9:cf:cf: f6:68:9d:6c:a9:db:bb:03:58:86:21:55:89:9c:cf:dc:b7:c9: 63:fb:2d:af:72:20:2b:21:ba:73:d7:30:4d:f0:08:e0:2a:e6: 53:3c:04:8c:d5:29:00:4c:b6:df:97:96:b6:de:9d:0f:f6:b4: 3a:3a:42:e4:fc:21:84:a2:c0:62:d8:cd:04:a1:96:ed:ab:e2: e2:e9:df:64:a6:a3:de:16:8a:f0:d4:6f:a6:c3:39:b3:8e:9a: 33:5c:1e:63:15:fb:b5:dd:85:7a:ec:fa:36:e3:ca:d5:d4:62: 81:ae:c8:7b:78:d9:83:09:73:64:60:30:68:f3:87:79:0f:45: 8e:e6:de:95:c2:86:9f:be:c9:4c:23:dc:02:ea:d7:19:c2:66: c4:63:4b:d5:9e:90:c6:1c:e6:76:54:00:20:41:3f:fa:8d:da: 3b:c2:3d:d9:cf:e5:c0:8a:a7:19:35:bf:01:66:72:12:c4:36: f6:72:93:10:21:cd:f6:c6:89:0d:2c:c9:3a:c2:0b:68:b0:e2: b4:8d:d7:a9:17:1d:b9:63:81:15:46:9b:3d:de:f9:86:3b:14: ca:8b:54:40:71:e7:ae:3c:dd:eb:78:5c:1a:33:42:57:0e:8d: 3f:02:0c:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zhhmAXLQ7SGDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2IyMGI2NDEtZTA2ZC00M2ZmLWE1MWMtZDQxYjViNDIxZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXWmZQFZCaYqBhLhfLbNTpJKTES35rdz4Xsr WcXYEDOVkGkm2oDqV4zUtF5pz0Ro3r863PsnbSTBG8uh3vj+CcS4lNRhu9i6BlHo h74154f+N9WWiJSZXlDpIknaqUmq4nlMU8r/3gZMs+xLzh+T/F1Sjq4d5LL/9M7Z +wruIrGBWF0o7N2fh6c3X6O7jBBkgAuAUUTV9Y/nZEF7DTY1QAlY3LEpMsBY8uST VskwUdMVnnvuKvMkaZgVt2EfpI0hI4tX7Qsfgb4vtHDP4vb5dG+oz0WVuyFPlDLg iYRstcWa5U+9wrIdnkBykf0GWBfi+sZSMYChy9Be2ZouzaMTjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSgPWO2G7hXqEL3QRLeEwtelGQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQwN2JjMzAtYTUwMC0z NmJiLThkNjUtOTQ4NDQxYThhYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVXamS+jbUdsPb23/8H3u5z8/2aJ1sqdu7A1iGIVWJnM/ct8lj+y2v ciArIbpz1zBN8AjgKuZTPASM1SkATLbfl5a23p0P9rQ6OkLk/CGEosBi2M0EoZbt q+Li6d9kpqPeForw1G+mwzmzjpozXB5jFfu13YV67Po248rV1GKBrsh7eNmDCXNk YDBo84d5D0WO5t6VwoafvslMI9wC6tcZwmbEY0vVnpDGHOZ2VAAgQT/6jdo7wj3Z z+XAiqcZNb8BZnISxDb2cpMQIc32xokNLMk6wgtosOK0jdepFx25Y4EVRps93vmG OxTKi1RAceeuPN3reFwaM0JXDo0/AgyN -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:29 2025 by rpki-client