$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/184a3956-4deb-389c-a028-b2721e491e14.roa File: 184a3956-4deb-389c-a028-b2721e491e14.roa (raw, json) Hash identifier: c/hQBA4QAVW3HPsbMAT+blqEiX5k8kTKXshHXP+j3to= Subject key identifier: 40:29:3D:85:1B:A0:A6:70:E1:C8:0E:56:BB:A1:7C:63:E7:26:E3:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E736A2DD3A883D4752A908 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/184a3956-4deb-389c-a028-b2721e491e14.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36618 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:36:a2:dd:3a:88:3d:47:52:a9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=50130a05-6a41-4da7-8f6f-573eec750f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:96:19:f0:6f:db:a7:e0:97:7e:23:1a:57:2b: 36:65:da:ee:9a:4c:3d:14:60:db:30:6c:c4:60:7c: 64:39:27:d3:aa:44:1d:e4:28:c3:b3:18:f5:37:b5: d1:14:0e:c0:87:ca:ff:21:85:1b:2e:44:b9:cf:2f: 10:a0:ba:e6:94:20:0a:14:4c:dc:43:1f:a7:1e:bb: bb:b4:db:fd:b0:fb:48:3b:10:96:14:ec:94:ee:cf: b2:3c:96:d8:1b:b6:6d:95:2b:db:38:c9:af:8f:5c: 39:ab:fd:2d:38:43:7c:82:d0:75:ce:8c:dd:68:b7: 3c:d4:e3:34:93:99:66:26:02:98:aa:c1:db:1a:b6: a5:77:58:8a:ed:d8:f9:c8:4e:43:f0:9d:96:0e:d3: dd:63:0d:47:47:f0:5c:1b:48:3f:0d:f5:39:b9:72: a5:0b:8a:5e:9b:a5:f4:da:23:a1:2f:91:26:a5:f9: c4:75:7c:b1:c2:19:fb:0a:3c:3a:74:85:d3:99:46: 3c:d9:e2:9a:46:26:5b:34:9a:62:e0:a7:81:6c:71: ae:2e:84:41:5f:67:62:79:4b:3f:e4:52:ba:3d:ef: 8a:e7:6f:3c:4e:d3:df:16:e8:ad:3d:ed:5f:82:4f: ee:21:56:12:1a:bf:04:b4:3f:02:c0:50:e7:5e:e5: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:29:3D:85:1B:A0:A6:70:E1:C8:0E:56:BB:A1:7C:63:E7:26:E3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/184a3956-4deb-389c-a028-b2721e491e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:52:2f:27:59:b1:1e:86:80:4f:af:cf:1f:82:49:03:c1:e6: 95:15:6e:23:5a:84:6b:af:61:b0:9c:76:6a:2d:fb:97:b2:2b: 56:c1:db:e1:dd:ea:13:4f:6c:a9:ae:7a:36:a2:06:2e:00:b5: 1e:ec:94:68:f9:44:f4:52:2c:2c:0b:d6:0d:e7:c4:73:41:fe: da:59:a0:0c:aa:0d:6f:e8:82:45:f5:88:54:bb:08:4d:a4:6f: 2e:f4:3f:3d:76:62:35:12:fd:12:63:3a:fc:52:b7:33:3c:54: 3e:20:0e:d0:99:4f:b7:aa:72:a0:85:76:30:07:74:b2:86:28: 64:3f:f2:58:2c:ed:d6:7f:c4:ed:9a:a8:b8:62:d0:66:51:d0: a1:18:40:9a:e9:10:7d:5c:60:16:6c:65:74:64:a8:8b:bd:3a: bf:3e:a0:c0:4c:bb:4a:ab:6e:27:02:8d:ef:01:db:91:7f:8b: 74:59:d0:af:90:57:82:93:23:5b:3c:87:50:97:c6:23:bd:ce: eb:5c:fb:f9:da:da:e1:20:14:77:b2:58:31:8b:1c:dc:6f:7c: cf:c8:3a:57:cb:ad:3e:ca:b3:8b:90:5b:17:ba:65:c4:e7:c9: 55:fe:f6:52:12:32:59:a0:fd:8f:8c:5f:f4:94:d1:a6:ec:d8: bb:39:a9:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zai3TqIPUdSqQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTAxMzBhMDUtNmE0MS00ZGE3LThmNmYtNTczZWVjNzUwZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpYZ8G/bp+CXfiMaVys2Zdrumkw9FGDbMGzE YHxkOSfTqkQd5CjDsxj1N7XRFA7Ah8r/IYUbLkS5zy8QoLrmlCAKFEzcQx+nHru7 tNv9sPtIOxCWFOyU7s+yPJbYG7ZtlSvbOMmvj1w5q/0tOEN8gtB1zozdaLc81OM0 k5lmJgKYqsHbGrald1iK7dj5yE5D8J2WDtPdYw1HR/BcG0g/DfU5uXKlC4pem6X0 2iOhL5EmpfnEdXyxwhn7Cjw6dIXTmUY82eKaRiZbNJpi4KeBbHGuLoRBX2dieUs/ 5FK6Pe+K5288TtPfFuitPe1fgk/uIVYSGr8EtD8CwFDnXuUxNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEApPYUboKZw4cgOVruhfGPnJuOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg0YTM5NTYtNGRlYi0z ODljLWEwMjgtYjI3MjFlNDkxZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlUi8nWbEehoBPr88fgkkDweaVFW4jWoRrr2GwnHZqLfuXsitWwdvh 3eoTT2yprno2ogYuALUe7JRo+UT0UiwsC9YN58RzQf7aWaAMqg1v6IJF9YhUuwhN pG8u9D89dmI1Ev0SYzr8UrczPFQ+IA7QmU+3qnKghXYwB3SyhihkP/JYLO3Wf8Tt mqi4YtBmUdChGECa6RB9XGAWbGV0ZKiLvTq/PqDATLtKq24nAo3vAduRf4t0WdCv kFeCkyNbPIdQl8Yjvc7rXPv52trhIBR3slgxixzcb3zPyDpXy60+yrOLkFsXumXE 58lV/vZSEjJZoP2PjF/0lNGm7Ni7OanX -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:43 2025 by rpki-client