$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa File: 1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa (raw, json) Hash identifier: dO/5KCXeJfDgidvWooEsYGdLJsNAvvIoj8sfJ9NHHCk= Subject key identifier: 62:7B:BD:B9:5D:D5:01:F0:F7:98:29:EE:6E:A3:25:4C:00:00:77:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73254CD2F439B3C87DE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36624 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:54:cd:2f:43:9b:3c:87:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=a9ddb9e2-f578-485f-a58f-5732fa833978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:c7:82:75:9b:25:77:09:48:bc:90:6c:c4: 42:bf:d8:e2:3c:7e:86:39:ef:7b:72:de:aa:22:32: c8:57:e0:3e:2b:70:d0:1e:4b:72:21:e5:af:af:d2: aa:5c:b3:c5:44:14:ff:7e:68:de:1b:14:63:f9:ea: 87:dc:36:10:2f:f7:6b:ac:69:2c:27:6a:30:36:14: 33:fa:29:30:04:94:72:89:10:f5:41:45:a8:ff:75: 20:e1:06:be:97:26:be:38:28:ba:35:c1:20:55:f1: 69:d9:a8:81:1c:f6:b6:67:66:54:21:ff:b1:5b:14: 62:e1:c2:c7:6e:33:fb:16:ba:45:c2:a9:1a:23:f8: ff:90:f6:cf:f6:0d:88:32:fb:1f:35:7e:7b:cd:e6: ca:a9:48:03:9a:3e:65:97:64:e8:8c:fd:bc:02:a3: 9a:52:d2:53:d8:77:12:b0:a4:16:cd:59:16:c1:17: 8d:a1:7d:a3:df:d7:18:75:5e:57:a7:2d:38:84:86: b3:5b:b0:4a:6d:5e:f1:36:06:3b:5c:d9:19:70:67: c4:33:44:99:b6:0f:7e:98:7c:8c:25:7d:35:42:4a: e1:32:7c:bf:51:09:82:75:72:aa:ec:30:2f:46:81: 34:ea:1e:1e:62:a8:39:80:de:08:47:c5:8c:b0:09: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:BD:B9:5D:D5:01:F0:F7:98:29:EE:6E:A3:25:4C:00:00:77:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a5:0a:9d:df:b4:bd:8c:57:af:06:d6:3a:12:4a:87:f4:ff: 22:03:21:9d:23:c7:5b:51:4c:65:77:0b:8c:25:1d:ad:8e:96: 7a:b0:7e:4f:82:9a:5c:66:a2:cd:1c:49:31:c5:60:73:35:0f: 74:92:31:93:b8:2f:05:cf:d7:cb:27:fe:9f:7c:06:e3:65:6f: a6:f2:ce:04:a0:04:61:d1:f0:f3:1b:8b:fb:8b:13:dd:88:fc: dd:b9:9b:b7:ec:29:67:0d:70:1a:67:14:bd:79:e6:ed:2b:bf: 54:97:ba:0e:4d:d5:fd:98:76:86:c6:a3:8b:7b:00:5c:1f:6b: 2b:31:9e:0d:b9:3c:68:30:c4:91:02:45:7c:aa:42:75:b0:bf: 93:42:73:ce:a8:be:21:16:9e:86:a3:85:20:7e:8e:5b:b0:66: d6:6b:ca:72:81:e2:77:e6:1f:63:00:66:1c:34:78:c3:3d:60: 21:50:26:7c:75:b5:9a:43:da:44:f9:c7:0b:25:1d:16:9f:04: 2b:2b:d3:c0:9f:3f:bc:9c:01:a0:21:e9:bc:c8:cb:49:a6:32: d9:0e:a7:db:3a:20:57:f9:25:61:fb:ba:2e:28:2c:87:35:4e: b4:3c:32:90:8d:24:3b:ff:70:64:11:8b:a3:0d:83:09:79:31: 32:9b:b1:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zJUzS9DmzyH3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YTlkZGI5ZTItZjU3OC00ODVmLWE1OGYtNTczMmZhODMzOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTzHgnWbJXcJSLyQbMRCv9jiPH6GOe97ct6q IjLIV+A+K3DQHktyIeWvr9KqXLPFRBT/fmjeGxRj+eqH3DYQL/drrGksJ2owNhQz +ikwBJRyiRD1QUWo/3Ug4Qa+lya+OCi6NcEgVfFp2aiBHPa2Z2ZUIf+xWxRi4cLH bjP7FrpFwqkaI/j/kPbP9g2IMvsfNX57zebKqUgDmj5ll2TojP28AqOaUtJT2HcS sKQWzVkWwReNoX2j39cYdV5Xpy04hIazW7BKbV7xNgY7XNkZcGfEM0SZtg9+mHyM JX01QkrhMny/UQmCdXKq7DAvRoE06h4eYqg5gN4IR8WMsAl4SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGJ7vbld1QHw95gp7m6jJUwAAHcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE4MTQ1YmQtNGUzMy0z YmZjLWExNjctOWQxYjZhYzE4ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCpQqd37S9jFevBtY6EkqH9P8iAyGdI8dbUUxldwuMJR2tjpZ6sH5P gppcZqLNHEkxxWBzNQ90kjGTuC8Fz9fLJ/6ffAbjZW+m8s4EoARh0fDzG4v7ixPd iPzduZu37ClnDXAaZxS9eebtK79Ul7oOTdX9mHaGxqOLewBcH2srMZ4NuTxoMMSR AkV8qkJ1sL+TQnPOqL4hFp6Go4Ugfo5bsGbWa8pygeJ35h9jAGYcNHjDPWAhUCZ8 dbWaQ9pE+ccLJR0WnwQrK9PAnz+8nAGgIem8yMtJpjLZDqfbOiBX+SVh+7ouKCyH NU60PDKQjSQ7/3BkEYujDYMJeTEym7H6 -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:17 2025 by rpki-client