$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a9026c3-b426-306c-b461-a7258bfaee9e.roa File: 1a9026c3-b426-306c-b461-a7258bfaee9e.roa (raw, json) Hash identifier: EQ3esLVyMXDE99Pq7vHBU4AiLJqq1CLiAPDsG0ttL5I= Subject key identifier: 72:80:1C:9D:5A:2B:B1:B6:43:68:48:4C:80:6B:B3:E0:3F:A1:70:34 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7312CD1231D7129BFA200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a9026c3-b426-306c-b461-a7258bfaee9e.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397194 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:31:2c:d1:23:1d:71:29:bf:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=6c59493f-3346-47ef-ac33-a82bdb230b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:11:71:b6:2b:c9:62:d6:4d:a2:74:03:d7: a5:14:ea:14:9e:a3:25:d6:6d:82:36:01:99:5f:5d: f1:48:94:bc:fb:2d:10:c6:b4:69:0a:fd:48:b9:17: af:c3:09:ab:b0:33:5d:de:af:4a:64:83:77:2a:9c: 27:87:05:af:d6:a7:a5:1d:2f:de:af:a7:97:d0:1c: 0f:21:79:0a:94:cc:5a:7e:6e:eb:21:7c:29:dd:b1: c1:a7:19:e0:9a:ce:db:74:1f:9d:d7:3e:28:61:6e: e9:9e:e0:be:4c:a7:64:0a:62:b8:78:7e:5f:f0:39: 9a:9e:9d:b0:58:eb:d7:60:54:c7:70:75:bc:a5:02: 83:fc:71:55:b0:cb:2c:3d:9a:80:26:c1:48:3e:b1: 37:6a:97:d1:8a:22:cf:a9:13:4a:c3:d2:b3:98:9f: 5d:60:17:58:79:c6:c8:f1:3b:3b:3c:f9:e1:23:34: 81:a9:81:ea:fa:96:5e:9f:62:cb:15:cb:81:8b:f0: fa:e3:62:58:36:e6:21:79:cc:63:f3:62:3b:6c:14: e2:4a:bd:b9:e1:81:49:fd:5e:0d:88:c3:07:17:9c: b3:12:75:c2:97:b6:7c:b4:ac:16:a6:bc:31:79:8c: 20:64:74:10:9b:47:89:da:c7:25:04:7e:4f:cf:50: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:80:1C:9D:5A:2B:B1:B6:43:68:48:4C:80:6B:B3:E0:3F:A1:70:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a9026c3-b426-306c-b461-a7258bfaee9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:d8:c3:ce:d5:ad:f5:ad:87:28:49:bd:55:57:bb:cc:85: 24:89:c4:44:67:0a:09:d1:84:1b:64:59:93:ff:e1:7a:b8:80: 53:e5:76:3c:d5:05:55:31:43:b5:81:bc:b3:cd:8b:a1:84:cc: 16:9c:6b:98:d7:2a:3b:87:ae:83:2c:7e:8e:ce:99:f5:7b:f1: 1a:88:f4:06:4f:c9:c3:2d:99:0c:a2:c9:a7:a2:8d:ab:04:02: 0a:1a:71:af:ec:ed:06:94:fa:9e:24:57:3f:aa:fb:99:bc:5a: 29:55:1c:28:c5:33:2e:87:50:82:9d:6b:ed:5f:71:df:61:69: 40:95:18:49:c2:c3:9a:88:3d:bb:22:53:e2:67:61:d0:a0:6b: 8d:36:79:34:f1:8a:8c:cc:47:53:69:44:1f:c5:25:da:42:a6: 07:80:23:36:d0:e6:d2:49:56:14:e5:15:4f:85:83:f5:cc:93: bf:5d:96:c3:3c:fa:d9:6e:12:d8:45:30:14:cc:2d:a0:64:46: 9b:fb:48:89:a6:a7:73:03:26:69:1a:26:61:dd:eb:27:85:3e: f4:ac:dc:85:84:8d:eb:e4:ac:0a:07:a4:05:8c:cc:1b:74:7f: 79:cf:46:35:cb:ff:50:ce:1d:e9:bc:fc:82:c8:b0:d0:95:16: 32:94:14:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zEs0SMdcSm/ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NmM1OTQ5M2YtMzM0Ni00N2VmLWFjMzMtYTgyYmRiMjMwYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP0RcbYryWLWTaJ0A9elFOoUnqMl1m2CNgGZ X13xSJS8+y0QxrRpCv1IuRevwwmrsDNd3q9KZIN3KpwnhwWv1qelHS/er6eX0BwP IXkKlMxafm7rIXwp3bHBpxngms7bdB+d1z4oYW7pnuC+TKdkCmK4eH5f8Dmanp2w WOvXYFTHcHW8pQKD/HFVsMssPZqAJsFIPrE3apfRiiLPqRNKw9KzmJ9dYBdYecbI 8Ts7PPnhIzSBqYHq+pZen2LLFcuBi/D642JYNuYhecxj82I7bBTiSr254YFJ/V4N iMMHF5yzEnXCl7Z8tKwWprwxeYwgZHQQm0eJ2sclBH5Pz1DYVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHKAHJ1aK7G2Q2hITIBrs+A/oXA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE5MDI2YzMtYjQyNi0z MDZjLWI0NjEtYTcyNThiZmFlZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEedjDztWt9a2HKEm9VVe7zIUkicREZwoJ0YQbZFmT/+F6uIBT5XY8 1QVVMUO1gbyzzYuhhMwWnGuY1yo7h66DLH6Ozpn1e/EaiPQGT8nDLZkMosmnoo2r BAIKGnGv7O0GlPqeJFc/qvuZvFopVRwoxTMuh1CCnWvtX3HfYWlAlRhJwsOaiD27 IlPiZ2HQoGuNNnk08YqMzEdTaUQfxSXaQqYHgCM20ObSSVYU5RVPhYP1zJO/XZbD PPrZbhLYRTAUzC2gZEab+0iJpqdzAyZpGiZh3esnhT70rNyFhI3r5KwKB6QFjMwb dH95z0Y1y/9Qzh3pvPyCyLDQlRYylBSV -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:34 2025 by rpki-client