$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa File: 1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa (raw, json) Hash identifier: e9r5T6xQjKnw/3lzlXC2rhX47AVPYrdGDDAzvIwNvSE= Subject key identifier: 33:28:1A:32:29:5C:C0:DE:BE:D5:9C:F4:B5:20:1B:0E:A6:53:F5:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E8ECC895AA8B8046A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396605 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:8e:cc:89:5a:a8:b8:04:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e495738a-3449-4b9c-bbf4-403e08f0a4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:86:6c:c4:67:66:d6:0f:6c:b6:85:e9:01: 79:c3:1c:45:71:bd:64:c9:ae:14:e1:89:9e:d7:a7: 24:22:eb:ed:03:26:9d:9b:e5:0a:89:be:50:2b:ff: c5:ae:e2:04:c4:6f:67:90:21:db:2c:48:31:a9:61: 95:b1:cf:4c:e2:00:15:e4:2f:cc:21:16:8c:46:d6: 17:69:36:66:67:71:d5:6b:ae:20:3d:8a:e1:dd:be: f1:5c:cf:0e:45:b1:ae:a1:f1:67:fc:87:99:7f:44: f7:c6:eb:86:ea:3d:89:f6:91:1a:cd:95:59:bd:e7: d7:d7:04:f7:e6:f0:33:44:87:9f:08:51:37:b7:10: 7c:3b:e0:54:30:16:61:31:2e:d4:b1:70:93:77:d2: 73:0a:1b:eb:c0:6c:3e:3e:00:d1:3f:05:c5:5c:29: dc:d6:3a:bd:7a:39:83:9a:23:b1:72:c0:43:cc:4d: a2:95:29:a8:af:bc:49:c2:4e:39:80:cb:eb:29:ed: 50:ec:84:6d:9b:7b:31:ba:0e:42:06:34:f9:18:98: 25:a3:e2:fe:76:1a:08:e1:c4:fc:77:26:12:0a:2b: 1a:9a:d6:f3:98:cf:a8:4c:34:a6:71:04:58:1e:91: 54:cc:31:c5:88:bb:45:ed:77:4c:71:8f:07:16:eb: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:1A:32:29:5C:C0:DE:BE:D5:9C:F4:B5:20:1B:0E:A6:53:F5:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:12:4b:d8:c7:7f:7c:b3:e8:81:1f:40:73:21:19:99:50:73: 9f:90:b0:c0:97:f7:32:b5:96:c7:71:1c:e0:d7:62:b4:b7:2f: db:19:d7:e7:e2:1a:fe:95:02:25:82:ad:22:7c:57:9c:e0:dc: 51:5f:75:54:5f:d4:43:a1:10:19:51:dc:d5:90:24:61:c6:b6: 71:eb:bd:d4:04:47:83:c3:14:cc:3f:3a:e5:ed:10:13:cb:18: b8:0f:fb:03:37:44:6c:c2:9b:25:ad:33:ee:89:30:ef:bf:78: c7:2c:83:c6:4c:6d:ad:63:4f:42:f2:0b:99:e7:80:c9:2f:eb: 10:b5:93:28:4d:10:7a:6e:b1:a8:51:c9:f7:d5:a6:67:35:78: 81:54:f4:55:e5:e3:f2:11:e7:27:29:a7:ae:6e:9b:e1:a5:3b: d9:5a:e3:77:04:da:3d:e7:91:bd:f2:81:99:e0:a1:c0:ab:5a: 18:39:27:39:7b:43:89:10:4a:00:53:c0:02:7e:6e:3d:f2:ff: 68:88:ba:0d:fb:05:39:81:7d:6e:71:dc:cb:6a:39:1e:2f:69: 1c:3a:7b:9a:93:f1:f4:ab:de:fa:12:23:a4:d2:67:f6:52:12: 58:76:a2:68:8c:58:aa:3e:3b:e1:71:bd:79:3d:bb:35:1b:df: ba:e9:e2:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y6OzIlaqLgEagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTQ5NTczOGEtMzQ0OS00YjljLWJiZjQtNDAzZTA4ZjBhNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmGbMRnZtYPbLaF6QF5wxxFcb1kya4U4Yme 16ckIuvtAyadm+UKib5QK//FruIExG9nkCHbLEgxqWGVsc9M4gAV5C/MIRaMRtYX aTZmZ3HVa64gPYrh3b7xXM8ORbGuofFn/IeZf0T3xuuG6j2J9pEazZVZvefX1wT3 5vAzRIefCFE3txB8O+BUMBZhMS7UsXCTd9JzChvrwGw+PgDRPwXFXCnc1jq9ejmD miOxcsBDzE2ilSmor7xJwk45gMvrKe1Q7IRtm3sxug5CBjT5GJglo+L+dhoI4cT8 dyYSCisamtbzmM+oTDSmcQRYHpFUzDHFiLtF7XdMcY8HFutfUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDMoGjIpXMDevtWc9LUgGw6mU/U5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiMjlmYTUtOWEwZS0z Y2ZhLWIxNTItMDVkNWNkZjdlOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYEkvYx398s+iBH0BzIRmZUHOfkLDAl/cytZbHcRzg12K0ty/bGdfn 4hr+lQIlgq0ifFec4NxRX3VUX9RDoRAZUdzVkCRhxrZx673UBEeDwxTMPzrl7RAT yxi4D/sDN0RswpslrTPuiTDvv3jHLIPGTG2tY09C8guZ54DJL+sQtZMoTRB6brGo Ucn31aZnNXiBVPRV5ePyEecnKaeubpvhpTvZWuN3BNo955G98oGZ4KHAq1oYOSc5 e0OJEEoAU8ACfm498v9oiLoN+wU5gX1ucdzLajkeL2kcOnuak/H0q976EiOk0mf2 UhJYdqJojFiqPjvhcb15Pbs1G9+66eLD -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:14 2025 by rpki-client