$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa File: 22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa (raw, json) Hash identifier: yv7S6CGrS/JdirTflPXoYCzujnrEFNFWKg2ciuw0ru0= Subject key identifier: DE:82:9F:16:F6:8B:5C:0E:01:44:8C:3F:8E:28:AB:92:15:B9:C8:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72F01AF91538BDFE25EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396564 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2f:01:af:91:53:8b:df:e2:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=be3a159b-2ec5-4ee0-a582-784604759588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:cf:76:64:db:37:2c:c7:68:f6:2c:7a:52: 2d:85:88:40:06:a4:f3:aa:67:cb:ed:e1:fd:f9:9e: 5f:2a:3a:05:aa:f6:08:a4:8d:b1:57:08:2e:6a:f6: e8:4a:7d:32:12:c2:d5:71:e3:2f:f6:d1:3c:cb:86: 68:cf:2d:0c:9e:52:62:25:b5:88:2f:7c:be:08:46: 8a:0e:12:c1:41:d3:62:eb:e7:92:9e:96:d0:d3:69: e0:ad:29:51:69:6a:f5:a4:14:e7:02:3f:be:b5:4e: ad:dd:a1:78:46:fb:3f:92:49:f1:88:6d:3b:e7:f0: 15:cc:54:12:59:5f:b5:40:df:e9:9b:82:ad:36:27: 1e:47:be:21:42:4a:37:f1:89:98:45:c7:15:33:70: ef:2e:2d:4d:f0:33:16:f4:78:a2:ea:b2:59:05:25: 55:6a:a5:27:f0:79:03:eb:a4:26:7d:ac:4e:75:b1: ce:c4:0b:ec:c8:dc:9d:60:e8:ec:be:cc:ba:8b:e4: 64:bd:57:9b:19:8b:35:68:89:d5:f2:2f:3b:20:07: 16:fa:57:9e:e8:c0:ac:d0:05:49:b1:ad:55:eb:1f: 3a:4f:e6:86:11:b2:9d:93:da:d1:1f:8c:2a:16:12: 62:fb:89:d8:be:72:79:97:03:a0:28:3e:73:40:63: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:9F:16:F6:8B:5C:0E:01:44:8C:3F:8E:28:AB:92:15:B9:C8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22a0a140-d7ca-3b43-bf15-fce3ee3a7c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:47:4d:43:09:44:a4:13:e6:d4:df:5a:0e:44:98:79:71:a8: c5:0a:b0:d3:b8:44:30:fb:7c:84:b5:f6:85:e3:bc:65:5f:82: 16:e4:00:50:ed:e7:59:11:4b:db:b3:7f:07:1e:1e:1a:5d:de: d6:26:1f:9d:f3:0a:57:d4:97:83:6d:88:8e:e1:72:4f:57:c4: dd:c9:c3:b4:93:89:e3:b4:0d:73:20:5c:0a:b6:a1:72:a4:22: 77:32:9a:50:15:49:2c:8c:d4:e9:a1:2a:37:84:b1:14:b7:75: 27:8b:dc:5d:52:91:56:72:23:ac:f1:0b:97:bd:94:4e:b5:0f: 0a:b3:5e:c0:0f:34:b5:dd:61:0f:b9:8b:09:63:f9:5a:ae:05: c9:48:e9:ac:aa:2b:3f:e5:bd:3c:63:e6:2e:36:f0:15:aa:98: d2:c4:72:d3:67:db:34:55:7f:29:0d:44:4f:39:7d:8c:cc:60: a3:7f:cd:4c:39:c3:22:4e:7f:b7:90:f1:cf:c8:c9:3f:93:e4: 9d:cb:20:fc:d7:6b:00:4b:40:95:da:b8:09:50:0a:b8:ac:3b: 55:e2:b2:a2:5a:7d:b5:a2:36:e0:55:a3:8a:b0:66:10:9d:c6: 17:75:13:46:76:84:8e:32:5d:1c:f7:49:b3:4a:65:f0:bb:b6: 85:50:54:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y8Br5FTi9/iXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YmUzYTE1OWItMmVjNS00ZWUwLWE1ODItNzg0NjA0NzU5NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/HPdmTbNyzHaPYselIthYhABqTzqmfL7eH9 +Z5fKjoFqvYIpI2xVwguavboSn0yEsLVceMv9tE8y4Zozy0MnlJiJbWIL3y+CEaK DhLBQdNi6+eSnpbQ02ngrSlRaWr1pBTnAj++tU6t3aF4Rvs/kknxiG075/AVzFQS WV+1QN/pm4KtNiceR74hQko38YmYRccVM3DvLi1N8DMW9Hii6rJZBSVVaqUn8HkD 66QmfaxOdbHOxAvsyNydYOjsvsy6i+RkvVebGYs1aInV8i87IAcW+lee6MCs0AVJ sa1V6x86T+aGEbKdk9rRH4wqFhJi+4nYvnJ5lwOgKD5zQGPovwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN6Cnxb2i1wOAUSMP44oq5IVucjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjJhMGExNDAtZDdjYS0z YjQzLWJmMTUtZmNlM2VlM2E3Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWR01DCUSkE+bU31oORJh5cajFCrDTuEQw+3yEtfaF47xlX4IW5ABQ 7edZEUvbs38HHh4aXd7WJh+d8wpX1JeDbYiO4XJPV8TdycO0k4njtA1zIFwKtqFy pCJ3MppQFUksjNTpoSo3hLEUt3Uni9xdUpFWciOs8QuXvZROtQ8Ks17ADzS13WEP uYsJY/largXJSOmsqis/5b08Y+YuNvAVqpjSxHLTZ9s0VX8pDURPOX2MzGCjf81M OcMiTn+3kPHPyMk/k+SdyyD812sAS0CV2rgJUAq4rDtV4rKiWn21ojbgVaOKsGYQ ncYXdRNGdoSOMl0c90mzSmXwu7aFUFQX -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:13 2025 by rpki-client