$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa File: 24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa (raw, json) Hash identifier: Wu0H1WOd++YQl18NFPUqhYek36hbv0sX1VYvSlpM8n4= Subject key identifier: 58:6A:94:36:2C:4B:5A:AB:AA:AB:76:17:7C:73:8F:AB:67:FE:16:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E737B8FE77D7EF04D58080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397201 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:37:b8:fe:77:d7:ef:04:d5:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=dd143aaa-5c1e-451c-bdce-1451e77b824f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:2e:d5:af:fe:73:f4:14:ff:fc:6f:32:f0: ef:1b:52:16:8c:af:59:c4:d5:16:e5:d8:52:e1:ab: 2b:a8:a4:51:2f:6b:8e:03:9f:5c:8d:71:59:b4:7a: bf:a2:4b:16:e8:3a:96:b1:4a:b8:5f:8e:85:f4:32: fd:7c:37:fc:1c:e3:e1:01:fa:0b:7d:d2:7c:25:30: 7c:f4:fa:c3:28:3b:75:6d:d8:87:2c:aa:bd:a3:ef: a6:e2:e8:34:03:86:7d:15:d5:dd:e5:aa:2c:19:0a: 23:c3:cb:71:94:0e:01:a2:8b:47:a4:5b:d9:98:14: 03:7c:ef:ab:81:20:93:7a:ee:00:25:38:68:27:7c: 35:07:ca:39:87:e8:b4:6c:b4:43:15:fc:a0:66:58: 44:b0:2d:40:64:53:8e:61:9b:46:ad:03:21:e5:89: a7:a9:e4:61:33:e2:38:e8:bc:b4:69:0f:01:7f:40: 19:3d:6f:91:6f:af:6e:03:06:a8:3a:44:d0:68:21: 89:0a:4d:e7:cc:f8:7a:b5:14:5c:5c:6f:a4:c5:94: e9:b3:7b:a5:c1:c2:99:14:f3:85:5e:76:72:22:47: c9:24:da:78:b4:1b:91:39:27:eb:09:07:e0:f5:5a: 0b:a7:60:90:a5:79:8b:31:05:8d:3c:64:f7:18:ad: f8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6A:94:36:2C:4B:5A:AB:AA:AB:76:17:7C:73:8F:AB:67:FE:16:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24ed3e63-ed3b-3209-9ec5-79a82b37c736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:25:6f:07:78:e3:b6:ac:d4:7c:e0:f6:d0:40:e0:8b:98:55: 35:09:d9:90:40:74:b8:8f:70:1b:b5:51:b3:fc:89:32:fe:d2: 02:5a:de:16:ad:39:18:fb:fe:fb:39:f8:2a:ea:5d:92:09:1a: 1e:a3:70:b9:5c:14:d6:0f:b1:39:3d:46:32:a9:f3:27:e3:2d: e9:ce:84:3d:67:cc:d2:c2:e8:7e:80:1c:96:4c:06:51:d1:32: 03:79:0e:6e:4e:e2:1e:00:a3:eb:a8:b5:b0:8b:9e:e8:5d:73: 88:1d:a6:37:b8:ef:62:27:35:15:ea:ee:28:80:59:25:ef:01: a6:e6:e1:81:b7:c1:f6:00:01:ff:21:ba:b1:f1:ed:e5:14:a8: e0:4c:33:3a:24:f0:60:8a:a4:8d:be:1d:cc:58:dc:4c:90:e9: 6d:c0:42:2c:33:73:fd:92:20:3e:67:49:ed:2a:9d:5a:67:12: 4e:a7:38:e2:9c:b0:b0:cc:70:e1:30:c4:93:ec:ca:97:0c:09: f2:3a:79:d3:50:fd:f1:02:f1:99:10:c7:48:58:44:9f:ea:b3: 4f:a3:65:79:fa:2e:4c:4a:a4:b8:96:b5:6e:0c:7c:eb:f0:57: d5:3c:c0:ad:a6:9f:ec:b1:31:9e:dc:dd:9b:3c:f3:43:ff:82: ac:df:89:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ze4/nfX7wTVgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGQxNDNhYWEtNWMxZS00NTFjLWJkY2UtMTQ1MWU3N2I4MjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiku1a/+c/QU//xvMvDvG1IWjK9ZxNUW5dhS 4asrqKRRL2uOA59cjXFZtHq/oksW6DqWsUq4X46F9DL9fDf8HOPhAfoLfdJ8JTB8 9PrDKDt1bdiHLKq9o++m4ug0A4Z9FdXd5aosGQojw8txlA4BootHpFvZmBQDfO+r gSCTeu4AJThoJ3w1B8o5h+i0bLRDFfygZlhEsC1AZFOOYZtGrQMh5YmnqeRhM+I4 6Ly0aQ8Bf0AZPW+Rb69uAwaoOkTQaCGJCk3nzPh6tRRcXG+kxZTps3ulwcKZFPOF XnZyIkfJJNp4tBuROSfrCQfg9VoLp2CQpXmLMQWNPGT3GK34PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFhqlDYsS1qrqqt2F3xzj6tn/hazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRlZDNlNjMtZWQzYi0z MjA5LTllYzUtNzlhODJiMzdjNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJJW8HeOO2rNR84PbQQOCLmFU1CdmQQHS4j3AbtVGz/Iky/tICWt4W rTkY+/77Ofgq6l2SCRoeo3C5XBTWD7E5PUYyqfMn4y3pzoQ9Z8zSwuh+gByWTAZR 0TIDeQ5uTuIeAKPrqLWwi57oXXOIHaY3uO9iJzUV6u4ogFkl7wGm5uGBt8H2AAH/ Ibqx8e3lFKjgTDM6JPBgiqSNvh3MWNxMkOltwEIsM3P9kiA+Z0ntKp1aZxJOpzji nLCwzHDhMMST7MqXDAnyOnnTUP3xAvGZEMdIWESf6rNPo2V5+i5MSqS4lrVuDHzr 8FfVPMCtpp/ssTGe3N2bPPND/4Ks34lU -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:17 2025 by rpki-client