$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa File: 31105b17-2b57-3271-b8aa-7a4128d5f493.roa (raw, json) Hash identifier: VW9BTwcFQBVUD3MGYlubsWZyCD87bi2Fa/MXFQ9m2jc= Subject key identifier: 2C:F5:91:FF:26:8A:12:EE:2D:17:00:14:67:90:18:A0:BB:63:97:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72A57798B05EA55977400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 40717 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2a:57:79:8b:05:ea:55:97:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=21f3e4b9-fe82-4947-a5b4-a3bd9da1f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:8e:09:b7:88:be:b7:cb:eb:22:fb:9d:a3: f8:2d:ae:af:f5:c7:de:3e:17:10:d2:08:8f:82:fd: ec:26:be:99:44:c9:36:f1:c4:76:a2:21:20:31:24: 61:c9:6c:18:2a:ba:6a:a5:d1:2a:8b:10:b7:2d:fc: 9a:82:f2:68:21:a7:c5:77:2b:e2:29:c8:80:1e:25: d5:8b:9f:d2:a7:f5:b9:1e:c5:b4:1c:1c:10:87:68: 07:de:fa:92:06:a1:4b:d7:88:86:b5:90:d0:8c:96: 88:d8:a8:0f:51:51:2e:ce:41:f1:0b:04:c3:99:11: 00:94:20:68:f9:00:01:37:fb:24:1b:77:05:28:ad: 4a:2b:3e:c4:cf:35:eb:0c:f2:79:2a:7f:7f:cc:fb: 0c:b4:69:96:35:f5:04:3d:7c:b3:ce:ba:bd:70:0a: 92:ed:6b:7c:47:c1:9e:b8:22:d7:84:de:a0:7f:5c: 4d:83:56:46:3b:3d:13:e7:c4:ef:99:70:7e:7a:e0: 07:32:b1:32:0c:e2:67:61:d5:04:7a:0c:a6:45:f4: 80:a8:6e:6b:6d:b0:99:49:9c:9e:6f:7e:ae:31:e0: 72:c3:b7:fe:46:4b:8e:ce:eb:9f:84:8e:bc:5c:51: 99:14:2e:91:91:0e:c9:6d:b9:4f:fc:51:9f:e9:25: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F5:91:FF:26:8A:12:EE:2D:17:00:14:67:90:18:A0:BB:63:97:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31105b17-2b57-3271-b8aa-7a4128d5f493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:69:73:75:45:6d:cf:29:9b:43:13:0f:76:03:b8:d9:55:ef: a6:25:8c:c1:ef:68:6f:88:f4:bf:cd:87:46:e5:f7:ba:f7:c7: ef:08:f4:8e:70:1a:74:8b:be:4a:6c:91:12:5c:a3:9c:7c:98: 07:0d:f2:43:2f:3e:e6:6e:90:2a:02:43:dd:9a:27:62:7b:19: d4:9d:d6:32:3a:4f:26:01:87:17:21:ff:eb:76:05:fe:e1:ff: b4:41:d4:b8:ea:b9:5f:ee:49:48:f0:aa:b8:6c:04:36:16:61: 30:e9:54:f6:09:d2:c9:74:fb:44:df:19:8e:cc:a8:ff:a1:99: 88:b4:9f:47:2c:37:25:55:89:74:3e:f8:38:e8:69:e9:b4:a0: 74:63:b5:b3:ab:68:6f:79:f9:dc:ad:0c:31:f3:e9:9e:a8:ec: 11:94:ac:a6:6f:89:6e:60:15:bd:f3:e6:20:40:0c:88:e5:64: 9f:a6:23:6c:01:0e:f4:4e:28:3f:7e:5f:4e:43:83:37:be:e7: be:be:f9:30:f0:d2:e8:0a:15:67:09:31:e1:01:f0:b9:92:b1: c7:33:0e:51:a6:aa:b7:77:3f:8b:65:20:0e:1e:62:de:69:31: ef:bb:87:14:f3:bd:de:e1:ad:5a:9a:eb:6f:35:5f:a2:46:9c: 20:65:ab:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ypXeYsF6lWXdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjFmM2U0YjktZmU4Mi00OTQ3LWE1YjQtYTNiZDlkYTFmMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktyOCbeIvrfL6yL7naP4La6v9cfePhcQ0giP gv3sJr6ZRMk28cR2oiEgMSRhyWwYKrpqpdEqixC3LfyagvJoIafFdyviKciAHiXV i5/Sp/W5HsW0HBwQh2gH3vqSBqFL14iGtZDQjJaI2KgPUVEuzkHxCwTDmREAlCBo +QABN/skG3cFKK1KKz7EzzXrDPJ5Kn9/zPsMtGmWNfUEPXyzzrq9cAqS7Wt8R8Ge uCLXhN6gf1xNg1ZGOz0T58TvmXB+euAHMrEyDOJnYdUEegymRfSAqG5rbbCZSZye b36uMeByw7f+RkuOzuufhI68XFGZFC6RkQ7JbblP/FGf6SW2VwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCz1kf8mihLuLRcAFGeQGKC7Y5fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzExMDViMTctMmI1Ny0z MjcxLWI4YWEtN2E0MTI4ZDVmNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXaXN1RW3PKZtDEw92A7jZVe+mJYzB72hviPS/zYdG5fe698fvCPSO cBp0i75KbJESXKOcfJgHDfJDLz7mbpAqAkPdmidiexnUndYyOk8mAYcXIf/rdgX+ 4f+0QdS46rlf7klI8Kq4bAQ2FmEw6VT2CdLJdPtE3xmOzKj/oZmItJ9HLDclVYl0 Pvg46GnptKB0Y7Wzq2hvefncrQwx8+meqOwRlKymb4luYBW98+YgQAyI5WSfpiNs AQ70Tig/fl9OQ4M3vue+vvkw8NLoChVnCTHhAfC5krHHMw5Rpqq3dz+LZSAOHmLe aTHvu4cU873e4a1amutvNV+iRpwgZasp -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:08 2025 by rpki-client