$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa File: 31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa (raw, json) Hash identifier: nzC8ituGVk3vi2e32ufAaxj3K6l9/+/K7T5iyKTxUNw= Subject key identifier: BA:94:5C:11:A0:A5:80:B4:22:C4:F4:9E:8C:8C:7A:AB:3C:86:E4:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E733C3CD92CEA44611FD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396581 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:c3:cd:92:ce:a4:46:11:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=9df3a6d7-9c31-45d4-a0fb-e97cd88316d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ba:b7:00:b0:51:e5:cf:0c:ec:22:7d:49:ac: 72:98:c1:cd:60:2d:0f:ad:05:8c:e0:2c:f5:05:dd: 66:86:9e:31:40:a4:6c:de:29:4b:1f:49:d9:9d:49: 8a:e2:5d:c0:9d:54:6c:a4:98:4b:e8:15:91:35:c7: 22:ee:2f:81:15:57:c8:6a:b5:04:1c:21:e5:7c:00: 4d:9c:de:b7:98:6a:30:cb:0a:f5:20:c6:11:f1:a0: 99:b5:7d:11:33:94:2a:2c:5b:89:31:93:7e:82:cb: 7f:7b:af:e7:20:de:da:97:0d:65:07:79:bc:50:a8: 63:fd:20:bd:a4:75:59:59:bd:19:9c:ef:95:50:68: fd:82:1d:c6:30:98:39:9c:99:f7:16:32:4f:36:6d: ab:dd:c3:88:bd:6e:ec:9c:50:dc:06:38:03:5b:9f: d3:97:b1:b5:17:a3:8a:e6:fa:69:3c:b7:b1:65:2b: 39:38:2e:f1:f1:3d:b0:ac:98:ae:18:63:72:3c:a1: 35:2e:1d:96:89:8d:ee:46:99:aa:98:f8:b2:5d:40: 5c:bf:0e:9c:96:7d:c5:00:d4:37:11:7b:72:6c:bb: aa:6d:b7:89:9a:99:2a:fe:e6:af:e5:13:23:23:0a: 5b:d5:6d:cc:ea:f4:35:38:c6:cd:7b:9f:9c:df:a9: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:5C:11:A0:A5:80:B4:22:C4:F4:9E:8C:8C:7A:AB:3C:86:E4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31ab194f-7ab4-3d81-88e9-5c3d7574f5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7a:a5:5b:c6:e3:a4:47:d1:f5:b8:1e:cf:2c:ab:2e:36:05: a6:fb:a1:49:80:08:99:4f:fe:a5:00:ab:fb:fa:c6:0d:fb:c5: 5c:af:f5:2c:70:89:07:48:6d:61:7e:cf:f5:38:3d:f8:bf:5a: bd:d4:25:8f:8b:25:6a:72:c0:5c:c5:52:e0:06:dd:e2:ab:63: f6:2c:03:c2:9a:b2:b7:63:b0:68:62:a9:e9:e7:fe:77:45:51: ca:c5:32:a9:07:15:57:9b:02:5f:04:11:4e:16:f4:6b:61:3b: ac:1c:3e:56:b8:a2:9f:c6:58:28:c8:8c:d9:19:47:cb:c3:2f: 6d:7f:92:eb:c0:24:d7:a0:32:15:b3:c8:4b:70:76:cc:9c:5d: bc:d5:b6:4a:00:d1:33:4b:70:35:98:b6:0d:a7:54:36:b7:f9: 8f:a0:44:2e:91:f2:a7:72:bc:25:93:26:fd:23:c9:57:b9:2d: 3c:17:4a:c5:70:c3:0c:51:8f:74:f3:a8:71:42:5c:d7:5b:5e: 2e:b9:c8:87:dc:0d:00:69:5e:45:b9:54:38:f3:7b:95:b4:7f: b0:bd:9d:05:67:84:ae:93:00:af:f5:a4:d5:90:84:f2:fe:4a: 62:50:51:74:7c:a0:90:93:b7:67:76:6b:f2:4b:54:7c:f2:9a: 65:af:c5:fa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zPDzZLOpEYR/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OWRmM2E2ZDctOWMzMS00NWQ0LWEwZmItZTk3Y2Q4ODMxNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bq3ALBR5c8M7CJ9SaxymMHNYC0PrQWM4Cz1 Bd1mhp4xQKRs3ilLH0nZnUmK4l3AnVRspJhL6BWRNcci7i+BFVfIarUEHCHlfABN nN63mGowywr1IMYR8aCZtX0RM5QqLFuJMZN+gst/e6/nIN7alw1lB3m8UKhj/SC9 pHVZWb0ZnO+VUGj9gh3GMJg5nJn3FjJPNm2r3cOIvW7snFDcBjgDW5/Tl7G1F6OK 5vppPLexZSs5OC7x8T2wrJiuGGNyPKE1Lh2WiY3uRpmqmPiyXUBcvw6cln3FANQ3 EXtybLuqbbeJmpkq/uav5RMjIwpb1W3M6vQ1OMbNe5+c36lS/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLqUXBGgpYC0IsT0noyMeqs8huTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFhYjE5NGYtN2FiNC0z ZDgxLTg4ZTktNWMzZDc1NzRmNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASeqVbxuOkR9H1uB7PLKsuNgWm+6FJgAiZT/6lAKv7+sYN+8Vcr/Us cIkHSG1hfs/1OD34v1q91CWPiyVqcsBcxVLgBt3iq2P2LAPCmrK3Y7BoYqnp5/53 RVHKxTKpBxVXmwJfBBFOFvRrYTusHD5WuKKfxlgoyIzZGUfLwy9tf5LrwCTXoDIV s8hLcHbMnF281bZKANEzS3A1mLYNp1Q2t/mPoEQukfKncrwlkyb9I8lXuS08F0rF cMMMUY9086hxQlzXW14uuciH3A0AaV5FuVQ483uVtH+wvZ0FZ4SukwCv9aTVkITy /kpiUFF0fKCQk7dndmvyS1R88pplr8X6 -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:59 2025 by rpki-client