$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa File: 3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa (raw, json) Hash identifier: AhMQ3tCYCMLlPzKKMjwxAJC7CvHpI3A51YKy46HZko0= Subject key identifier: 66:7F:D6:1F:19:52:2B:3D:C8:70:D2:68:11:BB:9B:75:C4:A2:19:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72D9D8859A7EF20F210C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396542 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:9d:88:59:a7:ef:20:f2:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7c8605ae-f2da-4c8f-871a-20b8ff435488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d2:77:10:4f:89:cf:93:b8:d3:ce:59:6c:a1: e0:39:30:57:3f:9f:3e:51:b0:9e:db:7f:72:23:0d: 90:7e:9b:ba:dc:10:52:01:5a:7c:1c:de:d2:5f:ef: e2:c4:60:46:f5:20:66:43:28:6c:e0:64:61:24:a0: 13:0d:dc:af:4d:ee:4b:98:27:58:8b:a7:6a:c2:7b: d1:15:5f:22:01:d8:fa:ce:1d:e9:1a:f3:db:51:90: ed:cf:37:fa:c0:63:6c:33:f6:76:d7:7c:44:f1:aa: 39:21:5c:31:29:23:4a:c8:ea:0c:62:1a:b7:1c:44: 76:89:fd:50:8a:ec:e0:47:44:62:48:65:a8:eb:ef: be:a4:27:15:55:6e:93:71:01:03:e2:dd:5b:70:45: a4:bb:b3:55:a0:5f:29:20:6f:20:f9:d1:89:8a:76: 34:63:25:42:7b:57:79:f5:ad:8f:44:7b:01:65:b5: 56:42:b3:06:5d:ea:ab:08:86:44:96:17:d0:e0:01: 9c:08:6a:93:40:91:95:ae:3d:c2:1e:ed:f6:b5:9e: c6:8c:b2:e3:78:ea:ef:5f:3d:e7:ee:d3:a3:52:57: e1:b2:3a:67:73:ff:d5:4e:62:9e:fe:cf:2f:e7:a0: 2a:24:05:e2:91:45:ee:bf:b0:51:8e:bf:4f:c4:18: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:D6:1F:19:52:2B:3D:C8:70:D2:68:11:BB:9B:75:C4:A2:19:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ff:b0:8f:42:c6:9d:74:8b:86:20:e1:ed:37:f8:63:79:4c: 81:e5:dd:b2:b0:5e:c5:f9:2e:83:c9:68:9a:1a:c5:e4:3c:d9: 39:05:94:d5:af:ca:31:bc:f7:54:c9:30:ab:75:7a:e2:13:8a: 14:14:bf:c7:6a:4b:91:17:b5:a2:d9:dd:73:cf:01:06:40:dc: d1:f4:8d:b7:b7:7d:cf:7f:c7:b5:d8:62:07:e6:f0:cf:1c:d9: 92:ff:fc:0a:e9:2d:29:1d:60:1f:d8:e6:51:01:80:11:a2:ac: 05:c9:9e:c8:f6:ab:af:04:94:67:c4:81:35:10:4d:2b:cc:d7: c6:3d:97:9d:c0:15:54:22:6e:95:6a:e6:8d:b8:dc:25:d1:19: ed:46:f1:b5:32:fd:13:0d:c7:e2:c8:ed:12:ae:bf:60:54:bd: bc:ae:c2:34:af:ea:82:a1:02:42:74:2d:9d:3b:8a:c6:87:c1: f7:35:cb:f0:97:17:57:a9:8a:47:23:0f:27:72:cb:23:6c:dc: 38:e7:08:ce:26:dc:f1:d1:b7:ed:ba:43:9f:73:60:55:76:7c: 0b:0e:a6:b0:1e:25:fb:13:31:4d:b7:53:97:1b:a7:86:98:7a: 44:3a:dc:90:b5:7a:e3:55:e5:01:e9:1c:55:e5:af:20:1d:9f: 0a:70:a5:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y2diFmn7yDyEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2M4NjA1YWUtZjJkYS00YzhmLTg3MWEtMjBiOGZmNDM1NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NJ3EE+Jz5O4085ZbKHgOTBXP58+UbCe239y Iw2Qfpu63BBSAVp8HN7SX+/ixGBG9SBmQyhs4GRhJKATDdyvTe5LmCdYi6dqwnvR FV8iAdj6zh3pGvPbUZDtzzf6wGNsM/Z213xE8ao5IVwxKSNKyOoMYhq3HER2if1Q iuzgR0RiSGWo6+++pCcVVW6TcQED4t1bcEWku7NVoF8pIG8g+dGJinY0YyVCe1d5 9a2PRHsBZbVWQrMGXeqrCIZElhfQ4AGcCGqTQJGVrj3CHu32tZ7GjLLjeOrvXz3n 7tOjUlfhsjpnc//VTmKe/s8v56AqJAXikUXuv7BRjr9PxBiF0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZ/1h8ZUis9yHDSaBG7m3XEohnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2NlMGZmYTYtMmFjYy0z YTFlLWJlMTQtZTlhNzg3Zjg1ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA//7CPQsaddIuGIOHtN/hjeUyB5d2ysF7F+S6DyWiaGsXkPNk5BZTV r8oxvPdUyTCrdXriE4oUFL/HakuRF7Wi2d1zzwEGQNzR9I23t33Pf8e12GIH5vDP HNmS//wK6S0pHWAf2OZRAYARoqwFyZ7I9quvBJRnxIE1EE0rzNfGPZedwBVUIm6V auaNuNwl0RntRvG1Mv0TDcfiyO0Srr9gVL28rsI0r+qCoQJCdC2dO4rGh8H3Ncvw lxdXqYpHIw8ncssjbNw45wjOJtzx0bftukOfc2BVdnwLDqawHiX7EzFNt1OXG6eG mHpEOtyQtXrjVeUB6RxV5a8gHZ8KcKXK -----END CERTIFICATE-----Generated at Mon Oct 20 13:20:58 2025 by rpki-client