$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa File: 3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa (raw, json) Hash identifier: lw+CzhrpcHWyyib9M/p4fGdqdVaZrSM4bidRl2yYJ1U= Subject key identifier: 9E:06:B6:AE:8C:DA:D8:61:47:7B:DF:DA:B8:C2:3E:20:53:B2:8F:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73195F9DCCB1D1F36DC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396617 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:31:95:f9:dc:cb:1d:1f:36:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=074780ce-5339-4446-a710-f1c1c6f03db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:fb:97:93:f4:7f:12:5d:5d:5c:81:cd:07: 0b:1a:2b:40:e5:83:5c:3a:9d:38:e3:87:19:9b:8b: 4e:54:87:bd:4c:09:eb:8a:72:ba:87:60:fb:43:2c: 2e:c3:f5:9c:ed:69:1e:7b:e5:16:6d:da:23:6f:47: fb:c7:68:c5:44:4e:5a:4d:df:8f:16:24:07:72:1a: bf:26:31:b3:30:12:93:a8:dc:fb:73:b2:73:63:eb: 41:18:91:ca:e7:9b:59:92:ba:b4:ab:0c:dc:0b:55: b5:f6:f0:eb:c1:02:87:55:13:df:8f:33:a1:4b:51: c2:fb:af:ea:ef:63:bc:7a:9a:c2:08:85:29:b2:56: 91:88:be:cc:b0:f7:64:46:ee:c4:b7:ea:85:c9:b6: 25:b9:9f:0e:61:76:69:e1:eb:f0:0d:1d:22:03:ed: b8:14:ea:6b:10:9c:b9:ec:2f:a1:5e:7c:ab:ee:fd: c8:0c:00:50:5f:49:b4:8c:e0:75:f6:70:e9:0b:9b: 78:c0:19:ba:92:1d:e8:2a:12:bb:ca:30:4f:1d:62: 9f:28:cd:8e:f8:36:5a:d6:62:b5:86:78:fa:2b:91: 8a:21:ba:a8:0b:ec:b0:d8:26:16:e1:cf:00:95:ad: 76:6c:5b:5a:60:ab:e9:92:4b:4b:e0:41:ad:8b:26: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:B6:AE:8C:DA:D8:61:47:7B:DF:DA:B8:C2:3E:20:53:B2:8F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e66fb1c-f203-3fe6-ba4b-78b07cf86ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e7:75:9d:18:1a:b1:6d:34:30:b0:d0:59:07:42:75:20:f5: d9:94:ca:9d:f1:dd:29:43:72:bf:5a:6d:1c:df:b2:1a:36:dd: 94:11:0d:77:97:72:8e:b6:70:49:55:fa:c2:f0:8c:d5:2f:9e: c3:2f:b7:1d:96:80:18:dc:03:bb:f3:ed:11:fe:e1:cc:f8:ab: d2:1f:96:61:92:b3:aa:1c:60:de:db:0a:39:ef:e0:2c:19:45: 79:41:b4:e1:51:48:61:da:ba:4b:7b:35:00:06:6a:df:84:25: 63:4f:8d:83:53:45:dd:b6:97:b7:d8:37:4f:43:54:df:99:9a: 13:8f:18:bb:35:23:31:7f:ec:9b:c7:cb:74:56:00:d6:79:4a: fa:4e:26:f0:83:ca:fa:50:c7:99:bf:4e:54:e2:55:06:5c:62: 9b:45:db:3b:68:21:82:b8:be:06:61:ea:41:f2:be:1a:fa:64: d2:09:9a:05:e6:5f:61:4c:aa:ed:45:d4:5c:91:04:ef:4b:e5: dc:20:94:72:8a:bb:0a:9c:1d:66:a2:e2:32:84:8a:3d:5c:9d: 9b:ee:12:01:53:17:a9:fc:d7:ba:ec:21:41:47:73:0f:da:2c: ef:01:84:f4:88:91:dc:c8:ff:62:ee:d3:db:66:6e:bc:75:cc: 14:74:40:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zGV+dzLHR823IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDc0NzgwY2UtNTMzOS00NDQ2LWE3MTAtZjFjMWM2ZjAzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8P7l5P0fxJdXVyBzQcLGitA5YNcOp0444cZ m4tOVIe9TAnrinK6h2D7Qywuw/Wc7Wkee+UWbdojb0f7x2jFRE5aTd+PFiQHchq/ JjGzMBKTqNz7c7JzY+tBGJHK55tZkrq0qwzcC1W19vDrwQKHVRPfjzOhS1HC+6/q 72O8eprCCIUpslaRiL7MsPdkRu7Et+qFybYluZ8OYXZp4evwDR0iA+24FOprEJy5 7C+hXnyr7v3IDABQX0m0jOB19nDpC5t4wBm6kh3oKhK7yjBPHWKfKM2O+DZa1mK1 hnj6K5GKIbqoC+yw2CYW4c8Ala12bFtaYKvpkktL4EGtiyaxoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ4Gtq6M2thhR3vf2rjCPiBTso8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U2NmZiMWMtZjIwMy0z ZmU2LWJhNGItNzhiMDdjZjg2YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAP53WdGBqxbTQwsNBZB0J1IPXZlMqd8d0pQ3K/Wm0c37IaNt2UEQ13 l3KOtnBJVfrC8IzVL57DL7cdloAY3AO78+0R/uHM+KvSH5ZhkrOqHGDe2wo57+As GUV5QbThUUhh2rpLezUABmrfhCVjT42DU0Xdtpe32DdPQ1TfmZoTjxi7NSMxf+yb x8t0VgDWeUr6Tibwg8r6UMeZv05U4lUGXGKbRds7aCGCuL4GYepB8r4a+mTSCZoF 5l9hTKrtRdRckQTvS+XcIJRyirsKnB1mouIyhIo9XJ2b7hIBUxep/Ne67CFBR3MP 2izvAYT0iJHcyP9i7tPbZm68dcwUdEBe -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:50 2025 by rpki-client