$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa File: 5328636b-11e1-317e-8dfc-9111eb5422e3.roa (raw, json) Hash identifier: BcOsjWfAJjfGwJvocaWC4rzGMNxa76SeTFVya7z1mTs= Subject key identifier: 9E:32:8C:6E:EB:66:A6:82:C0:51:38:E8:47:42:E9:F4:DD:7E:84:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732BB4234D3B5AD83F080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397199 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:bb:42:34:d3:b5:ad:83:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c9710e9c-6f3f-4818-add9-81dceea63dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:63:11:0c:66:32:b7:3d:08:dc:31:50:ae: e2:39:c4:94:4f:78:22:3b:8f:55:d0:65:07:11:da: 6b:13:ab:2f:ba:81:a4:12:ba:04:b0:56:d3:ba:84: 7f:43:0f:9d:10:2a:c3:12:9e:67:66:39:f7:22:d2: bb:ab:d9:d4:ce:12:1b:50:ab:7a:7b:56:9a:4d:67: 51:38:de:ae:b3:ab:c4:74:aa:45:5c:a9:1e:9f:69: 28:23:d8:d3:f6:5b:90:5d:b5:56:2e:12:10:b4:4f: 7d:3d:8b:54:d7:b5:74:1a:ec:29:a4:55:4f:aa:ed: 51:ed:7f:d4:5d:26:9e:2d:a9:8f:26:9e:39:04:bb: 8f:eb:02:f0:2e:b4:43:41:31:21:5a:36:4e:d2:ff: 4a:71:06:fa:dd:52:54:c5:73:44:02:3b:fd:19:57: 25:2e:bd:c1:d3:4e:92:b5:85:6d:51:79:71:e3:03: 9f:9b:74:0c:53:62:2f:3c:6b:a5:2b:a0:60:ec:6d: 25:a1:39:10:11:be:7d:13:23:bc:b4:83:f4:e0:59: 7b:39:fa:86:87:de:47:fc:e4:62:ec:13:77:e9:88: 81:20:d8:f4:0e:a6:7a:ac:60:b6:db:3d:42:23:e7: bd:6f:8a:c8:30:1a:d2:30:da:3a:1a:77:f1:3c:ed: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:32:8C:6E:EB:66:A6:82:C0:51:38:E8:47:42:E9:F4:DD:7E:84:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b6:29:ae:75:66:5a:70:69:a2:ea:1e:45:ac:7f:22:64:8c: 99:46:e6:55:2f:f0:59:9f:d1:ed:ff:9f:4e:bf:e7:07:e5:6b: d0:f0:7e:ce:85:92:04:59:9b:ea:91:46:c2:4b:ec:30:d7:b2: 8a:83:31:1d:13:57:b1:56:75:4d:1b:36:22:2e:53:c8:78:62: 79:10:c7:34:41:5c:72:8a:d1:14:17:79:77:ac:02:7c:21:b2: 0b:cf:66:f9:cd:57:36:40:0d:55:ee:91:df:f9:a8:73:cb:87: 9d:69:8b:eb:7f:17:87:83:4a:21:a9:88:5b:5e:a2:8b:3d:75: cf:29:17:b5:40:35:4e:3d:12:ad:1b:1d:37:66:04:92:59:4a: 8a:f6:89:b7:27:59:89:ca:55:bc:07:49:fa:b9:3c:c2:2a:19: f8:55:c1:1b:d9:22:de:86:09:e0:4e:4a:fe:56:1e:52:40:f2: 14:d8:04:99:26:68:b5:26:6c:2a:02:26:d4:f5:40:1f:1f:bc: 44:f7:8d:9f:79:5d:34:ed:12:88:5d:d8:0d:93:04:85:10:45: dc:60:d1:51:4e:ba:fb:77:61:f8:31:f0:39:17:5a:b3:2a:58: b4:de:0d:21:4f:cb:aa:ba:1b:ea:e2:8c:ef:a2:59:f5:bc:76: e7:6b:f2:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zK7QjTTta2D8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Yzk3MTBlOWMtNmYzZi00ODE4LWFkZDktODFkY2VlYTYzZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPdjEQxmMrc9CNwxUK7iOcSUT3giO49V0GUH EdprE6svuoGkEroEsFbTuoR/Qw+dECrDEp5nZjn3ItK7q9nUzhIbUKt6e1aaTWdR ON6us6vEdKpFXKken2koI9jT9luQXbVWLhIQtE99PYtU17V0GuwppFVPqu1R7X/U XSaeLamPJp45BLuP6wLwLrRDQTEhWjZO0v9KcQb63VJUxXNEAjv9GVclLr3B006S tYVtUXlx4wOfm3QMU2IvPGulK6Bg7G0loTkQEb59EyO8tIP04Fl7OfqGh95H/ORi 7BN36YiBINj0DqZ6rGC22z1CI+e9b4rIMBrSMNo6GnfxPO0V6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ4yjG7rZqaCwFE46EdC6fTdfoQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTMyODYzNmItMTFlMS0z MTdlLThkZmMtOTExMWViNTQyMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8timudWZacGmi6h5FrH8iZIyZRuZVL/BZn9Ht/59Ov+cH5WvQ8H7O hZIEWZvqkUbCS+ww17KKgzEdE1exVnVNGzYiLlPIeGJ5EMc0QVxyitEUF3l3rAJ8 IbILz2b5zVc2QA1V7pHf+ahzy4edaYvrfxeHg0ohqYhbXqKLPXXPKRe1QDVOPRKt Gx03ZgSSWUqK9om3J1mJylW8B0n6uTzCKhn4VcEb2SLehgngTkr+Vh5SQPIU2ASZ Jmi1JmwqAibU9UAfH7xE942feV007RKIXdgNkwSFEEXcYNFRTrr7d2H4MfA5F1qz Kli03g0hT8uquhvq4ozvoln1vHbna/LH -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:15 2025 by rpki-client