$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa File: 6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa (raw, json) Hash identifier: MD1VGretrGJXbtG+CIIyQk5Pmsdq3uNGMxU75kQRlmA= Subject key identifier: EA:57:46:63:0F:D2:9E:52:E8:EF:51:7F:33:53:62:0E:3D:B2:B9:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72A6845F6526184D23980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396565 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2a:68:45:f6:52:61:84:d2:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e0f867ce-4769-49cb-865b-fe3ae4e6823f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:49:84:2c:1b:c7:03:45:b5:90:80:f8:ba:62: 7f:19:04:0f:14:44:04:31:03:64:f7:b4:2d:3f:61: 45:65:fc:6a:36:f0:90:b7:34:05:f4:9f:e8:c4:fc: 9b:11:f8:70:50:eb:97:d2:fa:ef:f4:69:a0:3b:e6: ee:74:ba:81:a1:f2:a1:eb:b5:8b:e2:b2:89:87:a8: 1f:8b:95:2e:1e:8f:da:4e:8c:b2:66:14:ad:85:41: b3:14:e3:ea:5c:ef:28:25:45:43:73:d0:e0:38:6b: 8a:20:ad:27:10:c5:1a:18:63:a7:02:e4:84:96:d1: 22:54:c4:e1:9f:42:66:68:06:c4:d3:17:67:cc:1b: 05:25:66:f3:4c:ae:fa:ad:56:7c:1e:21:eb:96:23: d0:b9:ac:ad:79:64:f9:4c:b2:be:31:80:1d:6c:44: 21:03:4b:48:d0:4d:1b:59:81:0b:c5:d6:83:13:1a: 5f:80:75:81:af:56:3d:be:09:e1:02:39:02:5c:20: 9c:6c:7b:09:1b:ed:b2:25:d9:d9:d2:cf:f2:8b:82: 4e:d3:24:03:2b:a2:7c:9f:f7:67:1f:25:04:3f:7e: 4f:46:85:23:2c:8c:93:82:0b:36:a1:94:15:1b:2c: 43:8e:39:17:72:bb:6b:1e:b0:e5:0e:39:c2:32:1b: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:46:63:0F:D2:9E:52:E8:EF:51:7F:33:53:62:0E:3D:B2:B9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6a:26:05:d6:a1:4f:31:73:06:6a:37:e2:8a:ec:bd:16:20: 75:cc:16:c5:a4:e8:96:0f:da:e5:26:8b:72:04:5e:f3:bc:07: ff:4d:d9:39:74:53:9e:23:64:73:50:15:7f:17:6a:e3:1b:ad: 54:11:3f:d7:44:e7:41:f8:18:00:8d:05:9e:d9:6e:ff:d2:e4: 4f:54:1b:fb:a8:24:9a:ba:db:42:22:b1:5f:44:a9:f0:fa:20: 2a:68:0d:78:cc:85:9b:43:34:7f:d7:be:c4:a4:f1:d0:de:d1: 19:b9:26:1c:ed:da:c3:41:3b:c9:d6:9b:ca:8d:49:46:96:69: af:cf:43:0c:6d:81:9a:c3:fe:0d:5c:7f:43:a3:9f:c4:95:55: 48:8c:99:27:0f:92:e5:63:d1:d4:8b:82:21:19:bb:16:42:ae: df:fe:8e:ff:f9:90:f0:5a:1b:fa:92:23:ee:e6:a0:b1:43:80: 4e:83:63:c1:30:14:72:4d:ff:ec:fa:b5:73:d6:b8:ff:33:70: 40:5b:0d:67:fd:dd:f0:c9:a6:72:92:b7:a9:74:e3:8e:bb:1d: 67:8d:9c:a7:17:99:69:06:51:a9:6b:44:a0:36:40:c2:df:19: d1:48:4f:ec:e7:c3:23:2f:42:6b:93:3e:68:05:06:d1:11:b5: d4:f9:ab:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ypoRfZSYYTSOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTBmODY3Y2UtNDc2OS00OWNiLTg2NWItZmUzYWU0ZTY4MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0mELBvHA0W1kID4umJ/GQQPFEQEMQNk97Qt P2FFZfxqNvCQtzQF9J/oxPybEfhwUOuX0vrv9GmgO+budLqBofKh67WL4rKJh6gf i5UuHo/aToyyZhSthUGzFOPqXO8oJUVDc9DgOGuKIK0nEMUaGGOnAuSEltEiVMTh n0JmaAbE0xdnzBsFJWbzTK76rVZ8HiHrliPQuayteWT5TLK+MYAdbEQhA0tI0E0b WYELxdaDExpfgHWBr1Y9vgnhAjkCXCCcbHsJG+2yJdnZ0s/yi4JO0yQDK6J8n/dn HyUEP35PRoUjLIyTggs2oZQVGyxDjjkXcrtrHrDlDjnCMhsiQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOpXRmMP0p5S6O9RfzNTYg49srkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmI4ZmNkOWItOTNjZC0z MzJkLWE5YjQtNWI0NTg1NmJhZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuaiYF1qFPMXMGajfiiuy9FiB1zBbFpOiWD9rlJotyBF7zvAf/Tdk5 dFOeI2RzUBV/F2rjG61UET/XROdB+BgAjQWe2W7/0uRPVBv7qCSauttCIrFfRKnw +iAqaA14zIWbQzR/177EpPHQ3tEZuSYc7drDQTvJ1pvKjUlGlmmvz0MMbYGaw/4N XH9Do5/ElVVIjJknD5LlY9HUi4IhGbsWQq7f/o7/+ZDwWhv6kiPu5qCxQ4BOg2PB MBRyTf/s+rVz1rj/M3BAWw1n/d3wyaZykrepdOOOux1njZynF5lpBlGpa0SgNkDC 3xnRSE/s58MjL0Jrkz5oBQbREbXU+atw -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:14 2025 by rpki-client