$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa File: 70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa (raw, json) Hash identifier: C16fXvTQwGWO+lyav3Hfyso0f/OZosHToS+SWcx5whg= Subject key identifier: 91:BD:92:82:A0:31:DD:4B:F0:E0:BF:26:4B:CB:2E:5B:82:FA:2A:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E554F699A9A5FD51EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397211 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:55:4f:69:9a:9a:5f:d5:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7cd13710-a093-4751-a43a-7d9aba105092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:a3:e3:ae:69:02:b6:17:57:70:d8:7e:2a: ce:24:79:4a:ea:0a:b9:7e:ec:86:90:73:54:3b:3d: ad:8d:db:01:64:bc:75:35:2c:8d:ca:24:e0:ff:dc: 8d:c7:1a:02:df:22:54:5e:76:4c:de:23:04:04:94: dd:07:ee:2e:26:28:d5:c7:f6:d5:44:f3:2e:05:0b: cc:f3:38:ad:d0:b2:0f:fd:41:69:d8:6d:5d:67:55: 8b:c1:6d:d1:0c:27:b3:51:ee:26:0c:27:2b:ef:0e: de:2c:4f:6f:ca:a2:29:2c:93:cb:23:ad:63:01:cb: ac:e7:14:cd:eb:a4:75:52:c5:66:ed:40:60:74:5d: c4:2d:94:b3:1a:f7:6b:2d:e5:ef:78:a5:c8:53:58: 5b:cf:39:10:71:17:54:c4:a8:5f:7e:d6:14:09:b9: 97:59:d9:34:ff:a0:9e:e3:80:2f:3b:50:25:f2:4c: 37:00:c7:16:05:94:2c:f0:fd:85:0f:ac:29:a1:37: c2:d6:32:da:ae:5a:4b:1c:93:fb:aa:29:78:d9:91: 45:f5:b6:a5:fa:8d:fd:09:0e:5c:3d:2c:f6:ab:47: 25:15:4c:10:fc:5f:5e:b7:51:9b:cd:3a:f2:43:9d: e9:41:98:38:29:d1:57:fa:47:e7:28:a2:21:1b:11: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BD:92:82:A0:31:DD:4B:F0:E0:BF:26:4B:CB:2E:5B:82:FA:2A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70c331ec-eaeb-31bf-b237-1d29fbd1e998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:59:d5:82:b4:27:6e:4c:9a:db:89:f0:98:d6:31:55:36:46: 29:0d:ab:23:b7:b2:e6:4c:8d:a8:04:5f:20:d6:ba:66:42:f9: 64:50:2a:a1:09:0c:99:95:68:d4:ca:6c:fb:13:dd:11:ba:15: 27:25:30:13:70:45:e4:99:aa:dd:05:c5:47:d7:79:4a:15:cf: 86:18:11:f9:a1:ca:fb:f8:a6:5d:04:32:19:c3:a9:6a:bf:ec: 13:1c:8a:c7:25:7a:dd:95:c8:2a:f6:85:80:d5:a3:57:66:fc: 10:e2:60:3d:c8:7b:46:c6:9d:6c:28:53:96:7e:b0:ad:34:8a: d6:c2:c0:e9:2b:51:a8:22:06:65:4d:3b:27:39:c3:4e:19:3f: 7e:80:34:a8:39:4b:f9:8d:5c:12:04:53:fc:f5:b6:a7:9d:b3: 6b:54:ff:fc:b7:a8:05:2d:5c:6f:95:b6:28:ce:a7:38:77:a6: 71:77:63:62:40:29:e3:7b:5b:20:09:de:44:8f:3a:32:12:56: b8:57:c0:99:a2:82:a3:0c:d2:88:f9:f2:a0:4c:6d:d6:0e:bf: ac:87:ab:df:43:f4:ac:74:dc:4d:0d:7b:6b:92:61:fd:91:58: 55:a1:77:73:80:09:d3:d8:2b:8e:e5:92:21:75:b3:80:83:97: 45:39:27:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y5VT2maml/VHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2NkMTM3MTAtYTA5My00NzUxLWE0M2EtN2Q5YWJhMTA1MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX2j465pArYXV3DYfirOJHlK6gq5fuyGkHNU Oz2tjdsBZLx1NSyNyiTg/9yNxxoC3yJUXnZM3iMEBJTdB+4uJijVx/bVRPMuBQvM 8zit0LIP/UFp2G1dZ1WLwW3RDCezUe4mDCcr7w7eLE9vyqIpLJPLI61jAcus5xTN 66R1UsVm7UBgdF3ELZSzGvdrLeXveKXIU1hbzzkQcRdUxKhfftYUCbmXWdk0/6Ce 44AvO1Al8kw3AMcWBZQs8P2FD6wpoTfC1jLarlpLHJP7qil42ZFF9bal+o39CQ5c PSz2q0clFUwQ/F9et1GbzTryQ53pQZg4KdFX+kfnKKIhGxGHiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJG9koKgMd1L8OC/JkvLLluC+ipdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBjMzMxZWMtZWFlYi0z MWJmLWIyMzctMWQyOWZiZDFlOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCWdWCtCduTJrbifCY1jFVNkYpDasjt7LmTI2oBF8g1rpmQvlkUCqh CQyZlWjUymz7E90RuhUnJTATcEXkmardBcVH13lKFc+GGBH5ocr7+KZdBDIZw6lq v+wTHIrHJXrdlcgq9oWA1aNXZvwQ4mA9yHtGxp1sKFOWfrCtNIrWwsDpK1GoIgZl TTsnOcNOGT9+gDSoOUv5jVwSBFP89bannbNrVP/8t6gFLVxvlbYozqc4d6Zxd2Ni QCnje1sgCd5EjzoyEla4V8CZooKjDNKI+fKgTG3WDr+sh6vfQ/SsdNxNDXtrkmH9 kVhVoXdzgAnT2CuO5ZIhdbOAg5dFOSfV -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:43 2025 by rpki-client