$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa File: 78b07b79-8312-3873-9072-b4e2f9b3b227.roa (raw, json) Hash identifier: YwQlE+KzV1Vf29G9xtgtgHeKFN1CxsFnDxu8Oa2H0+U= Subject key identifier: 7A:A7:31:0A:47:58:6D:46:74:12:5E:23:11:F9:F2:A6:81:93:5C:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E731F19C533E95F66CE180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396612 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:31:f1:9c:53:3e:95:f6:6c:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4d5e7ac4-4a81-4a4b-9255-595ce1286f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4d:89:8d:e1:db:f4:2f:82:ba:82:b2:96:c2: bc:83:12:c7:7d:3b:03:e8:2e:75:6b:9e:36:fa:6c: 0c:d7:04:60:3d:ee:92:c5:f4:19:0a:1a:cc:08:e0: 11:47:34:e8:1f:d7:f1:5d:dd:b5:24:65:8f:49:6d: 61:b8:b5:0e:c0:8c:36:65:6e:d5:64:7a:a2:96:15: 66:41:25:de:e6:4d:23:6d:fc:13:9b:79:86:ce:ea: a7:47:1f:5a:96:62:45:1a:3f:b7:8c:8f:c7:71:aa: 09:70:5d:d0:92:b5:c6:14:39:90:00:69:09:35:9c: df:00:63:ae:62:78:aa:cf:34:d8:77:ff:cf:5a:ba: 38:b0:7d:35:50:7f:b9:cd:8f:6d:f5:7e:ee:65:f5: 43:0a:8b:34:b7:97:63:03:52:26:48:f9:9e:cb:34: 36:e2:61:cd:fa:76:9e:d3:7c:28:37:e0:ed:bc:6a: 5d:2a:dc:22:64:68:76:e2:8c:05:c5:25:e3:d2:87: f0:3c:7b:c2:00:2c:af:69:d0:24:d3:d8:76:e0:81: 1e:2e:bf:5e:26:e5:67:50:94:ae:be:71:ab:d1:7b: 60:cf:56:d8:16:b4:f0:5d:be:26:32:2c:e7:b4:77: d7:1c:09:7b:18:55:fb:81:13:4c:1e:c4:e1:db:e7: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A7:31:0A:47:58:6D:46:74:12:5E:23:11:F9:F2:A6:81:93:5C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78b07b79-8312-3873-9072-b4e2f9b3b227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:66:43:ea:a7:24:28:50:60:85:4c:f2:d4:24:65:51:2a:8a: 08:ef:77:cb:55:36:10:c0:62:3a:2a:e2:20:47:3e:b9:42:f1: 23:11:10:6a:d2:64:c4:7d:b8:1e:c3:b7:ba:4a:9d:e5:2c:2b: a8:c7:c6:86:20:55:26:52:48:4a:a6:34:4b:26:42:fc:f4:2a: ff:19:41:71:7c:90:ce:de:48:96:24:dd:b1:ac:83:cd:8c:b8: 9b:54:25:13:4c:69:40:8b:d9:11:46:a7:5e:94:e4:d8:ab:8c: 2a:67:db:a6:de:8b:f0:53:87:56:45:24:55:c1:0c:8e:d3:84: c6:81:98:c0:67:b2:d2:5c:00:e8:16:c3:f4:64:4d:3c:06:47: bd:6d:38:32:3c:62:ed:f8:a7:cc:5b:76:c0:4c:f0:60:ae:b9: f1:db:fb:e5:d9:b7:98:5c:3a:2a:5b:9e:1c:40:45:cc:d6:22: f8:c1:31:72:e9:d5:d5:ec:e0:02:e2:5c:57:cd:2f:a5:a2:b3: 81:13:27:da:4c:13:7b:0c:12:3d:3b:e8:2d:0a:93:ea:54:35: dc:34:dd:25:d0:62:ee:6d:87:fa:d0:d5:42:16:53:a3:1b:1a: 3b:63:2a:64:01:72:9d:cb:c6:5b:82:42:62:df:cc:01:cd:35: ab:ef:48:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zHxnFM+lfZs4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGQ1ZTdhYzQtNGE4MS00YTRiLTkyNTUtNTk1Y2UxMjg2ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm02JjeHb9C+CuoKylsK8gxLHfTsD6C51a542 +mwM1wRgPe6SxfQZChrMCOARRzToH9fxXd21JGWPSW1huLUOwIw2ZW7VZHqilhVm QSXe5k0jbfwTm3mGzuqnRx9almJFGj+3jI/HcaoJcF3QkrXGFDmQAGkJNZzfAGOu YniqzzTYd//PWro4sH01UH+5zY9t9X7uZfVDCos0t5djA1ImSPmeyzQ24mHN+nae 03woN+DtvGpdKtwiZGh24owFxSXj0ofwPHvCACyvadAk09h24IEeLr9eJuVnUJSu vnGr0Xtgz1bYFrTwXb4mMizntHfXHAl7GFX7gRNMHsTh2+dZ7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHqnMQpHWG1GdBJeIxH58qaBk1wOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiMDdiNzktODMxMi0z ODczLTkwNzItYjRlMmY5YjNiMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArZkPqpyQoUGCFTPLUJGVRKooI73fLVTYQwGI6KuIgRz65QvEjERBq 0mTEfbgew7e6Sp3lLCuox8aGIFUmUkhKpjRLJkL89Cr/GUFxfJDO3kiWJN2xrIPN jLibVCUTTGlAi9kRRqdelOTYq4wqZ9um3ovwU4dWRSRVwQyO04TGgZjAZ7LSXADo FsP0ZE08Bke9bTgyPGLt+KfMW3bATPBgrrnx2/vl2beYXDoqW54cQEXM1iL4wTFy 6dXV7OAC4lxXzS+lorOBEyfaTBN7DBI9O+gtCpPqVDXcNN0l0GLubYf60NVCFlOj Gxo7YypkAXKdy8ZbgkJi38wBzTWr70gE -----END CERTIFICATE-----Generated at Mon Oct 20 10:32:21 2025 by rpki-client