$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa File: 8575584a-f21c-318f-b79a-76be415c0096.roa (raw, json) Hash identifier: nDuBnwSEWlSI0QhQNKrkzq6MQP3Wg8bkTJTny4nvj3Y= Subject key identifier: 43:11:86:10:5C:9C:45:9E:22:4E:70:BB:2B:F3:83:9C:37:D7:A2:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E736918E3DE5D83EB87080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396544 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:36:91:8e:3d:e5:d8:3e:b8:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=617afdeb-218f-4717-ac4a-7b8c6dae7916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:38:29:bc:f3:2b:2a:a0:2d:fe:7d:9e:5b: 13:d2:84:d5:bc:00:05:5d:ee:46:09:14:2d:4c:12: c0:7c:e1:97:bc:56:a1:d3:53:2b:a5:34:6e:f1:cb: 77:bd:d8:31:71:19:6a:ea:df:2f:bd:26:1f:ad:c8: f8:55:ae:e4:25:c9:1d:85:df:f3:7a:3e:25:41:dc: 10:d9:14:5f:ac:0e:58:aa:8a:cd:75:5e:81:ae:8a: c3:91:62:02:7d:5e:7b:66:5f:48:f6:0f:3f:b2:99: 7c:c5:0b:6b:b3:26:7a:49:e0:f5:08:4c:2d:05:f9: 31:de:f7:ae:77:fc:cc:68:8e:d5:fc:5f:5b:e4:0d: 6e:f7:4c:1b:af:90:a0:4e:a5:94:5a:e6:8b:0d:84: 78:6e:e8:80:b0:7d:8c:a0:00:ce:18:40:d2:13:8c: 69:6f:92:46:10:cc:a0:72:24:a2:14:55:72:5c:7b: 9a:10:c2:5b:39:8f:14:ff:f1:0c:99:4b:e6:c4:c9: cc:61:49:68:29:8f:17:a3:ea:fa:56:8a:34:7a:b4: 41:70:f5:2a:c0:85:90:0e:32:03:05:be:d5:01:fb: 89:b2:39:24:80:e2:dd:d2:4a:cd:1d:b3:cb:9c:c9: e7:ae:08:ec:e6:97:28:60:93:c6:37:05:72:82:8b: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:11:86:10:5C:9C:45:9E:22:4E:70:BB:2B:F3:83:9C:37:D7:A2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cb:56:65:98:37:97:70:e6:f2:df:2a:b2:4b:84:a8:32:88: 76:e1:b5:4f:72:9d:79:22:ac:1f:6a:1f:10:40:30:a1:e0:89: c2:be:75:45:32:2e:86:5f:8c:1d:e8:aa:5a:ef:a6:09:75:e1: cb:35:25:76:bb:5a:5c:4c:cd:98:1f:6a:66:db:eb:b4:56:38: d2:8f:3e:fb:ef:fc:8d:d2:8c:b7:2d:a3:73:68:50:6a:e2:3b: f1:3c:b7:80:6b:0b:01:ae:21:67:c9:99:49:fa:61:41:fb:90: 9f:90:5d:67:47:71:07:b7:d0:c8:da:57:c0:56:2b:ae:5f:e2: a1:c4:9b:f9:b0:97:eb:27:92:0e:89:b9:69:e2:b9:75:1d:cb: 39:59:df:4a:f7:1e:aa:c0:3e:19:47:07:7f:e0:45:76:8e:47: 18:98:92:10:9c:6a:f4:82:1f:e0:5b:a4:99:44:89:4b:df:26: 3f:a6:a3:90:98:e0:bc:e7:d3:71:ee:37:d4:03:41:eb:ea:b2: 77:33:7a:51:65:f6:84:e1:00:93:06:58:36:a4:81:cf:4e:ce: 28:f3:2e:8a:8e:3a:b9:d7:b0:ee:ed:d2:10:b9:38:8c:8b:67: 37:16:cf:47:45:7c:3a:14:57:57:47:fa:9e:0c:8d:3b:ce:d8: 1b:09:9a:20 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zaRjj3l2D64cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjE3YWZkZWItMjE4Zi00NzE3LWFjNGEtN2I4YzZkYWU3OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI44KbzzKyqgLf59nlsT0oTVvAAFXe5GCRQt TBLAfOGXvFah01MrpTRu8ct3vdgxcRlq6t8vvSYfrcj4Va7kJckdhd/zej4lQdwQ 2RRfrA5YqorNdV6BrorDkWICfV57Zl9I9g8/spl8xQtrsyZ6SeD1CEwtBfkx3veu d/zMaI7V/F9b5A1u90wbr5CgTqWUWuaLDYR4buiAsH2MoADOGEDSE4xpb5JGEMyg ciSiFFVyXHuaEMJbOY8U//EMmUvmxMnMYUloKY8Xo+r6Voo0erRBcPUqwIWQDjID Bb7VAfuJsjkkgOLd0krNHbPLnMnnrgjs5pcoYJPGNwVygoujdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEMRhhBcnEWeIk5wuyvzg5w316LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3NTU4NGEtZjIxYy0z MThmLWI3OWEtNzZiZTQxNWMwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAky1ZlmDeXcOby3yqyS4SoMoh24bVPcp15Iqwfah8QQDCh4InCvnVF Mi6GX4wd6Kpa76YJdeHLNSV2u1pcTM2YH2pm2+u0VjjSjz777/yN0oy3LaNzaFBq 4jvxPLeAawsBriFnyZlJ+mFB+5CfkF1nR3EHt9DI2lfAViuuX+KhxJv5sJfrJ5IO iblp4rl1Hcs5Wd9K9x6qwD4ZRwd/4EV2jkcYmJIQnGr0gh/gW6SZRIlL3yY/pqOQ mOC859Nx7jfUA0Hr6rJ3M3pRZfaE4QCTBlg2pIHPTs4o8y6Kjjq517Du7dIQuTiM i2c3Fs9HRXw6FFdXR/qeDI07ztgbCZog -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:59 2025 by rpki-client