$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c15882-0ecd-34fe-a5f2-ff04329e77a5.roa File: 89c15882-0ecd-34fe-a5f2-ff04329e77a5.roa (raw, json) Hash identifier: R0qxGFc7LE2PkNA3vGX5+w3sDQDLbFxyBtJT5oMuCcY= Subject key identifier: D1:C2:3E:85:70:39:B3:99:ED:45:E6:63:8C:BC:93:14:8B:7B:FC:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732FF902ECBA8F4C53800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c15882-0ecd-34fe-a5f2-ff04329e77a5.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397196 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:ff:90:2e:cb:a8:f4:c5:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=86f84f7e-a14e-4f48-9357-cf2dfda2abba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e2:81:87:a9:89:6c:da:9a:7c:27:0d:4b:04: 7a:55:07:e7:5e:73:cb:7e:44:88:71:e9:6e:c4:4d: 57:81:f8:51:7b:19:e0:99:41:93:9a:67:8b:1e:e2: 62:a8:7f:8c:0e:6e:de:1b:1e:ba:e1:99:63:c4:10: 5d:54:b6:00:d4:fc:f3:f4:37:b4:8f:3f:e7:24:2d: 8d:73:c6:35:bc:ef:ad:f4:6c:a6:5c:97:55:81:23: a5:f2:cc:08:84:c0:1a:55:bd:06:34:89:92:a6:b8: aa:c5:33:c9:3e:9f:25:55:03:c9:f4:52:24:26:d4: 39:12:a8:be:cb:f8:85:df:46:4c:e7:63:ce:a5:7c: 65:39:18:57:d3:7d:98:a5:8a:20:71:17:f4:97:80: 48:40:e8:b1:02:7c:be:b9:34:8b:b4:42:04:ca:c7: 6c:2b:3b:53:64:56:d6:a9:a7:e0:4d:8e:2d:e3:aa: 8f:09:b8:2e:66:bf:81:f6:16:4a:75:72:2a:78:fe: 48:94:26:8b:e2:f6:2f:78:4d:2e:17:df:8e:8b:70: 10:1e:f1:2c:5c:ac:15:1b:00:39:4e:5b:63:2c:01: e3:dc:1c:da:fc:35:63:81:b3:69:39:5d:1a:04:84: a5:d4:13:78:d3:a5:f4:b1:bf:2d:6d:83:bd:80:c5: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C2:3E:85:70:39:B3:99:ED:45:E6:63:8C:BC:93:14:8B:7B:FC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c15882-0ecd-34fe-a5f2-ff04329e77a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:58:9c:e6:0f:a3:3e:7b:a3:ea:ea:8c:5a:11:8b:c6:3c:47: 6c:5f:1a:07:eb:d5:c5:e4:e5:f3:63:c7:23:2f:82:b7:19:ea: 2b:58:97:2d:9c:b7:92:dc:17:bf:0f:14:e9:7f:b4:b8:ee:cb: 7c:88:ea:ce:70:8d:4e:4f:2b:7f:42:4e:3a:a4:bc:de:8d:4f: e6:e5:55:68:66:5c:1c:8a:bc:b2:cc:c1:22:0f:69:6d:2a:93: 42:a3:8f:6e:42:86:f0:a3:7b:42:41:9b:b5:0b:cb:bd:9d:61: db:37:d1:20:4b:6a:8a:7f:74:82:d1:ec:f4:de:c7:a3:f0:98: 1e:5f:4f:1b:1b:61:ec:bd:08:7a:09:5e:f0:10:76:d9:3c:97: 63:b8:03:13:ef:2c:19:aa:cf:12:5b:4d:80:3b:53:d3:41:91: 74:3e:b6:69:3e:c9:07:17:10:d2:34:94:cc:45:9e:91:02:a6: 5b:1e:ab:53:ca:35:5c:67:e9:63:e6:59:dc:80:3f:8c:80:0c: ee:e7:81:25:1e:13:a0:b9:0b:39:f9:70:c6:86:53:6e:41:2f: b7:a4:c3:a7:5f:e4:91:35:45:a4:7a:cc:5f:2e:65:aa:ab:45: 64:40:0f:39:39:dc:91:2c:df:26:92:a6:0d:28:68:e1:d6:e5: e9:e8:85:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zL/kC7LqPTFOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODZmODRmN2UtYTE0ZS00ZjQ4LTkzNTctY2YyZGZkYTJhYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+KBh6mJbNqafCcNSwR6VQfnXnPLfkSIcelu xE1XgfhRexngmUGTmmeLHuJiqH+MDm7eGx664ZljxBBdVLYA1Pzz9De0jz/nJC2N c8Y1vO+t9GymXJdVgSOl8swIhMAaVb0GNImSpriqxTPJPp8lVQPJ9FIkJtQ5Eqi+ y/iF30ZM52POpXxlORhX032YpYogcRf0l4BIQOixAny+uTSLtEIEysdsKztTZFbW qafgTY4t46qPCbguZr+B9hZKdXIqeP5IlCaL4vYveE0uF9+Oi3AQHvEsXKwVGwA5 TltjLAHj3Bza/DVjgbNpOV0aBISl1BN406X0sb8tbYO9gMX6qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNHCPoVwObOZ7UXmY4y8kxSLe/y1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODljMTU4ODItMGVjZC0z NGZlLWE1ZjItZmYwNDMyOWU3N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFWJzmD6M+e6Pq6oxaEYvGPEdsXxoH69XF5OXzY8cjL4K3GeorWJct nLeS3Be/DxTpf7S47st8iOrOcI1OTyt/Qk46pLzejU/m5VVoZlwciryyzMEiD2lt KpNCo49uQobwo3tCQZu1C8u9nWHbN9EgS2qKf3SC0ez03sej8JgeX08bG2HsvQh6 CV7wEHbZPJdjuAMT7ywZqs8SW02AO1PTQZF0PrZpPskHFxDSNJTMRZ6RAqZbHqtT yjVcZ+lj5lncgD+MgAzu54ElHhOguQs5+XDGhlNuQS+3pMOnX+SRNUWkesxfLmWq q0VkQA85OdyRLN8mkqYNKGjh1uXp6IX/ -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:55 2025 by rpki-client