$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa File: a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa (raw, json) Hash identifier: v9X3cEtOooXrYeyEzlGq2C5MeCLuiyia1g5AHOanKW0= Subject key identifier: 5A:FF:55:74:0D:80:9C:E0:8B:07:E9:B9:3B:25:6C:0C:9D:EF:11:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72DBF1F61B68E3A646AFE Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397200 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:bf:1f:61:b6:8e:3a:64:6a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=cf02b559-d79f-43d2-814c-4bebc157319d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:a8:40:59:34:4c:04:5f:c2:ee:e9:f0:ca: 21:43:37:c4:54:fd:25:b6:5a:e6:81:64:f1:85:43: 4f:08:78:d4:44:7a:c9:c9:dd:7b:79:9b:b2:01:99: 57:b1:58:26:85:8f:e2:75:04:5c:81:be:8d:81:d1: f9:28:1f:69:cc:c9:61:5c:eb:b3:a4:eb:8e:f2:fd: 45:7f:b1:cf:39:74:6a:7f:f3:b6:e9:98:11:37:0b: e4:a7:c8:0b:81:db:2a:5f:76:24:1a:42:5b:ac:b2: 3b:43:6f:92:2b:25:20:39:01:01:04:62:57:1b:bb: c0:d2:95:55:67:b6:03:c0:da:3d:be:1e:b0:27:c5: f0:02:0a:74:a0:23:66:92:49:9a:98:1b:e6:85:23: 09:04:33:94:d4:c1:76:fb:74:7c:72:bd:da:86:08: 3c:6b:14:d3:55:ea:ba:1f:ff:94:68:b9:7d:5d:9f: 8e:af:0d:e9:68:22:5f:61:65:68:19:2c:d3:b2:f9: 2e:a0:67:33:82:d1:94:89:6a:3b:ef:66:f2:6b:00: 2b:2c:ff:94:bf:4d:a3:e5:ca:d9:94:21:12:66:f3: f5:09:54:e7:b5:12:38:86:b6:95:4e:f0:58:a0:5f: 08:96:74:f5:89:34:1c:0c:43:e0:a2:11:32:2d:62: 41:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FF:55:74:0D:80:9C:E0:8B:07:E9:B9:3B:25:6C:0C:9D:EF:11:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a8:a7:e4:0f:a9:52:05:b6:2d:43:1a:21:42:54:39:f8:91: 0f:c3:a9:d0:df:86:09:ea:9c:8b:dd:09:cb:68:f3:18:26:20: 08:49:4b:3f:fe:3a:c3:24:81:1d:cc:95:7f:28:df:ff:0a:1b: fb:21:ab:21:3d:2f:b5:3d:7e:c9:3f:54:dc:f4:65:19:d1:04: 57:80:48:62:fd:a0:62:b8:58:b6:44:84:fb:cb:e6:5e:58:4f: 3f:18:cd:db:30:d1:d0:e7:5e:b3:b9:c7:f4:f5:a9:3e:22:a0: ff:0d:7d:12:bc:57:c9:9f:5a:89:1d:30:d2:fe:1d:23:25:b3: c0:c3:7f:2e:1a:5b:a0:f3:b0:5d:50:83:31:a2:62:c0:16:0d: ba:73:51:5f:92:fd:4e:dc:e1:e8:20:ae:75:65:cc:69:8b:3e: d2:0d:1d:3b:1f:11:c5:1e:81:65:61:5b:da:55:81:32:dd:d1: e1:b3:cb:0e:51:73:61:b4:72:f4:bb:02:61:30:76:88:75:59: f3:b8:98:54:4a:ba:c4:6a:1b:b4:65:6d:75:2f:de:9c:2d:29: 91:57:3c:72:1e:fe:1c:66:47:26:97:6f:28:98:a9:be:a0:c6: 28:a3:b7:34:0d:7f:b2:83:3c:74:c5:fb:ce:59:92:6b:bf:bd: e4:26:09:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y2/H2G2jjpkav4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2YwMmI1NTktZDc5Zi00M2QyLTgxNGMtNGJlYmMxNTczMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjmoQFk0TARfwu7p8MohQzfEVP0ltlrmgWTx hUNPCHjURHrJyd17eZuyAZlXsVgmhY/idQRcgb6NgdH5KB9pzMlhXOuzpOuO8v1F f7HPOXRqf/O26ZgRNwvkp8gLgdsqX3YkGkJbrLI7Q2+SKyUgOQEBBGJXG7vA0pVV Z7YDwNo9vh6wJ8XwAgp0oCNmkkmamBvmhSMJBDOU1MF2+3R8cr3ahgg8axTTVeq6 H/+UaLl9XZ+Orw3paCJfYWVoGSzTsvkuoGczgtGUiWo772byawArLP+Uv02j5crZ lCESZvP1CVTntRI4hraVTvBYoF8IlnT1iTQcDEPgohEyLWJBWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFr/VXQNgJzgiwfpuTslbAyd7xFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJiYjRhMjctMDAyZi0z ZGYxLTkyZDUtZmUwMDQ5NjgwZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvqKfkD6lSBbYtQxohQlQ5+JEPw6nQ34YJ6pyL3QnLaPMYJiAISUs/ /jrDJIEdzJV/KN//Chv7IashPS+1PX7JP1Tc9GUZ0QRXgEhi/aBiuFi2RIT7y+Ze WE8/GM3bMNHQ516zucf09ak+IqD/DX0SvFfJn1qJHTDS/h0jJbPAw38uGlug87Bd UIMxomLAFg26c1Ffkv1O3OHoIK51Zcxpiz7SDR07HxHFHoFlYVvaVYEy3dHhs8sO UXNhtHL0uwJhMHaIdVnzuJhUSrrEahu0ZW11L96cLSmRVzxyHv4cZkcml28omKm+ oMYoo7c0DX+ygzx0xfvOWZJrv73kJgni -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:10 2025 by rpki-client