$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa File: a6ae0f9e-a617-310b-86bd-7a087197da52.roa (raw, json) Hash identifier: iNGcOyY5GeMcNWnE98F5v4a0/AtSasmXCWpHte8JPJ8= Subject key identifier: 3C:E5:C5:FE:E0:18:4D:07:2E:70:E6:00:A1:60:8D:E5:DE:40:81:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7395C010F515B38BD76FE Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396616 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:39:5c:01:0f:51:5b:38:bd:76:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=49cce51a-ef21-4b89-9250-180e4e1cf5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:cb:b4:1c:1b:e6:96:e6:8d:7b:f7:2f:8a: de:d4:59:ee:83:09:6c:dc:f6:57:a6:0e:8d:2c:92: e7:81:af:0a:8b:83:79:4b:e2:2d:12:39:9e:75:88: 92:bc:e6:4e:fa:a2:bb:1c:5d:50:e5:e9:21:dd:0b: 4b:86:91:82:8c:cf:98:2f:1c:c7:d6:6c:3b:02:83: cc:23:4a:04:a0:e6:10:2d:1b:b0:56:af:90:2d:d0: 8c:e3:32:f3:b8:41:ce:b9:ba:9b:c5:03:3c:42:e0: 70:94:61:7f:71:ca:14:de:64:df:c7:15:cc:b4:19: 3f:28:29:db:42:28:a6:01:18:bb:0d:17:03:3d:e4: b4:79:ab:d3:55:5f:0d:46:af:74:c1:0e:b3:63:25: b5:33:c6:62:ad:04:0d:b5:37:dd:70:b4:94:4b:36: 87:7f:55:2f:f7:a5:64:35:15:1b:36:f2:e9:24:f5: 38:a0:22:e4:6a:a0:5d:eb:04:95:f8:4d:00:80:76: 6b:e6:4d:dd:62:e4:c9:63:3f:2b:f5:50:23:aa:a3: ef:1b:3c:d6:69:7b:2c:1b:21:97:5b:e2:c7:5f:bd: 41:a1:42:b0:25:9f:65:19:c6:e7:51:2e:9b:c6:87: 72:35:49:14:12:55:22:a3:1b:2a:5a:b5:2b:0d:c2: ee:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:C5:FE:E0:18:4D:07:2E:70:E6:00:A1:60:8D:E5:DE:40:81:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6ae0f9e-a617-310b-86bd-7a087197da52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9a:e1:f2:1c:6b:ee:e4:9f:5e:22:2a:da:ad:e1:12:ed:2f: da:e9:83:0c:d8:8b:30:ea:d7:49:60:1f:a9:ea:a9:d0:aa:3c: cb:0f:7b:d8:ed:04:0c:b3:ea:37:61:45:15:89:0d:c9:8e:b3: 4b:c3:41:4c:7a:41:12:d6:dc:0d:f2:21:cc:73:d7:37:f0:36: b5:27:a7:ab:39:0a:7a:ff:a3:46:8e:32:ce:a5:d9:f2:11:e9: 23:cd:e2:23:99:83:dc:d9:eb:1a:a2:d0:e0:4f:5b:cd:f0:d3: 63:d6:86:e7:b2:5d:88:b1:c9:e8:3e:42:71:49:c4:d1:25:ac: a2:ef:29:c9:84:5d:10:a7:4b:38:f9:24:d5:bf:49:83:bc:5f: e3:7b:81:09:ca:94:d6:e5:a9:b9:df:3e:2e:0b:75:d9:23:81: 3f:12:82:74:46:a3:c0:ed:ee:ee:8f:32:e0:12:49:07:1f:fa: 7c:fb:5f:e8:d3:d4:fb:1f:3c:5b:f1:a9:ae:8b:13:88:6a:68: cf:ce:74:a4:6e:96:6e:4b:bb:25:2c:34:64:d4:d8:01:27:5f: 5f:21:c5:41:c0:66:84:2e:6e:db:c1:69:f6:a6:31:01:ba:3f: d1:b2:d4:69:e7:9a:ba:62:1c:c1:99:ac:b7:67:bc:31:90:b8: ee:dc:24:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zlcAQ9RWzi9dv4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDljY2U1MWEtZWYyMS00Yjg5LTkyNTAtMTgwZTRlMWNmNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1XLtBwb5pbmjXv3L4re1Fnugwls3PZXpg6N LJLnga8Ki4N5S+ItEjmedYiSvOZO+qK7HF1Q5ekh3QtLhpGCjM+YLxzH1mw7AoPM I0oEoOYQLRuwVq+QLdCM4zLzuEHOubqbxQM8QuBwlGF/ccoU3mTfxxXMtBk/KCnb QiimARi7DRcDPeS0eavTVV8NRq90wQ6zYyW1M8ZirQQNtTfdcLSUSzaHf1Uv96Vk NRUbNvLpJPU4oCLkaqBd6wSV+E0AgHZr5k3dYuTJYz8r9VAjqqPvGzzWaXssGyGX W+LHX71BoUKwJZ9lGcbnUS6bxodyNUkUElUioxsqWrUrDcLu/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDzlxf7gGE0HLnDmAKFgjeXeQIH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZhZTBmOWUtYTYxNy0z MTBiLTg2YmQtN2EwODcxOTdkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUmuHyHGvu5J9eIirareES7S/a6YMM2Isw6tdJYB+p6qnQqjzLD3vY 7QQMs+o3YUUViQ3JjrNLw0FMekES1twN8iHMc9c38Da1J6erOQp6/6NGjjLOpdny EekjzeIjmYPc2esaotDgT1vN8NNj1obnsl2IscnoPkJxScTRJayi7ynJhF0Qp0s4 +STVv0mDvF/je4EJypTW5am53z4uC3XZI4E/EoJ0RqPA7e7ujzLgEkkHH/p8+1/o 09T7Hzxb8amuixOIamjPznSkbpZuS7slLDRk1NgBJ19fIcVBwGaELm7bwWn2pjEB uj/RstRp55q6YhzBmay3Z7wxkLju3CTQ -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:18 2025 by rpki-client