$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa File: a88ae204-02d7-3894-948d-7e85b2b229e5.roa (raw, json) Hash identifier: m3Ramvq9qgx1nyobEQIS0C2Dgs4pP7Z8lpdbKNnuohQ= Subject key identifier: FE:84:46:A4:A7:53:2C:D6:2F:91:F0:88:DE:BE:22:53:38:3D:02:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732CDA95C89E0AE1FFBA8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36621 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:cd:a9:5c:89:e0:ae:1f:fb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=3c1650c2-269e-4fc8-9dcb-326bdefcaac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:89:16:70:bf:b0:28:c8:d9:33:08:cd:dc: 2d:1e:cb:29:09:ac:d2:ec:be:5d:79:3f:1e:ff:e6: 53:8b:d0:67:92:79:1c:a3:0c:b8:f3:88:b4:3e:4e: d5:f5:04:01:bf:a4:0a:3c:aa:d4:02:46:30:9f:65: 7b:bd:8a:d8:ab:20:59:16:79:cf:9f:d4:83:5b:ec: 6b:c4:64:c7:8d:45:6a:6c:5e:21:07:f6:04:b7:8b: 84:a9:74:b3:c1:f6:b7:1f:6a:f0:e8:d8:01:2d:c8: de:d1:9d:a6:fc:1f:76:e7:43:b6:21:39:16:87:6a: 7d:fa:d6:bb:3d:8b:d4:c1:1e:88:8f:31:47:ad:ec: 1e:1f:60:23:2d:44:3f:1a:37:59:a1:68:ae:06:ec: dc:e4:e3:6f:9d:dd:1b:00:cc:6c:8e:a0:09:d1:ce: 0c:62:49:7f:f5:48:5e:7f:1d:d4:b9:ea:37:1d:c4: 00:aa:fa:5e:8f:2a:79:d6:a5:71:b9:78:e9:44:9a: 6f:83:1c:46:71:6b:6c:0e:0e:2e:4f:06:89:43:94: c0:a4:d2:56:64:77:e0:16:b9:2d:2e:f0:de:0f:e0: ba:dc:17:0f:a5:ba:3b:70:29:d6:14:8b:54:88:6b: b5:2f:5f:b1:1a:24:de:05:19:ce:36:62:9a:1e:0e: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:46:A4:A7:53:2C:D6:2F:91:F0:88:DE:BE:22:53:38:3D:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4d:9e:53:94:84:6b:f0:1a:ef:7d:a3:a5:a2:01:a9:ab:d0: 64:af:3d:77:ae:d6:bc:6c:52:38:9c:90:53:0f:54:1d:9e:3b: e6:34:52:d7:29:56:01:c5:67:b8:1a:4e:91:f3:21:cc:b9:ce: c7:ee:d7:7f:66:58:4a:23:3a:9c:0c:84:e6:22:4b:16:52:00: 40:32:f9:7a:4e:25:cc:ef:2d:95:18:50:b1:73:d3:26:d5:d6: 19:1a:03:a0:6f:58:14:79:27:4a:3f:5e:ef:f9:a3:e6:dc:d5: c9:3f:85:f2:02:55:84:eb:1b:b1:9d:2c:c6:05:e1:55:52:66: 28:02:99:43:1d:ed:a7:e5:d8:47:b2:d6:eb:29:79:66:9f:57: 45:18:76:69:7b:3d:42:70:41:2d:c4:d1:10:f2:3f:3e:36:61: 89:d1:38:dc:ac:30:bf:8e:10:2b:9a:05:d3:ae:58:12:c1:74: 38:8b:13:32:ae:79:5e:3e:18:c4:d9:f2:c3:02:3b:ef:da:1f: fc:8f:28:3a:36:ce:f0:c1:a0:2a:08:2c:d3:34:9c:52:b8:ff: ea:69:10:3c:e4:9a:b5:7e:64:b2:4d:75:a9:0f:7d:05:96:30: 3a:5e:1f:84:b1:22:e9:19:3e:43:a3:c1:26:97:57:b9:d9:2b: aa:65:9b:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zLNqVyJ4K4f+6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk M2MxNjUwYzItMjY5ZS00ZmM4LTlkY2ItMzI2YmRlZmNhYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX6JFnC/sCjI2TMIzdwtHsspCazS7L5deT8e /+ZTi9Bnknkcowy484i0Pk7V9QQBv6QKPKrUAkYwn2V7vYrYqyBZFnnPn9SDW+xr xGTHjUVqbF4hB/YEt4uEqXSzwfa3H2rw6NgBLcje0Z2m/B9250O2ITkWh2p9+ta7 PYvUwR6IjzFHreweH2AjLUQ/GjdZoWiuBuzc5ONvnd0bAMxsjqAJ0c4MYkl/9Uhe fx3Uueo3HcQAqvpejyp51qVxuXjpRJpvgxxGcWtsDg4uTwaJQ5TApNJWZHfgFrkt LvDeD+C63BcPpbo7cCnWFItUiGu1L1+xGiTeBRnONmKaHg7aJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP6ERqSnUyzWL5HwiN6+IlM4PQJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4YWUyMDQtMDJkNy0z ODk0LTk0OGQtN2U4NWIyYjIyOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArTZ5TlIRr8BrvfaOlogGpq9Bkrz13rta8bFI4nJBTD1QdnjvmNFLX KVYBxWe4Gk6R8yHMuc7H7td/ZlhKIzqcDITmIksWUgBAMvl6TiXM7y2VGFCxc9Mm 1dYZGgOgb1gUeSdKP17v+aPm3NXJP4XyAlWE6xuxnSzGBeFVUmYoAplDHe2n5dhH stbrKXlmn1dFGHZpez1CcEEtxNEQ8j8+NmGJ0TjcrDC/jhArmgXTrlgSwXQ4ixMy rnlePhjE2fLDAjvv2h/8jyg6Ns7wwaAqCCzTNJxSuP/qaRA85Jq1fmSyTXWpD30F ljA6Xh+EsSLpGT5Do8Eml1e52SuqZZus -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:51 2025 by rpki-client