$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa File: b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa (raw, json) Hash identifier: TUAR2s+wnFQVgdo2dP3ZnicfvuWRL5xejvsqO/+fFmg= Subject key identifier: 1F:84:D4:E8:CC:51:9B:8B:0E:88:37:0D:0C:75:5D:6A:2B:97:56:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E730D35C03B08B39BF16C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396606 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:d3:5c:03:b0:8b:39:bf:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ce443938-3f46-4fc8-b8e8-4f45683d53cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:56:c2:6f:88:82:f1:3c:87:a8:e1:f6:66:06: 36:c8:a4:f8:2f:9b:ac:a7:56:26:63:6d:3e:fc:d5: 52:0d:76:68:79:0c:17:d4:8d:c6:ad:9b:15:82:06: 2d:b7:c5:a0:0d:0e:b8:67:33:c5:d2:0c:e4:f4:3b: 04:10:d9:ba:bb:c2:91:42:80:5c:d0:5c:97:52:b1: d5:2d:e3:f3:b7:d9:9c:61:90:2b:b9:68:be:e3:90: 4b:66:6f:ac:16:0d:a3:1c:71:aa:37:6d:72:40:b0: d7:eb:f8:2d:40:24:5d:15:05:63:01:15:70:13:f3: 5b:e8:f7:05:39:90:d8:77:f3:53:77:7b:0a:9c:db: 4c:c4:95:b8:96:3b:2d:4e:31:8d:24:f8:7d:79:25: 6f:41:b0:23:87:63:e5:83:31:a2:90:a8:5f:bd:c6: a6:73:7e:51:32:5a:ad:e2:21:cb:0c:0c:86:49:f6: 98:c8:52:96:d2:21:8f:96:36:d3:b9:0c:8b:61:b2: f9:6f:a3:1c:af:3a:29:15:b0:ba:1b:f9:46:16:c7: e5:6c:16:b7:d5:d9:58:73:3d:1f:e9:e6:3f:dc:8b: 30:64:77:96:86:9f:aa:4a:3a:18:df:26:67:32:2e: 99:b2:43:e5:82:5c:05:9b:3f:0d:04:ac:c5:34:04: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:D4:E8:CC:51:9B:8B:0E:88:37:0D:0C:75:5D:6A:2B:97:56:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:84:44:59:50:35:d9:d2:c4:76:32:42:b5:da:a4:15:f9:9c: 9d:7a:6d:40:01:9e:c6:f1:2f:eb:1e:8f:fe:11:c7:e1:b3:eb: 57:ec:85:83:b7:99:62:9b:3a:90:51:ff:66:da:eb:0a:38:61: 64:9b:79:d9:ed:9d:da:a3:ea:ed:88:94:65:c5:e5:8f:55:f6: 2b:e3:77:ba:69:82:80:fd:b9:4f:37:25:19:52:6f:96:67:42: 58:3d:19:f7:39:bd:37:55:0f:e8:da:3c:8f:04:65:65:0d:eb: 73:61:40:81:36:1d:98:bf:f6:6e:61:d8:be:2b:cd:3b:17:af: f6:e0:e8:6a:a0:f0:91:9c:2e:33:90:36:2c:09:24:fa:40:3d: 0d:88:09:8d:56:37:e5:d4:42:13:6e:52:e6:be:ec:78:ca:52: 68:2a:df:64:e5:f2:f9:28:fa:59:96:88:8d:49:e4:88:76:d2: 4a:26:e1:68:7b:15:3a:ad:f8:35:d0:c8:6b:1b:40:80:f1:09: ee:82:11:d3:8d:c3:ae:00:c2:2f:02:61:e8:55:fb:91:fd:4d: 25:57:b7:ce:fd:7a:36:bc:00:c8:90:16:29:c1:0d:0c:05:fb: 8c:0f:d2:50:5e:30:e0:7e:ca:61:27:e2:bf:05:a5:70:b3:a0: 21:92:c3:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zDTXAOwizm/FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2U0NDM5MzgtM2Y0Ni00ZmM4LWI4ZTgtNGY0NTY4M2Q1M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FbCb4iC8TyHqOH2ZgY2yKT4L5usp1YmY20+ /NVSDXZoeQwX1I3GrZsVggYtt8WgDQ64ZzPF0gzk9DsEENm6u8KRQoBc0FyXUrHV LePzt9mcYZAruWi+45BLZm+sFg2jHHGqN21yQLDX6/gtQCRdFQVjARVwE/Nb6PcF OZDYd/NTd3sKnNtMxJW4ljstTjGNJPh9eSVvQbAjh2PlgzGikKhfvcamc35RMlqt 4iHLDAyGSfaYyFKW0iGPljbTuQyLYbL5b6McrzopFbC6G/lGFsflbBa31dlYcz0f 6eY/3IswZHeWhp+qSjoY3yZnMi6ZskPlglwFmz8NBKzFNARzaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB+E1OjMUZuLDog3DQx1XWorl1YJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjljMjYyMGQtYWQ3ZC0z ZGY4LTkzNTgtODhiMGNkZjA1ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFhERZUDXZ0sR2MkK12qQV+Zydem1AAZ7G8S/rHo/+Ecfhs+tX7IWD t5limzqQUf9m2usKOGFkm3nZ7Z3ao+rtiJRlxeWPVfYr43e6aYKA/blPNyUZUm+W Z0JYPRn3Ob03VQ/o2jyPBGVlDetzYUCBNh2Yv/ZuYdi+K807F6/24OhqoPCRnC4z kDYsCST6QD0NiAmNVjfl1EITblLmvux4ylJoKt9k5fL5KPpZloiNSeSIdtJKJuFo exU6rfg10MhrG0CA8QnughHTjcOuAMIvAmHoVfuR/U0lV7fO/Xo2vADIkBYpwQ0M BfuMD9JQXjDgfsphJ+K/BaVws6AhksMF -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:21 2025 by rpki-client