$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa File: c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa (raw, json) Hash identifier: xOVeKdjeF/KZ73FBorhnPpwarABAGsDWbI+F+B/Ksos= Subject key identifier: 89:58:3A:36:6F:3C:DA:01:FB:C9:73:A4:C3:4A:D6:1C:FF:F7:F8:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E734340A969EDC0908F480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36632 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:34:34:0a:96:9e:dc:09:08:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ab3ae622-0ec4-40af-b4f7-0f07c513e3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:59:8f:3e:f8:04:74:b0:5f:16:da:45:49:e3: f9:4b:e6:db:ad:34:02:15:57:9d:f1:a3:01:4c:cf: ca:cb:d8:d5:fa:c5:f4:71:64:52:a0:12:c2:61:eb: bc:b1:ea:84:a1:53:23:43:d6:27:91:1e:30:c4:3e: 2d:49:9f:2e:36:a0:61:eb:bb:a8:a6:7a:87:07:2c: 43:dd:12:31:9e:45:75:7b:9e:e0:a2:0f:ed:00:8e: ef:9d:bd:da:7a:8c:50:11:72:4b:1b:b0:a9:53:22: 90:93:08:f0:29:2c:ca:9f:10:f2:1c:95:e0:02:d9: af:11:3e:61:22:a0:23:74:aa:af:5d:55:e8:14:6a: 8a:18:5e:c9:ed:19:2d:58:63:74:2b:4b:54:0e:8d: 25:91:98:6a:1d:ad:1d:18:d7:5b:f2:36:54:64:86: 6b:34:53:5b:cf:92:4d:15:9e:ce:da:a1:22:62:b4: fb:5b:70:cb:8b:de:68:ef:e0:e7:8d:e1:1e:f2:6c: 55:56:14:a0:53:d0:f6:31:13:ba:bc:f2:e1:65:b7: f6:a0:4b:16:43:8e:42:c0:77:ac:c9:29:5d:45:48: a4:ac:45:72:17:46:ae:e0:5f:62:52:8e:2e:7b:91: a0:20:31:f7:d0:f9:d1:07:7b:2e:d1:e4:0e:a0:1d: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:3A:36:6F:3C:DA:01:FB:C9:73:A4:C3:4A:D6:1C:FF:F7:F8:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5f:07:a3:3f:e8:9c:50:54:41:ee:bf:0c:0b:90:50:4d:f6: aa:cd:c5:5e:3e:80:79:44:3f:1a:07:f0:c8:ca:d3:d8:f3:43: fa:e1:8b:d1:d6:0f:7f:22:42:d9:58:45:8f:91:dc:1f:53:11: cb:0b:d1:26:63:10:44:b2:6f:6d:3f:9a:94:ad:f9:23:36:48: 0d:da:da:fb:dc:09:66:ed:4d:07:72:f4:4b:26:60:4f:20:44: 1e:40:c4:07:d6:f0:2e:15:11:c0:f6:c0:1c:99:b0:e4:4b:26: 78:c3:b3:cb:80:07:10:ab:f9:99:d6:d3:9e:ba:f9:0a:72:cb: 18:cf:a8:f4:e2:e2:5c:4a:17:e7:68:ee:a7:1c:0c:f0:34:a7: c0:05:4c:81:b4:a9:f4:3b:bb:57:94:cc:57:8a:22:35:6c:06: 24:b3:0c:40:f7:d6:7b:c8:8e:b1:77:a0:8b:4a:16:3c:2f:08: 92:9d:31:8d:4c:1d:ce:1d:59:34:de:69:1b:7b:8e:97:70:ca: 08:37:71:32:7b:fe:97:68:2b:4e:d5:83:71:ac:2f:47:9b:6a: 49:1f:49:f2:07:a3:0a:94:a6:90:59:fb:1a:7d:70:e4:2d:4b: 82:5a:e2:c5:41:25:06:e2:fc:5c:71:e6:96:24:61:1f:53:e6: af:77:25:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zQ0Cpae3AkI9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWIzYWU2MjItMGVjNC00MGFmLWI0ZjctMGYwN2M1MTNlM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VmPPvgEdLBfFtpFSeP5S+bbrTQCFVed8aMB TM/Ky9jV+sX0cWRSoBLCYeu8seqEoVMjQ9YnkR4wxD4tSZ8uNqBh67uopnqHByxD 3RIxnkV1e57gog/tAI7vnb3aeoxQEXJLG7CpUyKQkwjwKSzKnxDyHJXgAtmvET5h IqAjdKqvXVXoFGqKGF7J7RktWGN0K0tUDo0lkZhqHa0dGNdb8jZUZIZrNFNbz5JN FZ7O2qEiYrT7W3DLi95o7+DnjeEe8mxVVhSgU9D2MRO6vPLhZbf2oEsWQ45CwHes ySldRUikrEVyF0au4F9iUo4ue5GgIDH30PnRB3su0eQOoB1gowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIlYOjZvPNoB+8lzpMNK1hz/9/idMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJjN2E3NDEtMDQyMy0z YjlkLTk3NjktYTFmODBkZTJmOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8XwejP+icUFRB7r8MC5BQTfaqzcVePoB5RD8aB/DIytPY80P64YvR 1g9/IkLZWEWPkdwfUxHLC9EmYxBEsm9tP5qUrfkjNkgN2tr73Alm7U0HcvRLJmBP IEQeQMQH1vAuFRHA9sAcmbDkSyZ4w7PLgAcQq/mZ1tOeuvkKcssYz6j04uJcShfn aO6nHAzwNKfABUyBtKn0O7tXlMxXiiI1bAYkswxA99Z7yI6xd6CLShY8LwiSnTGN TB3OHVk03mkbe46XcMoIN3Eye/6XaCtO1YNxrC9Hm2pJH0nyB6MKlKaQWfsafXDk LUuCWuLFQSUG4vxcceaWJGEfU+avdyXH -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:13 2025 by rpki-client