$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa File: c3877f0a-c649-355e-b669-96633b8e090d.roa (raw, json) Hash identifier: 4PSY9u5lu3dKRWTQM3GuxdRJ7GYo7ojdK4lRSX2cpns= Subject key identifier: 52:0E:56:8A:6D:08:A6:6A:B2:50:DB:51:D8:44:F0:62:06:A7:7B:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E734E887677D6D4D3E4240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396599 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:34:e8:87:67:7d:6d:4d:3e:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=93745f2a-7475-4d68-a532-58c9d6a383b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:45:01:9a:a5:e0:54:45:48:f2:58:34:00: 67:9c:cc:f3:53:f3:1c:97:7c:19:08:8c:c3:40:6a: 30:e6:7d:41:a3:56:ae:b2:88:6d:d0:97:76:16:47: 9e:6b:b8:48:67:08:d5:b0:4d:94:95:4b:73:92:13: 2a:d7:bf:91:a1:55:54:fa:37:ce:51:34:46:68:bb: 65:2d:6b:2d:0c:fa:a5:43:9a:55:ef:06:5a:47:7a: 43:d2:1a:00:48:7e:18:38:19:bc:5a:79:1d:b2:81: 07:cc:0f:00:70:51:1c:e2:fc:21:a7:aa:0b:26:1a: 1f:af:1a:a4:c7:e3:1a:5a:ee:cf:a1:19:75:60:76: bb:4e:f4:82:4d:86:1b:69:b6:26:4c:36:03:e7:9a: af:27:f4:10:e9:da:c5:b2:32:22:87:a7:f4:e6:de: d8:a4:08:6f:2c:e9:9e:20:c0:db:a5:9c:66:65:0b: c4:dd:22:57:09:12:d3:d6:44:fb:e5:5f:12:3b:33: 2b:91:03:1e:93:2e:31:42:9e:47:80:1e:0e:58:85: 07:a9:af:6b:df:05:76:47:93:4a:6f:61:78:30:bb: 4f:f0:df:73:41:52:d9:e5:26:58:71:54:8e:cc:29: 28:0f:f5:e5:dd:54:5f:12:22:26:25:4a:e6:0d:21: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0E:56:8A:6D:08:A6:6A:B2:50:DB:51:D8:44:F0:62:06:A7:7B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3877f0a-c649-355e-b669-96633b8e090d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a8:dd:33:7a:31:4a:ce:00:84:8e:db:9f:5b:ad:bd:85:73: 22:30:d7:f9:4b:87:17:0d:90:2a:0f:4e:4e:65:14:31:cc:69: 44:dd:a0:35:f7:13:14:0b:13:49:c0:fa:ed:40:8c:27:97:4b: f5:76:c5:72:52:7d:62:b5:2d:68:7c:ce:5f:ff:ae:83:54:92: c6:55:85:77:89:d0:a7:17:6b:57:b0:0f:b8:e1:b2:9f:46:e5: 97:1b:ce:48:4d:04:6c:fb:15:e1:61:d8:54:2f:4f:68:47:46: f4:5f:07:df:de:00:19:05:ed:d1:be:bf:20:89:e6:a1:d3:a7: cf:7a:3c:1a:31:bf:16:86:6d:f2:9c:b6:26:58:ea:83:17:43: a9:8a:11:1a:da:d1:70:37:d9:f2:82:26:77:9b:8e:7d:78:a5: 83:ce:10:be:cb:27:f2:e1:dc:43:5f:ff:9e:41:a4:f6:09:3a: 79:e9:64:ca:d1:a9:a0:1b:3e:61:8d:92:b3:48:3e:20:54:2c: cb:f5:5c:01:0e:0c:e2:b0:77:6a:72:6d:aa:47:61:a7:6b:5e: 17:3a:77:75:55:8b:60:dc:2d:47:f0:43:09:d9:73:cc:b3:d0: 45:98:e8:dc:e0:bf:7a:b3:29:a3:94:4f:76:12:5c:a6:99:26: b0:99:c6:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zToh2d9bU0+QkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OTM3NDVmMmEtNzQ3NS00ZDY4LWE1MzItNThjOWQ2YTM4M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFZFAZql4FRFSPJYNABnnMzzU/Mcl3wZCIzD QGow5n1Bo1ausoht0Jd2Fkeea7hIZwjVsE2UlUtzkhMq17+RoVVU+jfOUTRGaLtl LWstDPqlQ5pV7wZaR3pD0hoASH4YOBm8WnkdsoEHzA8AcFEc4vwhp6oLJhofrxqk x+MaWu7PoRl1YHa7TvSCTYYbabYmTDYD55qvJ/QQ6drFsjIih6f05t7YpAhvLOme IMDbpZxmZQvE3SJXCRLT1kT75V8SOzMrkQMeky4xQp5HgB4OWIUHqa9r3wV2R5NK b2F4MLtP8N9zQVLZ5SZYcVSOzCkoD/Xl3VRfEiImJUrmDSEUIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFIOVoptCKZqslDbUdhE8GIGp3uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM4NzdmMGEtYzY0OS0z NTVlLWI2NjktOTY2MzNiOGUwOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDqN0zejFKzgCEjtufW629hXMiMNf5S4cXDZAqD05OZRQxzGlE3aA1 9xMUCxNJwPrtQIwnl0v1dsVyUn1itS1ofM5f/66DVJLGVYV3idCnF2tXsA+44bKf RuWXG85ITQRs+xXhYdhUL09oR0b0Xwff3gAZBe3Rvr8gieah06fPejwaMb8Whm3y nLYmWOqDF0OpihEa2tFwN9nygiZ3m459eKWDzhC+yyfy4dxDX/+eQaT2CTp56WTK 0amgGz5hjZKzSD4gVCzL9VwBDgzisHdqcm2qR2Gna14XOnd1VYtg3C1H8EMJ2XPM s9BFmOjc4L96symjlE92ElymmSawmcYK -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:51 2025 by rpki-client