$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3e10d02-d035-3461-b8cd-ae2aecb46845.roa File: c3e10d02-d035-3461-b8cd-ae2aecb46845.roa (raw, json) Hash identifier: Bh2PFFoJ84gUFU4dhIS7LsBYhfB8mccNOGyquhdwN/s= Subject key identifier: 86:43:BD:AB:7A:CE:42:4A:2D:48:EC:14:3E:DA:A5:50:E6:48:37:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB209CEEBF27884CB4300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3e10d02-d035-3461-b8cd-ae2aecb46845.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397206 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:09:ce:eb:f2:78:84:cb:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=84c4b519-fd99-473b-8d16-c8f325882a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:8f:5b:97:d8:1e:57:2a:01:4f:54:b4:71: a3:83:6b:5f:ac:bc:89:bb:05:ef:34:0e:1d:d4:8e: 95:5c:e9:07:08:f5:40:19:24:74:3e:ad:99:9b:fb: e9:88:4d:f9:dd:4d:c7:d4:b5:97:9a:1b:7c:ea:66: 98:a2:13:91:9a:6d:e5:86:ff:74:24:8e:fa:c7:37: 84:fd:be:55:a4:b3:f4:29:29:20:cf:e2:55:c8:2c: 94:55:dc:8f:eb:9d:a1:ff:6b:b0:6d:cb:05:c4:7b: e9:67:9a:8f:14:20:78:22:81:d2:cf:bf:54:96:3a: 40:9f:fb:13:fe:85:83:92:4f:5b:d0:13:5b:77:ad: 4e:c0:06:80:a3:d7:1d:90:51:9a:05:8b:f7:4e:2d: a4:39:8e:ee:ad:54:33:86:d3:61:c2:2d:61:47:06: 4b:d2:9b:89:f2:e3:07:85:5b:da:3d:fa:b0:52:21: 0a:a4:eb:c4:1f:6f:76:72:33:b6:b4:eb:63:3c:17: 85:be:89:d2:15:86:b3:e8:7a:fa:34:e2:4b:4d:61: cb:1e:ce:08:f8:b4:ba:65:93:37:dc:7f:b9:e8:83: be:b6:ad:bb:fe:e0:1c:64:e1:bd:26:d6:b3:82:34: a7:b9:8f:97:a7:75:a1:cb:87:6c:29:1f:82:f1:20: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:BD:AB:7A:CE:42:4A:2D:48:EC:14:3E:DA:A5:50:E6:48:37:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3e10d02-d035-3461-b8cd-ae2aecb46845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:3c:f2:48:25:ad:07:46:e7:ec:74:44:0a:e3:fb:02:60:3e: 76:e1:d7:92:de:82:7d:09:d9:00:cd:95:3a:38:6c:39:49:1a: b0:d2:8c:af:35:77:bd:ea:bf:13:c5:a1:46:ea:08:29:f5:a5: b3:38:b6:f5:85:18:77:f6:d6:aa:d0:bd:c2:36:d3:90:c9:7c: 7e:a8:35:7d:19:28:e9:1a:67:0e:a5:27:2c:70:83:7b:0e:37: a3:df:ef:aa:da:47:d2:32:50:40:ca:8b:7a:99:1d:7a:57:be: a2:0c:4f:8e:40:4a:3f:92:df:66:30:1c:ef:e6:bb:05:d9:bf: 02:cf:4b:c8:b8:31:b0:83:88:ce:81:c0:70:ea:74:05:fd:f8: 32:67:e4:e6:d2:1b:65:30:03:8c:16:33:c5:31:47:5b:78:7f: 99:b7:6d:eb:d3:68:d6:1b:3d:0b:ca:77:71:6e:53:04:c7:76: 50:70:dc:d7:72:3c:ab:51:c4:3f:17:39:c9:78:b9:6a:73:f9: 45:af:e5:1f:e1:ab:c4:15:0e:ce:f9:98:1a:b0:d9:a2:7a:d6: 6a:e3:0f:79:a4:f8:5a:1d:57:34:e6:1f:4b:20:b4:9b:b5:2c: bd:cf:94:13:e1:b3:41:ce:d6:d7:57:27:5e:c5:35:69:45:68: f8:9e:e2:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLIJzuvyeITLQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODRjNGI1MTktZmQ5OS00NzNiLThkMTYtYzhmMzI1ODgyYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQOPW5fYHlcqAU9UtHGjg2tfrLyJuwXvNA4d 1I6VXOkHCPVAGSR0Pq2Zm/vpiE353U3H1LWXmht86maYohORmm3lhv90JI76xzeE /b5VpLP0KSkgz+JVyCyUVdyP652h/2uwbcsFxHvpZ5qPFCB4IoHSz79UljpAn/sT /oWDkk9b0BNbd61OwAaAo9cdkFGaBYv3Ti2kOY7urVQzhtNhwi1hRwZL0puJ8uMH hVvaPfqwUiEKpOvEH292cjO2tOtjPBeFvonSFYaz6Hr6NOJLTWHLHs4I+LS6ZZM3 3H+56IO+tq27/uAcZOG9JtazgjSnuY+Xp3Why4dsKR+C8SAIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZDvat6zkJKLUjsFD7apVDmSDetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzNlMTBkMDItZDAzNS0z NDYxLWI4Y2QtYWUyYWVjYjQ2ODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU88kglrQdG5+x0RArj+wJgPnbh15Legn0J2QDNlTo4bDlJGrDSjK81 d73qvxPFoUbqCCn1pbM4tvWFGHf21qrQvcI205DJfH6oNX0ZKOkaZw6lJyxwg3sO N6Pf76raR9IyUEDKi3qZHXpXvqIMT45ASj+S32YwHO/muwXZvwLPS8i4MbCDiM6B wHDqdAX9+DJn5ObSG2UwA4wWM8UxR1t4f5m3bevTaNYbPQvKd3FuUwTHdlBw3Ndy PKtRxD8XOcl4uWpz+UWv5R/hq8QVDs75mBqw2aJ61mrjD3mk+FodVzTmH0sgtJu1 LL3PlBPhs0HO1tdXJ17FNWlFaPie4jQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:45 2025 by rpki-client