$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa File: cf88fa62-e643-34be-8af3-3968ec0754dc.roa (raw, json) Hash identifier: qgg5sdv76FMCxJ1idQbmc4z+JM763mFUn4uanmFPLdU= Subject key identifier: DD:2A:B8:36:6D:73:10:5D:27:A8:DB:0B:A6:A6:53:81:AB:56:5B:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E735F09012E686AA2A8D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397193 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:35:f0:90:12:e6:86:aa:2a:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=3b65cf2b-314c-4793-8ac5-16b33b1aabaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6d:fd:02:a9:dd:89:c7:e3:b5:d2:94:1b:c2: 71:0d:1e:89:91:cf:1b:b5:0c:de:ed:20:20:64:7b: 74:09:e0:ac:66:60:fe:1f:d9:68:6b:88:cc:74:0b: 3e:9a:42:cc:d7:16:2b:72:37:7d:bd:7a:ce:ac:bc: d4:a8:90:d9:e1:81:fc:be:98:ad:35:66:88:55:d0: f1:b1:5b:c1:42:80:a1:06:a0:9d:52:4b:e5:4e:d7: bb:84:a9:e5:8e:38:3d:80:7d:b2:b2:b6:6f:b1:f7: 19:1a:c4:f5:89:64:84:fb:a3:aa:1c:ad:e5:8f:fe: 3c:47:56:14:1c:46:5c:80:7b:6a:a8:e7:69:aa:97: 44:4f:48:ff:6d:52:84:5a:67:71:52:df:3a:71:a8: a5:91:91:6b:77:0f:eb:48:da:ad:a8:6b:f4:14:bd: 42:73:24:2d:60:17:09:c8:44:46:96:5e:36:a5:47: d0:53:70:00:35:11:34:f5:f7:91:f1:e4:1d:7c:dd: 20:8e:96:7a:c7:74:c1:6f:07:de:42:af:15:16:98: 60:d0:98:71:d8:37:93:4b:46:90:da:e3:66:6a:f6: b6:5b:63:83:67:a6:8c:7b:06:42:23:63:37:b6:62: 57:5c:b6:f3:48:c2:b6:f3:9b:89:b1:1b:0a:ba:4b: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:B8:36:6D:73:10:5D:27:A8:DB:0B:A6:A6:53:81:AB:56:5B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf88fa62-e643-34be-8af3-3968ec0754dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:23:bf:55:83:89:a6:8d:83:62:43:32:a6:8d:8e:d9:c9:87: e6:4e:32:08:b6:72:74:b9:7e:34:d7:fe:b5:76:66:6d:78:2e: 2a:a0:56:6f:35:47:d7:52:0c:47:9a:4b:1e:c1:c4:e0:2f:1a: c1:f2:df:82:59:4e:29:b3:4b:9f:14:f1:b2:32:8d:24:26:e4: 81:26:dc:4c:09:fd:9a:8d:71:cc:fd:1a:bc:a2:55:8c:47:b3: 13:30:a0:20:0f:c0:92:53:5b:43:6c:0f:6d:6a:92:69:6e:7f: b6:d9:6b:0e:24:0c:e1:9b:2f:57:b6:a1:a3:d0:b4:00:67:3a: 46:2a:75:d9:84:2d:59:df:c6:26:60:1e:a1:30:c9:4a:43:67: 76:ab:de:4d:ac:0a:af:22:79:c9:77:d9:e9:3e:23:d5:34:6b: ca:82:e5:93:c8:7f:de:a6:58:91:7f:0f:03:4b:f3:4c:71:80: 47:8a:e1:24:7b:c7:fc:8d:6e:8f:f2:f9:2b:47:5a:fa:1d:50: 08:38:71:54:a1:2d:d2:e1:9d:88:46:d5:fd:f8:3d:13:3a:d6: 03:c5:51:fe:09:cd:5a:b0:fd:e3:48:c0:af:a8:d0:53:b6:19: 6f:92:03:4a:a2:85:6e:11:ad:42:77:f6:3a:09:92:e0:11:4b: b8:61:95:cb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zXwkBLmhqoqjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk M2I2NWNmMmItMzE0Yy00NzkzLThhYzUtMTZiMzNiMWFhYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6239AqndicfjtdKUG8JxDR6Jkc8btQze7SAg ZHt0CeCsZmD+H9loa4jMdAs+mkLM1xYrcjd9vXrOrLzUqJDZ4YH8vpitNWaIVdDx sVvBQoChBqCdUkvlTte7hKnljjg9gH2ysrZvsfcZGsT1iWSE+6OqHK3lj/48R1YU HEZcgHtqqOdpqpdET0j/bVKEWmdxUt86cailkZFrdw/rSNqtqGv0FL1CcyQtYBcJ yERGll42pUfQU3AANRE09feR8eQdfN0gjpZ6x3TBbwfeQq8VFphg0Jhx2DeTS0aQ 2uNmava2W2ODZ6aMewZCI2M3tmJXXLbzSMK285uJsRsKuksmgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN0quDZtcxBdJ6jbC6amU4GrVlsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y4OGZhNjItZTY0My0z NGJlLThhZjMtMzk2OGVjMDc1NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYI79Vg4mmjYNiQzKmjY7ZyYfmTjIItnJ0uX401/61dmZteC4qoFZv NUfXUgxHmksewcTgLxrB8t+CWU4ps0ufFPGyMo0kJuSBJtxMCf2ajXHM/Rq8olWM R7MTMKAgD8CSU1tDbA9tapJpbn+22WsOJAzhmy9XtqGj0LQAZzpGKnXZhC1Z38Ym YB6hMMlKQ2d2q95NrAqvInnJd9npPiPVNGvKguWTyH/epliRfw8DS/NMcYBHiuEk e8f8jW6P8vkrR1r6HVAIOHFUoS3S4Z2IRtX9+D0TOtYDxVH+Cc1asP3jSMCvqNBT thlvkgNKooVuEa1Cd/Y6CZLgEUu4YZXL -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:51 2025 by rpki-client