$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa File: d2eb248e-d864-39df-ad59-05847a5e4be4.roa (raw, json) Hash identifier: xGLGTd5eS3TV1suzySF5dIxda/OsYVJGyJcEdPx5Eus= Subject key identifier: A2:16:DA:6E:37:9A:F1:2E:8F:2C:73:7B:33:2D:1C:A6:48:72:08:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E738C7836990D532223F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 32651 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:38:c7:83:69:90:d5:32:22:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=f0a15a92-9e05-4217-8b3b-f4421a0b4002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:e0:a4:f8:65:fb:f8:2a:d3:3f:13:e9:3b: a0:76:38:0f:97:b1:56:31:2d:02:cf:83:df:6a:b8: 43:c8:bb:93:0b:0e:21:36:f2:00:be:d1:8a:ec:08: 59:16:0d:be:2b:59:18:08:e7:5c:0d:bc:3b:12:13: 35:e7:b4:e7:7d:ab:60:95:23:d7:a5:83:4e:dc:79: 48:c9:5b:99:67:2f:6f:10:7d:a5:f4:fe:b2:bb:1e: 92:7f:ef:ce:b7:a6:e4:2f:20:0d:8f:d7:6d:9f:76: 01:69:3c:de:a3:30:0f:2c:8e:d4:14:01:ef:f7:32: c8:b8:9f:2d:69:93:0a:73:93:b9:32:43:00:d3:44: 85:6b:7a:17:72:24:32:d0:7b:9c:40:8f:f3:36:d3: b4:c3:56:92:01:f5:df:6c:6c:1b:fd:db:18:67:ff: 7a:7e:9b:d0:95:e9:46:bd:e5:aa:f2:3a:28:3d:79: b2:46:3d:81:bf:39:40:46:e9:db:86:31:f9:06:d1: 87:d4:76:92:b9:a4:ba:5f:33:9e:ba:6a:44:8a:87: cb:1f:f3:ec:4c:0c:1e:28:78:d5:dd:35:b1:c1:c1: 87:ff:3b:eb:fa:6d:3a:74:7d:63:cb:cb:db:16:eb: 39:28:7e:0f:e4:9c:3b:71:a6:b0:1b:4b:97:ae:dc: 12:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:DA:6E:37:9A:F1:2E:8F:2C:73:7B:33:2D:1C:A6:48:72:08:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bd:f7:0f:8b:54:61:97:e4:eb:a9:6f:d2:95:c7:d3:a7:4a: 97:b9:3c:7c:dc:ad:82:5a:c3:83:df:64:7a:d5:23:70:cd:e5: 1d:78:b2:c4:4d:4e:5f:7d:58:29:81:55:9e:0f:fa:4e:de:a7: f8:0d:5a:00:68:5d:b9:4a:cd:3a:00:a7:d0:4b:6e:a3:9e:97: c9:52:b2:8c:f3:e8:4a:4e:05:c2:07:39:e2:fa:44:bf:a5:99: a8:e8:38:54:48:bb:85:13:6f:9f:3f:c4:4a:6d:85:fa:e9:c5: ed:90:67:9b:e8:6a:aa:a2:a6:5b:00:03:a9:58:30:0d:f8:d9: 12:37:92:13:db:58:62:fc:a0:75:73:d9:c2:72:66:ac:c7:87: 31:a2:01:1a:b5:29:7b:a9:b7:61:5e:ae:27:9f:78:8a:33:8f: 02:40:79:43:bc:53:3c:1c:a2:43:f3:eb:89:aa:f2:10:28:d0: 88:87:a0:3f:0e:49:cc:9c:30:4a:d8:94:bb:e2:fd:4d:ec:b3: 89:70:0b:e9:bb:71:6a:31:70:9d:10:3a:26:75:87:d7:fd:35: d2:d6:5a:dd:11:86:c7:8e:e4:cc:53:3e:cf:c1:4a:09:60:c4: 4e:9a:d2:1d:9a:19:e3:0f:5f:a1:b9:f7:28:dd:94:f6:60:43: d9:af:20:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zjHg2mQ1TIiP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjBhMTVhOTItOWUwNS00MjE3LThiM2ItZjQ0MjFhMGI0MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifPgpPhl+/gq0z8T6TugdjgPl7FWMS0Cz4Pf arhDyLuTCw4hNvIAvtGK7AhZFg2+K1kYCOdcDbw7EhM157TnfatglSPXpYNO3HlI yVuZZy9vEH2l9P6yux6Sf+/Ot6bkLyANj9dtn3YBaTzeozAPLI7UFAHv9zLIuJ8t aZMKc5O5MkMA00SFa3oXciQy0HucQI/zNtO0w1aSAfXfbGwb/dsYZ/96fpvQlelG veWq8jooPXmyRj2BvzlARunbhjH5BtGH1HaSuaS6XzOeumpEiofLH/PsTAweKHjV 3TWxwcGH/zvr+m06dH1jy8vbFus5KH4P5Jw7caawG0uXrtwShQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKIW2m43mvEujyxzezMtHKZIcgiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJlYjI0OGUtZDg2NC0z OWRmLWFkNTktMDU4NDdhNWU0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3vfcPi1Rhl+TrqW/SlcfTp0qXuTx83K2CWsOD32R61SNwzeUdeLLE TU5ffVgpgVWeD/pO3qf4DVoAaF25Ss06AKfQS26jnpfJUrKM8+hKTgXCBzni+kS/ pZmo6DhUSLuFE2+fP8RKbYX66cXtkGeb6GqqoqZbAAOpWDAN+NkSN5IT21hi/KB1 c9nCcmasx4cxogEatSl7qbdhXq4nn3iKM48CQHlDvFM8HKJD8+uJqvIQKNCIh6A/ DknMnDBK2JS74v1N7LOJcAvpu3FqMXCdEDomdYfX/TXS1lrdEYbHjuTMUz7PwUoJ YMROmtIdmhnjD1+hufco3ZT2YEPZryDQ -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:59 2025 by rpki-client