$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa File: deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa (raw, json) Hash identifier: cfEwXs6e+sbSOEIOeXskA1oGVbGFImU2oJsLRXYVAQs= Subject key identifier: 08:93:58:02:1C:72:BB:1A:79:70:B8:D3:9A:4A:BB:26:D8:93:3C:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72ED904640B08C3B6B3D8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396567 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:d9:04:64:0b:08:c3:b6:b3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=70aab6b7-4d5e-43cc-9420-0fa6544e4441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:03:71:d7:43:b7:b0:96:98:e4:3e:2a:65:80: c0:ba:c8:15:81:d1:0c:04:01:17:3e:b8:5b:8b:1a: c3:4e:f9:ed:ce:d4:5f:2a:be:fa:a3:c6:d1:6f:9e: 7d:8e:1b:d3:08:f2:14:d8:e8:16:85:fd:ad:33:98: bf:8a:3a:04:0e:df:56:d3:37:e0:45:ee:76:f5:5c: 5a:a5:f5:42:55:56:67:d5:be:f4:63:11:fb:7b:ee: 18:bc:9f:51:e6:ff:e0:b2:aa:6f:fd:0e:8e:14:0a: 85:f0:f1:19:b3:3f:fe:a0:e4:8b:cb:ac:8a:07:cf: 5a:e8:13:1a:2f:94:76:1f:11:15:8c:b7:25:48:8c: 23:6a:52:bb:04:3f:c5:d0:07:4d:33:83:62:59:22: ca:a0:50:2b:d6:22:93:d8:2a:3f:1a:9b:24:f5:a0: ab:c2:d0:4b:ca:69:fc:21:7d:95:4e:98:19:6c:98: 5e:4a:f2:ee:cb:3e:d0:87:55:7c:de:93:1e:ae:1f: 70:01:95:ff:ca:d7:5c:39:6e:e4:2e:4b:46:e0:48: 4e:6f:9b:4b:40:f5:74:3c:c0:f0:a5:bc:49:b0:fc: 40:9f:82:f8:4a:bb:30:7a:2d:bd:13:cf:49:14:3b: 93:90:ba:3e:8c:1d:44:1d:5b:d2:13:ac:10:91:64: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:93:58:02:1C:72:BB:1A:79:70:B8:D3:9A:4A:BB:26:D8:93:3C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/deeb7e7d-a984-38ec-a6a0-6087a24b4c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:eb:fb:09:76:01:1d:72:78:ed:cc:29:54:2f:55:ab:42:42: e8:4d:90:f3:a7:bd:9c:d1:92:79:07:72:2c:48:e2:11:21:65: 5b:e9:d1:f4:2d:3b:c1:12:a0:41:48:69:df:6d:ec:16:ad:02: a9:f0:41:81:ed:7e:c1:f7:55:73:61:aa:03:03:cb:9c:a1:7d: e4:07:ee:5e:13:dc:37:43:9f:dc:b8:02:75:17:0d:10:b4:d6: b4:16:22:e9:a1:3d:c1:e6:a8:ca:db:e4:47:d6:40:3b:fd:08: 25:52:f1:7e:b5:68:04:93:76:7d:36:1e:c6:7a:c4:aa:3d:cc: 82:7b:c3:a4:0f:1d:77:03:60:49:e5:77:27:57:a4:d5:d9:94: 3d:35:99:b9:ef:67:3d:94:78:28:8f:38:db:f5:c2:58:94:6e: 1b:b9:82:15:c3:74:99:c3:bb:51:d7:f4:d1:a9:5b:5d:fc:1d: dd:af:ac:34:3e:fc:a3:39:7c:3a:92:41:7a:bd:32:58:ee:5f: 9a:e8:60:09:1b:06:f7:f2:7e:87:43:b2:7d:df:c5:fa:cf:01: 73:d7:77:a9:a3:d4:8e:b0:b5:f6:ee:26:6b:7c:7b:f8:09:a2: ff:79:fb:b9:6d:95:37:c7:1b:7d:fc:a3:a0:a5:e3:8c:3c:03: 81:05:10:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y7ZBGQLCMO2s9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NzBhYWI2YjctNGQ1ZS00M2NjLTk0MjAtMGZhNjU0NGU0NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogNx10O3sJaY5D4qZYDAusgVgdEMBAEXPrhb ixrDTvntztRfKr76o8bRb559jhvTCPIU2OgWhf2tM5i/ijoEDt9W0zfgRe529Vxa pfVCVVZn1b70YxH7e+4YvJ9R5v/gsqpv/Q6OFAqF8PEZsz/+oOSLy6yKB89a6BMa L5R2HxEVjLclSIwjalK7BD/F0AdNM4NiWSLKoFAr1iKT2Co/Gpsk9aCrwtBLymn8 IX2VTpgZbJheSvLuyz7Qh1V83pMerh9wAZX/ytdcOW7kLktG4EhOb5tLQPV0PMDw pbxJsPxAn4L4Srswei29E89JFDuTkLo+jB1EHVvSE6wQkWRuzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAiTWAIccrsaeXC405pKuybYkzxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVlYjdlN2QtYTk4NC0z OGVjLWE2YTAtNjA4N2EyNGI0YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBk6/sJdgEdcnjtzClUL1WrQkLoTZDzp72c0ZJ5B3IsSOIRIWVb6dH0 LTvBEqBBSGnfbewWrQKp8EGB7X7B91VzYaoDA8ucoX3kB+5eE9w3Q5/cuAJ1Fw0Q tNa0FiLpoT3B5qjK2+RH1kA7/QglUvF+tWgEk3Z9Nh7GesSqPcyCe8OkDx13A2BJ 5XcnV6TV2ZQ9NZm572c9lHgojzjb9cJYlG4buYIVw3SZw7tR1/TRqVtd/B3dr6w0 PvyjOXw6kkF6vTJY7l+a6GAJGwb38n6HQ7J938X6zwFz13epo9SOsLX27iZrfHv4 CaL/efu5bZU3xxt9/KOgpeOMPAOBBRBG -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:12 2025 by rpki-client