$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa File: ea634f65-8078-3511-abbf-238bf529bd3a.roa (raw, json) Hash identifier: GwYP4Vydxb2lHGgrLBWN+WHVh0JZ32EE7bLYtf4PnME= Subject key identifier: 29:AD:6E:6B:AC:9A:28:D1:87:6C:45:14:E4:F2:11:66:69:1D:57:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E737A7A9F4BD50DCDA3C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396591 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:37:a7:a9:f4:bd:50:dc:da:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7d093068-1d4f-46ee-9846-da04f65c2069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8e:36:95:cb:24:e5:51:e5:25:2c:ea:a2:21: b2:db:da:6e:f5:77:58:51:3b:88:8d:d6:a9:fe:db: a5:34:69:bc:58:36:36:86:3f:bd:81:cc:22:59:3a: af:d5:57:8d:93:a0:f6:9b:91:07:9c:4a:60:5c:d5: cc:c1:85:cb:a6:df:f2:28:b2:87:8c:a4:2b:14:ba: ef:42:e9:58:98:ac:13:78:c4:65:c5:e0:f7:6c:a2: 94:dc:bc:5a:48:af:2c:7e:e9:0d:9b:b8:96:51:ef: 57:90:6a:b1:35:88:50:12:6c:4f:35:b5:2a:a0:ff: 90:63:fb:db:21:43:38:99:cd:a2:cd:05:16:e4:a0: dd:6a:5a:0d:74:60:44:3f:03:6b:33:be:6a:c2:3d: 8a:f9:c5:92:e1:25:f3:b5:60:74:af:30:6b:2d:b0: 01:76:43:d9:85:4b:f9:c5:0f:e4:ab:03:55:93:29: 0a:60:de:f8:ec:6f:a4:18:fd:53:22:08:1f:c7:89: 74:ec:5a:88:6c:ca:db:2e:3f:dd:18:d2:b6:b9:fd: 66:1d:8d:92:c8:2f:22:0a:af:35:a2:36:68:97:cb: 92:d6:e1:bf:79:e5:62:a5:ef:26:83:32:2e:e1:52: 18:7f:a8:62:f4:a1:c3:3b:50:f8:d2:48:80:0a:62: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:6E:6B:AC:9A:28:D1:87:6C:45:14:E4:F2:11:66:69:1D:57:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea634f65-8078-3511-abbf-238bf529bd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:01:71:d0:3e:4e:3b:e9:26:39:95:6e:e2:f1:2c:fd:6a:3a: 16:1d:3a:26:ea:10:a3:e1:a0:1e:97:a2:05:11:9f:d9:77:12: c1:bb:4e:69:b6:57:ac:5d:58:59:b8:e9:1d:51:9f:6c:79:5e: 3a:17:ed:b6:50:ce:00:79:20:eb:7a:d9:cc:12:a0:b6:fb:18: c8:56:87:15:f4:ba:70:da:b3:51:cd:35:08:1b:d9:c0:29:ff: 3f:ac:2d:ee:15:c1:0a:b5:a7:5d:87:b2:c3:ba:a0:d5:77:b1: 8b:a3:43:81:b6:9f:3d:f1:99:86:6e:c3:b1:30:83:4a:61:7d: 25:85:83:5f:53:8f:1b:74:89:25:30:ab:73:6e:08:8b:76:44: 40:b8:58:b2:1d:61:44:c0:b9:22:48:82:b4:04:78:a9:1c:a8: 92:6b:bf:1d:73:ca:27:2b:23:5b:b6:ea:1f:44:c6:12:d7:c2: 94:6e:ac:e4:d7:56:66:bf:ad:a7:ba:83:3c:7a:60:bd:de:94: d2:9f:73:87:79:1a:89:fb:6c:17:ad:f0:f1:7f:b2:51:af:78: 5d:e8:48:18:37:cc:5b:5f:17:6b:2a:74:17:89:d8:2d:a5:93: b3:ed:ac:49:41:7e:6b:97:53:50:99:07:2d:46:40:ae:b9:80: 46:71:09:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zenqfS9UNzaPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk N2QwOTMwNjgtMWQ0Zi00NmVlLTk4NDYtZGEwNGY2NWMyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY42lcsk5VHlJSzqoiGy29pu9XdYUTuIjdap /tulNGm8WDY2hj+9gcwiWTqv1VeNk6D2m5EHnEpgXNXMwYXLpt/yKLKHjKQrFLrv QulYmKwTeMRlxeD3bKKU3LxaSK8sfukNm7iWUe9XkGqxNYhQEmxPNbUqoP+QY/vb IUM4mc2izQUW5KDdaloNdGBEPwNrM75qwj2K+cWS4SXztWB0rzBrLbABdkPZhUv5 xQ/kqwNVkykKYN747G+kGP1TIggfx4l07FqIbMrbLj/dGNK2uf1mHY2SyC8iCq81 ojZol8uS1uG/eeVipe8mgzIu4VIYf6hi9KHDO1D40kiACmINbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCmtbmusmijRh2xFFOTyEWZpHVfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE2MzRmNjUtODA3OC0z NTExLWFiYmYtMjM4YmY1MjliZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASAXHQPk476SY5lW7i8Sz9ajoWHTom6hCj4aAel6IFEZ/ZdxLBu05p tlesXVhZuOkdUZ9seV46F+22UM4AeSDretnMEqC2+xjIVocV9Lpw2rNRzTUIG9nA Kf8/rC3uFcEKtaddh7LDuqDVd7GLo0OBtp898ZmGbsOxMINKYX0lhYNfU48bdIkl MKtzbgiLdkRAuFiyHWFEwLkiSIK0BHipHKiSa78dc8onKyNbtuofRMYS18KUbqzk 11Zmv62nuoM8emC93pTSn3OHeRqJ+2wXrfDxf7JRr3hd6EgYN8xbXxdrKnQXidgt pZOz7axJQX5rl1NQmQctRkCuuYBGcQkb -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:15 2025 by rpki-client