$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f9f6d1-8a68-384b-b3ee-80424761ddf7.roa File: f6f9f6d1-8a68-384b-b3ee-80424761ddf7.roa (raw, json) Hash identifier: kRzhkR9kzSjfrVWL9PenA/AkNmb6JzSoX+BZbw0FHcE= Subject key identifier: 77:8C:B3:84:F3:E6:CE:4E:D6:A9:71:31:F9:B6:15:0C:6D:50:7F:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7340D8554D24F574D2F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f9f6d1-8a68-384b-b3ee-80424761ddf7.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396561 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:34:0d:85:54:d2:4f:57:4d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e36240a5-3520-4aab-a70b-ab3c59d8776b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:87:78:84:d9:58:c6:84:8d:3c:68:41:12: d9:8a:f5:85:cf:a0:04:e7:f4:e2:19:1f:f9:ed:c4: ae:dd:57:d8:6f:ea:5d:f9:aa:45:8d:a6:18:52:52: 17:8c:00:7f:95:d1:fd:d6:aa:79:84:ad:b1:35:87: 4b:ef:80:8d:f2:dc:53:64:4c:c4:90:1b:a9:6a:39: 90:9c:a1:d8:f8:38:3b:df:3f:db:fc:29:28:4c:2e: 48:36:76:60:6c:41:00:85:44:dc:d4:8f:c7:fc:d6: 7e:5c:f3:2a:2a:8d:2e:5f:9a:6b:2e:6b:26:1e:ea: ff:a4:ac:86:13:97:51:20:6b:a2:aa:45:41:1f:3f: 5b:8a:ce:20:43:df:bb:65:e0:a3:17:01:f4:8a:74: 79:ce:24:bf:96:69:d3:75:79:1a:6c:5e:b6:b2:03: b4:e5:0c:e1:18:dc:33:bf:0a:65:68:dd:b0:bd:83: c8:8c:47:db:c4:18:90:09:96:fd:8e:13:5d:c2:4d: a9:0b:b4:55:80:16:47:1f:64:30:4b:36:c2:fb:1e: 08:1a:a9:1e:9f:9b:b9:00:bf:5f:17:85:15:22:be: 19:26:3c:a2:86:e8:f7:b9:f0:81:6d:4b:86:9c:6a: 00:34:34:60:c1:f1:12:04:64:77:45:45:ca:5f:7f: 04:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8C:B3:84:F3:E6:CE:4E:D6:A9:71:31:F9:B6:15:0C:6D:50:7F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f9f6d1-8a68-384b-b3ee-80424761ddf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:57:33:34:a6:b8:ac:65:b7:e8:4c:d3:b7:8b:8e:5a:d6:c8: 02:57:d1:10:e5:7f:d2:a1:08:46:98:41:74:b9:96:06:6f:f3: ad:6e:b2:61:20:4b:3e:05:ba:15:40:a8:e0:0a:17:e6:21:2c: 93:f0:72:fa:e2:47:07:6e:33:44:f6:f9:7e:65:71:1a:13:21: a9:9b:16:cc:81:a3:bf:9f:5b:75:f2:b5:2c:13:12:fd:07:04: f2:9b:db:ac:10:4c:3f:5f:69:e1:6b:ae:9f:d7:69:19:a4:da: 7d:47:40:25:75:bf:89:9e:74:2c:c2:8c:de:af:4a:18:ba:61: fb:8a:f1:4f:c4:1e:7b:53:93:97:b3:1f:b0:50:12:b0:77:ce: 24:89:e9:32:64:11:f2:9b:a4:1e:91:3a:b1:04:55:c8:d5:b9: 3d:37:b1:a5:df:68:f9:f4:39:e4:79:45:ed:60:e7:d6:74:72: d2:a8:57:c6:6d:26:5a:c5:b2:bc:1e:f2:d1:eb:f9:b0:2b:27: 6e:58:a7:36:4c:4b:41:76:51:dc:d7:ca:39:74:5a:79:ac:4f: 74:30:b4:6d:b0:7e:f4:81:b2:48:20:4d:e9:e1:d1:5f:12:87: d5:81:44:e6:e7:63:ed:7b:8b:a1:5e:eb:6a:6b:63:c5:ab:e7: b3:60:c9:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zQNhVTST1dNLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTM2MjQwYTUtMzUyMC00YWFiLWE3MGItYWIzYzU5ZDg3NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03uHeITZWMaEjTxoQRLZivWFz6AE5/TiGR/5 7cSu3VfYb+pd+apFjaYYUlIXjAB/ldH91qp5hK2xNYdL74CN8txTZEzEkBupajmQ nKHY+Dg73z/b/CkoTC5INnZgbEEAhUTc1I/H/NZ+XPMqKo0uX5prLmsmHur/pKyG E5dRIGuiqkVBHz9bis4gQ9+7ZeCjFwH0inR5ziS/lmnTdXkabF62sgO05QzhGNwz vwplaN2wvYPIjEfbxBiQCZb9jhNdwk2pC7RVgBZHH2QwSzbC+x4IGqken5u5AL9f F4UVIr4ZJjyihuj3ufCBbUuGnGoANDRgwfESBGR3RUXKX38ENQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHeMs4Tz5s5O1qlxMfm2FQxtUH9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjZmOWY2ZDEtOGE2OC0z ODRiLWIzZWUtODA0MjQ3NjFkZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6VzM0prisZbfoTNO3i45a1sgCV9EQ5X/SoQhGmEF0uZYGb/OtbrJh IEs+BboVQKjgChfmISyT8HL64kcHbjNE9vl+ZXEaEyGpmxbMgaO/n1t18rUsExL9 BwTym9usEEw/X2nha66f12kZpNp9R0Aldb+JnnQswozer0oYumH7ivFPxB57U5OX sx+wUBKwd84kiekyZBHym6QekTqxBFXI1bk9N7Gl32j59DnkeUXtYOfWdHLSqFfG bSZaxbK8HvLR6/mwKyduWKc2TEtBdlHc18o5dFp5rE90MLRtsH70gbJIIE3p4dFf EofVgUTm52Pte4uhXutqa2PFq+ezYMnS -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:13 2025 by rpki-client