$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa File: f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa (raw, json) Hash identifier: g0azJdPKuposUQu1n/qI+nUHt0MGvi3EuiQBcKm7j40= Subject key identifier: 4A:97:FF:D9:1C:B5:D5:62:F9:CE:0D:4B:03:47:E9:7B:B3:62:FB:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732F286E3695E24A88800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397202 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:f2:86:e3:69:5e:24:a8:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0df96131-c5cd-4b42-845f-af2f19a6d0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:ad:e4:5f:3c:29:7a:04:0c:b2:6f:cf:b4: c2:f7:43:1e:c5:10:0b:68:17:3d:a8:32:4c:90:04: e4:e5:7a:8f:19:9c:a4:a8:d6:35:45:35:cf:09:f4: 71:83:2a:1c:07:11:9a:ad:56:17:4c:cc:7f:9c:02: 65:a3:bc:1e:45:09:86:fe:10:0c:aa:84:01:f4:d9: 29:e6:93:f4:a2:7c:fd:ed:82:b9:e7:51:86:9f:b5: 2c:33:04:bf:bc:d4:ec:67:93:ca:4c:84:ae:0e:fb: c9:37:7d:87:74:8e:1a:63:8a:46:f1:b8:81:4e:4f: 27:85:09:fb:25:f4:cd:a4:df:c0:76:ae:5b:d5:2a: e9:85:d8:31:77:ed:be:3b:ee:01:65:6d:39:c3:31: 7d:63:cb:95:48:8c:c2:60:b3:0f:ed:bd:ed:38:a8: 2d:36:55:1a:eb:13:d7:b9:d1:59:e4:2c:d4:bf:e8: 48:d5:cc:80:94:df:3d:e2:91:07:5d:c4:32:82:25: 10:5d:cb:fd:c4:74:31:73:84:59:c7:4d:b7:75:44: 5c:ac:6b:0d:a8:8f:39:68:7c:84:74:39:e0:a9:ff: fd:43:76:57:47:10:c2:01:93:7d:9d:0f:f3:8c:0e: 87:89:12:67:86:65:ba:80:ab:2e:43:9c:43:88:37: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:FF:D9:1C:B5:D5:62:F9:CE:0D:4B:03:47:E9:7B:B3:62:FB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e8e74a-76ca-38ba-8970-8b8d4f85baff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:55:00:6d:db:72:cf:95:b6:e2:82:1c:a5:15:92:61:9b:da: 53:84:bc:e9:2f:2e:db:2f:ed:4a:32:8d:6f:31:21:3a:a7:63: db:bc:83:db:6a:6d:e8:bd:da:3d:7a:b0:59:e8:16:ba:85:db: b9:22:4d:9b:ad:fb:75:c8:6d:63:45:47:f5:65:12:cb:a2:65: 8f:ab:e0:ab:07:c6:bd:6c:c6:27:c3:5d:85:b8:b5:12:b8:5e: 00:99:ef:e8:a6:e5:20:ec:ec:17:5a:e2:b4:79:55:42:4c:66: 6b:6f:47:11:16:c7:51:3d:9b:32:2e:5c:53:29:80:ab:6f:42: f7:0d:1e:16:68:47:70:d4:b3:bd:48:5c:d9:86:72:51:d6:f5: 35:96:eb:01:b4:ff:1b:ab:b4:5c:93:e8:92:44:00:7f:9d:72: 82:18:d6:8a:f0:e7:26:c6:12:34:b7:9a:83:df:50:1b:6e:ce: 66:44:95:c0:42:80:d8:c9:c5:83:54:43:1b:e4:ff:df:f7:21: f1:ae:32:dc:de:b4:18:46:27:04:ea:9d:a9:3f:c5:67:4a:df: af:cd:42:c1:7a:7f:fc:93:f7:7e:8f:63:27:e1:e4:0b:f4:b1: a3:6b:9c:33:c7:34:8a:d2:59:cd:a3:73:fc:94:83:4c:9a:01: 32:fb:2e:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zLyhuNpXiSoiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGRmOTYxMzEtYzVjZC00YjQyLTg0NWYtYWYyZjE5YTZkMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv76t5F88KXoEDLJvz7TC90MexRALaBc9qDJM kATk5XqPGZykqNY1RTXPCfRxgyocBxGarVYXTMx/nAJlo7weRQmG/hAMqoQB9Nkp 5pP0onz97YK551GGn7UsMwS/vNTsZ5PKTISuDvvJN32HdI4aY4pG8biBTk8nhQn7 JfTNpN/Adq5b1Srphdgxd+2+O+4BZW05wzF9Y8uVSIzCYLMP7b3tOKgtNlUa6xPX udFZ5CzUv+hI1cyAlN894pEHXcQygiUQXcv9xHQxc4RZx023dURcrGsNqI85aHyE dDngqf/9Q3ZXRxDCAZN9nQ/zjA6HiRJnhmW6gKsuQ5xDiDdecwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEqX/9kctdVi+c4NSwNH6XuzYvvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdlOGU3NGEtNzZjYS0z OGJhLTg5NzAtOGI4ZDRmODViYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJVQBt23LPlbbighylFZJhm9pThLzpLy7bL+1KMo1vMSE6p2PbvIPb am3ovdo9erBZ6Ba6hdu5Ik2brft1yG1jRUf1ZRLLomWPq+CrB8a9bMYnw12FuLUS uF4Ame/opuUg7OwXWuK0eVVCTGZrb0cRFsdRPZsyLlxTKYCrb0L3DR4WaEdw1LO9 SFzZhnJR1vU1lusBtP8bq7Rck+iSRAB/nXKCGNaK8OcmxhI0t5qD31Abbs5mRJXA QoDYycWDVEMb5P/f9yHxrjLc3rQYRicE6p2pP8VnSt+vzULBen/8k/d+j2Mn4eQL 9LGja5wzxzSK0lnNo3P8lINMmgEy+y5h -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:48 2025 by rpki-client