$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa File: 01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa (raw, json) Hash identifier: r4AKTvBRhLpp4mKbwbhoETkz3+ai7FKtOCfY0a0J8wc= Subject key identifier: F4:D3:5E:37:29:4D:8D:21:A5:EB:F8:B0:EE:CB:21:DC:D7:2E:0E:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7318392CD4798E2836700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396571 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:31:83:92:cd:47:98:e2:83:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=8e5258fa-fe54-491d-b2ff-4f5e3d7a1ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bc:a2:8e:b1:37:f3:a4:e5:34:cd:59:0e:ec: ff:a6:07:42:18:d6:0a:7d:9c:7b:b5:16:6f:98:f6: f5:f7:86:17:cb:ad:e1:64:67:4f:b5:66:06:60:61: e0:c0:c8:59:2e:ff:99:6f:af:66:b5:c1:fd:50:ac: 54:ad:aa:cd:e8:6e:90:c4:7e:df:d0:9c:3e:07:36: 76:47:5c:fd:82:6b:e3:f8:e2:4d:9f:3b:78:31:e8: 32:a6:70:d3:c8:ed:56:96:05:b7:90:ad:df:66:91: ea:12:db:12:36:99:3d:92:4f:a0:17:63:4d:f0:21: bc:2c:5f:cf:73:11:b7:86:12:b6:fc:e3:00:2b:52: 38:ef:87:c9:c1:1b:fd:55:18:bb:92:7f:3a:3c:8a: fe:9f:dd:82:c1:c8:b3:6c:c0:7a:ea:24:8c:73:56: 73:4c:8c:b0:8d:97:45:0f:fe:8e:a7:70:d4:be:8c: 19:0e:98:97:90:e6:a0:52:60:16:70:f9:0f:d3:8d: dc:7f:39:ca:c0:7c:e7:ff:d7:2c:e2:f3:d4:2a:f0: 10:63:90:23:16:ee:96:dd:f3:d6:37:eb:ea:6f:9c: 6a:47:d3:4a:e1:03:a0:bd:ca:1a:d2:67:1d:f9:95: 9a:5b:bc:d7:0a:30:48:2e:47:ea:35:a9:00:1a:ed: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D3:5E:37:29:4D:8D:21:A5:EB:F8:B0:EE:CB:21:DC:D7:2E:0E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f0ccb4-1b15-3ed8-baf1-e8601cf9c895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:56:3e:86:cc:ec:6a:df:ac:5b:9b:07:ff:27:80:ba:02:f9: 21:0e:7d:90:a2:c0:73:b6:4d:4d:35:c2:b2:0a:c4:8d:43:c7: 8e:92:df:25:d3:57:27:db:13:e0:14:4b:e6:6e:8a:8b:c5:11: 3b:31:ac:d2:6f:8d:3e:58:4c:37:ce:e6:53:13:c2:42:82:ae: d6:af:e4:55:b9:be:83:03:6e:34:56:54:86:7a:ae:6a:04:a9: f6:ed:99:f2:5b:26:55:a5:47:44:64:3d:6e:91:8d:24:96:74: 44:89:35:19:99:e8:cf:33:5f:97:e3:ec:e5:fe:19:58:7a:5c: dd:35:fe:78:2e:9e:80:44:dc:41:99:48:a3:54:92:c5:19:f2: a2:e3:2e:d1:a2:38:b6:39:e8:63:c3:a3:34:f0:d1:b2:9c:f7: 6d:63:e8:67:39:8c:5c:f0:42:c0:d8:5e:09:b0:78:61:e4:7d: eb:52:e6:cc:14:8c:c9:09:de:4a:34:00:9b:00:28:67:8a:84: f0:e7:9a:c9:1b:35:50:2f:d6:c9:c6:ce:c9:ab:6b:b8:e7:5a: 4e:44:4c:aa:e6:a6:a1:1b:5d:39:25:18:b0:24:13:da:99:f3: 0d:08:b0:97:e6:c4:c2:71:38:9a:78:01:67:d1:15:d1:fe:01: e3:94:ce:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zGDks1HmOKDZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OGU1MjU4ZmEtZmU1NC00OTFkLWIyZmYtNGY1ZTNkN2ExYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlryijrE386TlNM1ZDuz/pgdCGNYKfZx7tRZv mPb194YXy63hZGdPtWYGYGHgwMhZLv+Zb69mtcH9UKxUrarN6G6QxH7f0Jw+BzZ2 R1z9gmvj+OJNnzt4MegypnDTyO1WlgW3kK3fZpHqEtsSNpk9kk+gF2NN8CG8LF/P cxG3hhK2/OMAK1I474fJwRv9VRi7kn86PIr+n92CwcizbMB66iSMc1ZzTIywjZdF D/6Op3DUvowZDpiXkOagUmAWcPkP043cfznKwHzn/9cs4vPUKvAQY5AjFu6W3fPW N+vqb5xqR9NK4QOgvcoa0mcd+ZWaW7zXCjBILkfqNakAGu0gBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPTTXjcpTY0hpev4sO7LIdzXLg61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDFmMGNjYjQtMWIxNS0z ZWQ4LWJhZjEtZTg2MDFjZjljODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMVj6GzOxq36xbmwf/J4C6AvkhDn2QosBztk1NNcKyCsSNQ8eOkt8l 01cn2xPgFEvmboqLxRE7MazSb40+WEw3zuZTE8JCgq7Wr+RVub6DA240VlSGeq5q BKn27ZnyWyZVpUdEZD1ukY0klnREiTUZmejPM1+X4+zl/hlYelzdNf54Lp6ARNxB mUijVJLFGfKi4y7Roji2Oehjw6M08NGynPdtY+hnOYxc8ELA2F4JsHhh5H3rUubM FIzJCd5KNACbAChnioTw55rJGzVQL9bJxs7Jq2u451pOREyq5qahG105JRiwJBPa mfMNCLCX5sTCcTiaeAFn0RXR/gHjlM4a -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:11 2025 by rpki-client