$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa File: 04295114-d569-3b51-8f9e-4ba4ee41f486.roa (raw, json) Hash identifier: 6rHRG1Cu50GA7NWCRq/UXYRxQ1PH7kO3j0vpfNx5LsU= Subject key identifier: FD:6F:43:96:47:FB:B9:F7:81:01:30:B9:0C:E7:73:E0:1A:7F:42:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7381EEA6E5FD94BD8E780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396549 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:38:1e:ea:6e:5f:d9:4b:d8:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=07bb2855-9cf5-43e0-97aa-463c09cb2c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:6d:9e:93:de:aa:54:b0:49:cb:12:d4:cc: b6:28:30:79:ea:62:cd:a6:aa:74:2b:b0:8c:2d:91: ba:7c:b5:be:4b:e0:15:3f:99:01:ff:6b:92:ef:3a: 5d:44:5f:73:f4:65:6c:49:3f:08:a9:9a:e5:cc:7a: 7f:5d:01:e3:b4:78:7e:b5:aa:3e:d3:02:3e:66:2c: 90:89:b2:d1:63:12:cb:a6:26:46:64:a0:16:34:35: 09:34:fd:22:7f:c5:21:52:04:b5:7c:28:9e:fa:1a: 4e:53:ba:dc:03:8c:00:26:66:41:db:cc:6e:4a:9b: d7:32:c8:96:d8:24:1e:75:7e:6d:16:ab:09:c4:db: 6b:28:34:3a:e4:93:90:6d:d3:e2:5e:ae:cc:f9:9f: 7f:ae:88:fa:73:8a:88:09:8d:d4:17:9e:ac:af:e4: 61:d6:f9:9f:bf:59:94:df:96:1b:df:99:c0:53:83: 72:1d:86:54:5d:25:3b:95:6a:7e:99:8e:b5:f5:bf: d5:bd:65:98:64:96:de:25:d9:73:2a:e1:0e:1b:6c: 28:7b:4c:90:b6:d2:09:c2:9a:51:9d:14:b7:a5:a5: b5:7f:8b:9d:59:81:90:ce:f7:04:e5:87:4e:05:1a: e9:89:2c:f4:c3:77:56:4f:5e:8e:8f:fc:92:68:52: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:43:96:47:FB:B9:F7:81:01:30:B9:0C:E7:73:E0:1A:7F:42:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8a:8e:76:62:3b:35:c6:81:79:6a:35:02:32:94:05:7d:a2: 64:0d:f5:b0:f3:d8:26:29:2c:c8:7e:5b:bb:05:47:e8:c1:72: e1:c7:ea:5a:ab:04:a8:3c:f8:88:75:95:ff:b8:25:ff:c4:6d: c5:31:75:8b:ad:6c:a1:b3:e0:25:22:66:f3:a0:c6:b5:c0:a6: b7:ea:0f:d4:6d:82:27:f0:9e:52:84:55:58:03:b2:1a:b9:42: 73:f7:bd:e0:13:38:68:8c:d9:2a:8d:62:4b:3f:9b:c1:01:84: 79:46:ae:7c:02:ad:8c:03:92:f6:c7:25:39:07:a7:44:77:b9: 2a:5e:c8:c2:7b:f3:77:50:02:53:8b:ea:06:04:31:b3:07:43: 82:de:9f:96:1a:2f:d6:39:4b:e0:9b:19:95:fb:54:81:1f:28: 01:45:89:ad:ee:f8:06:13:a6:11:a3:de:23:46:ea:78:32:eb: c4:22:2e:9b:e4:bd:27:be:13:29:90:16:90:ac:87:87:53:22: b7:0b:78:b1:3d:06:c9:e9:f0:02:64:5e:d9:66:65:80:b4:9a: 24:75:cb:40:9e:e0:ee:5b:f0:20:9f:09:4b:72:63:a2:52:8e: 8e:c8:70:97:ea:78:fe:00:ed:8f:62:a9:25:cd:50:c9:e4:d4: 9d:71:0b:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zge6m5f2UvY54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MDdiYjI4NTUtOWNmNS00M2UwLTk3YWEtNDYzYzA5Y2IyYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZttnpPeqlSwScsS1My2KDB56mLNpqp0K7CM LZG6fLW+S+AVP5kB/2uS7zpdRF9z9GVsST8IqZrlzHp/XQHjtHh+tao+0wI+ZiyQ ibLRYxLLpiZGZKAWNDUJNP0if8UhUgS1fCie+hpOU7rcA4wAJmZB28xuSpvXMsiW 2CQedX5tFqsJxNtrKDQ65JOQbdPiXq7M+Z9/roj6c4qICY3UF56sr+Rh1vmfv1mU 35Yb35nAU4NyHYZUXSU7lWp+mY619b/VvWWYZJbeJdlzKuEOG2woe0yQttIJwppR nRS3paW1f4udWYGQzvcE5YdOBRrpiSz0w3dWT16Oj/ySaFL2KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP1vQ5ZH+7n3gQEwuQznc+Aaf0KtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQyOTUxMTQtZDU2OS0z YjUxLThmOWUtNGJhNGVlNDFmNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHio52Yjs1xoF5ajUCMpQFfaJkDfWw89gmKSzIflu7BUfowXLhx+pa qwSoPPiIdZX/uCX/xG3FMXWLrWyhs+AlImbzoMa1wKa36g/UbYIn8J5ShFVYA7Ia uUJz973gEzhojNkqjWJLP5vBAYR5Rq58Aq2MA5L2xyU5B6dEd7kqXsjCe/N3UAJT i+oGBDGzB0OC3p+WGi/WOUvgmxmV+1SBHygBRYmt7vgGE6YRo94jRup4MuvEIi6b 5L0nvhMpkBaQrIeHUyK3C3ixPQbJ6fACZF7ZZmWAtJokdctAnuDuW/AgnwlLcmOi Uo6OyHCX6nj+AO2PYqklzVDJ5NSdcQu5 -----END CERTIFICATE-----Generated at Mon Oct 20 08:07:07 2025 by rpki-client