$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa File: 05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa (raw, json) Hash identifier: SHBNBZAezYVzJHLDKe1Du+a4C6D16BTR4ybV6KO0GOE= Subject key identifier: CF:2E:F9:7C:95:E6:E3:A3:92:A7:6A:16:63:28:F3:3E:44:FD:E8:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CADE796F34D82C45A1620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 10515 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ad:e7:96:f3:4d:82:c4:5a:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6e0eac89-fbb4-4306-b683-1141a2df2970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:cf:56:87:fd:17:5e:11:ad:dc:3e:d2:6f: 11:3b:68:2e:8c:ed:f9:a3:16:27:bd:11:db:0c:10: fa:3b:36:ed:9c:61:a8:c0:19:79:9a:39:65:66:20: 02:2a:af:7d:d6:b8:a4:f3:03:ed:42:a4:77:24:cd: c5:79:77:cc:2d:0c:fb:c9:23:6f:c9:0e:e6:59:4e: cc:02:89:7a:9b:f6:f3:6b:30:96:de:26:dc:9e:c4: 00:b5:28:52:57:a6:e3:52:48:61:32:41:7b:fc:bf: 4e:e8:72:91:d6:17:37:d4:88:ad:24:17:ab:c0:f2: 44:ff:7e:a4:00:32:d7:29:0d:44:bf:11:a2:d2:59: 0f:14:69:f6:b5:0d:b2:73:61:f5:9a:53:4b:09:c0: b5:4d:26:1d:a5:90:aa:a9:d7:8a:33:69:b3:b5:1e: 17:16:49:40:f3:02:4d:17:32:eb:ae:70:b4:a4:6d: f3:91:b3:b4:b8:8c:4c:5c:a9:63:af:f9:b9:6f:c7: d3:ac:eb:5b:84:1d:a0:77:76:02:49:65:c1:13:be: f7:b4:de:85:3d:d5:05:a9:3b:8f:e0:cd:85:63:1e: a2:1a:45:e6:a7:7b:6c:08:d5:ba:67:32:af:30:13: 37:18:da:49:67:37:45:14:2a:78:3d:ca:dd:30:37: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2E:F9:7C:95:E6:E3:A3:92:A7:6A:16:63:28:F3:3E:44:FD:E8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05a20b11-5927-3bbe-850a-c6fc49cd4de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ec:33:65:b0:18:2f:fa:d9:91:6e:4c:31:7a:ed:f8:a1:10: 49:6d:3f:d1:fa:08:1f:77:3a:6d:5d:d1:8e:12:c1:3b:d5:47: 55:9b:9e:eb:86:3c:af:f2:c9:3a:ce:b9:b3:6c:ed:f9:cb:71: f9:c6:2c:a6:40:6f:b7:75:fc:8e:fe:02:fb:27:0d:6c:4d:c0: 95:d3:ea:1e:c7:d2:f2:b3:0a:3a:69:ad:f7:53:e0:55:b3:64: ed:a1:a5:67:bf:5c:8d:24:64:59:ba:48:e7:d2:6a:9b:a7:67: 75:0b:ac:60:d9:04:85:09:18:be:12:20:d4:14:cb:f3:1a:67: 9e:30:b1:98:13:f1:a0:47:72:68:91:5c:af:d7:72:72:05:a7: d4:e6:cb:e5:01:29:64:de:b8:df:93:93:9f:1a:70:87:f6:0c: 5e:8a:74:7e:b4:e8:67:08:87:11:57:32:89:54:1d:20:21:ce: 77:05:ed:5f:22:78:c9:23:63:8d:f3:76:c2:7b:81:39:5e:2c: e6:01:40:fa:1c:d4:b5:86:3f:64:70:95:55:a8:6a:d5:8a:d8: 5c:ea:a0:96:14:1a:b2:57:e2:88:be:ff:f7:0b:a4:01:1e:b9: 63:49:c0:ab:a6:97:e6:1c:5c:8c:fb:27:36:28:39:d1:0d:b2: 3e:8e:a1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK3nlvNNgsRaFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmUwZWFjODktZmJiNC00MzA2LWI2ODMtMTE0MWEyZGYyOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5bPVof9F14Rrdw+0m8RO2gujO35oxYnvRHb DBD6OzbtnGGowBl5mjllZiACKq991rik8wPtQqR3JM3FeXfMLQz7ySNvyQ7mWU7M Aol6m/bzazCW3ibcnsQAtShSV6bjUkhhMkF7/L9O6HKR1hc31IitJBerwPJE/36k ADLXKQ1EvxGi0lkPFGn2tQ2yc2H1mlNLCcC1TSYdpZCqqdeKM2mztR4XFklA8wJN FzLrrnC0pG3zkbO0uIxMXKljr/m5b8fTrOtbhB2gd3YCSWXBE773tN6FPdUFqTuP 4M2FYx6iGkXmp3tsCNW6ZzKvMBM3GNpJZzdFFCp4PcrdMDclEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8u+XyV5uOjkqdqFmMo8z5E/ehdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDVhMjBiMTEtNTkyNy0z YmJlLTg1MGEtYzZmYzQ5Y2Q0ZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3sM2WwGC/62ZFuTDF67fihEEltP9H6CB93Om1d0Y4SwTvVR1WbnuuG PK/yyTrOubNs7fnLcfnGLKZAb7d1/I7+AvsnDWxNwJXT6h7H0vKzCjpprfdT4FWz ZO2hpWe/XI0kZFm6SOfSapunZ3ULrGDZBIUJGL4SINQUy/MaZ54wsZgT8aBHcmiR XK/XcnIFp9Tmy+UBKWTeuN+Tk58acIf2DF6KdH606GcIhxFXMolUHSAhzncF7V8i eMkjY43zdsJ7gTleLOYBQPoc1LWGP2RwlVWoatWK2FzqoJYUGrJX4oi+//cLpAEe uWNJwKuml+YcXIz7JzYoOdENsj6OoYA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:11:47 2025 by rpki-client