$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa File: 09c8695b-7372-327c-857b-fadecae21334.roa (raw, json) Hash identifier: fJjGrihPqjHOfbRokzasoCLjaP0NhRLf8u4RID/H+M0= Subject key identifier: 31:E4:F0:7B:5D:AE:AE:9D:76:3E:9A:E5:37:48:A3:6C:B3:F4:4D:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72AD539AD9682515A4F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396564 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2a:d5:39:ad:96:82:51:5a:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4956d30d-b9b1-4b23-b037-2ed1eae0da00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:00:9b:26:48:9b:97:76:7e:57:68:d3:25:86: 9c:9e:34:5a:64:3b:68:e0:79:23:1e:eb:2f:ac:3e: 9a:4f:41:5a:94:5b:cd:54:32:3b:50:30:a2:99:ec: 19:85:10:5d:34:45:7a:d8:9b:94:ac:19:2a:66:fb: 46:a5:f7:5d:e9:b9:07:e8:28:38:99:b1:9c:49:14: 52:eb:3f:2a:2c:90:b0:2f:56:f1:ff:cf:d5:55:0c: 57:15:19:67:57:dc:40:a1:4b:bf:bf:e4:6c:9c:b3: d8:f4:16:89:62:21:58:72:96:8c:1f:94:76:40:60: 52:02:8a:e8:d7:cb:b7:82:3c:65:71:cb:b4:ec:96: c5:ac:86:7d:4a:c5:a9:85:5b:1e:e4:e4:0a:ff:3e: 40:e7:d2:be:48:3d:f2:5d:e2:e0:f1:5a:4e:53:cc: 70:46:3b:0d:8d:12:80:c5:ec:b9:64:c3:4f:8c:5c: 15:cd:68:24:5f:6b:75:d7:4c:c2:8c:6f:3a:5e:3d: 68:98:a4:25:55:51:3e:87:ea:cd:20:64:c1:96:cc: 6c:44:63:cf:3d:9b:64:b0:c3:23:55:84:d2:da:eb: 7a:73:0d:d3:d8:13:e6:ee:00:b2:73:18:11:9f:c5: cb:b6:0e:97:f4:7a:35:6a:e7:c3:73:95:d9:87:03: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E4:F0:7B:5D:AE:AE:9D:76:3E:9A:E5:37:48:A3:6C:B3:F4:4D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:23:6a:dc:73:7c:bd:f2:f6:2d:0f:94:fd:9d:2c:a3:63:39: eb:56:80:79:b2:35:7b:07:ff:76:ea:a7:21:b0:f7:32:c6:26: 71:ea:5d:c2:b7:09:38:a7:c1:3f:34:6c:f7:45:85:67:2e:dd: eb:05:7d:3a:b6:a8:91:c9:d8:bb:d7:ce:06:d2:99:d8:eb:57: e3:e3:72:b5:59:b5:aa:e2:1b:e2:ae:c1:69:d3:4e:d5:0f:9f: f7:b3:b0:3f:9f:83:51:97:31:a6:5a:32:9b:4a:19:b7:a0:5c: 12:a1:9e:60:25:4f:e7:14:2c:23:05:5c:14:fe:c3:b7:90:9a: 51:4d:5d:a8:a9:1d:13:32:ba:9c:45:a9:fc:f0:fa:ac:65:8d: d1:3c:d9:33:e1:60:7a:2a:e2:80:a8:cb:69:37:d4:4b:a6:39: c6:0e:ca:e3:03:14:ba:a7:1e:44:0e:81:e1:3a:c5:6f:7c:38: 61:3d:e7:2e:28:15:49:12:1d:40:d2:62:74:06:19:1d:74:e1: 70:e5:7d:ff:f3:6f:cc:29:ea:74:c6:24:7d:ee:d9:6a:72:0e: 3f:18:e8:2f:9b:52:b8:3d:98:90:c2:6c:e3:57:52:bb:f6:16: 33:ec:7d:df:42:29:e3:8a:63:f1:93:e9:52:60:43:25:be:14: e8:d9:eb:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yrVOa2WglFaTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDk1NmQzMGQtYjliMS00YjIzLWIwMzctMmVkMWVhZTBkYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QCbJkibl3Z+V2jTJYacnjRaZDto4HkjHusv rD6aT0FalFvNVDI7UDCimewZhRBdNEV62JuUrBkqZvtGpfdd6bkH6Cg4mbGcSRRS 6z8qLJCwL1bx/8/VVQxXFRlnV9xAoUu/v+RsnLPY9BaJYiFYcpaMH5R2QGBSAoro 18u3gjxlccu07JbFrIZ9SsWphVse5OQK/z5A59K+SD3yXeLg8VpOU8xwRjsNjRKA xey5ZMNPjFwVzWgkX2t110zCjG86Xj1omKQlVVE+h+rNIGTBlsxsRGPPPZtksMMj VYTS2ut6cw3T2BPm7gCycxgRn8XLtg6X9Ho1aufDc5XZhwP5pQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDHk8Htdrq6ddj6a5TdIo2yz9E1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDljODY5NWItNzM3Mi0z MjdjLTg1N2ItZmFkZWNhZTIxMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABI2rcc3y98vYtD5T9nSyjYznrVoB5sjV7B/926qchsPcyxiZx6l3C twk4p8E/NGz3RYVnLt3rBX06tqiRydi7184G0pnY61fj43K1WbWq4hvirsFp007V D5/3s7A/n4NRlzGmWjKbShm3oFwSoZ5gJU/nFCwjBVwU/sO3kJpRTV2oqR0TMrqc Ran88PqsZY3RPNkz4WB6KuKAqMtpN9RLpjnGDsrjAxS6px5EDoHhOsVvfDhhPecu KBVJEh1A0mJ0BhkddOFw5X3/82/MKep0xiR97tlqcg4/GOgvm1K4PZiQwmzjV1K7 9hYz7H3fQinjimPxk+lSYEMlvhTo2esn -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:47 2025 by rpki-client