$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa File: 09dac3f8-30c2-3282-a0c0-2442d3caab25.roa (raw, json) Hash identifier: XPcgnq7F4DOb8+apDCdzcG1nzEAP1PlkBycTiUqpxfk= Subject key identifier: C0:F9:87:80:4F:C8:50:1C:75:22:16:BE:8D:2E:51:CE:28:CF:98:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73349CE1EE0CA426E4920 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396573 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:49:ce:1e:e0:ca:42:6e:49:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e8515990-6906-432d-abe6-3d0fc5fa768d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:7a:98:7f:4b:42:9a:47:95:98:b9:26:9f: 05:e3:dd:37:5a:ed:68:be:5e:e6:93:c2:a3:b2:80: 26:a6:56:2b:a6:00:20:a6:82:2c:11:3b:2e:70:58: 3e:e3:9c:b5:a2:7d:b2:a6:65:38:80:c0:db:b8:4e: 8a:26:0f:a6:a6:30:f5:19:ff:9a:34:22:1d:28:64: 25:08:f9:e4:46:0f:da:18:de:0a:21:a5:b6:36:9a: 69:f6:34:26:5b:15:b4:a7:4c:98:15:18:89:a5:a5: db:20:ed:05:27:de:97:dd:bf:cb:a8:cb:67:92:1d: 21:3a:f6:c4:49:ff:b6:0f:47:b4:3f:32:e3:4c:9e: ee:c8:b7:7e:e3:ca:84:8f:b6:5e:7c:c0:32:59:3c: 12:bf:8c:ab:e8:3f:9f:57:66:27:86:56:e8:83:14: b1:71:1c:d0:73:2d:a4:91:44:42:b1:d6:65:19:f0: 64:d0:b3:aa:e8:53:c3:04:bd:89:44:6a:dd:57:c3: 3c:c2:2d:e8:28:66:7f:f0:36:3a:2b:85:71:98:6e: c6:9b:63:ed:bc:b9:49:75:d8:1d:86:e2:47:90:f6: fa:8d:4a:bb:34:15:31:88:2f:74:44:40:da:cc:6c: 2f:73:d8:a9:8d:e1:2e:5a:dd:e0:75:a3:6a:03:7e: 26:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F9:87:80:4F:C8:50:1C:75:22:16:BE:8D:2E:51:CE:28:CF:98:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09dac3f8-30c2-3282-a0c0-2442d3caab25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f2:0e:68:1b:f0:e2:c2:23:d1:46:bb:b6:e1:bd:d2:11:74: 71:fa:6d:18:eb:b5:cd:4a:5a:89:18:99:80:47:11:c6:06:2b: 46:ce:8d:03:78:26:18:8b:4a:42:2e:14:fd:19:08:83:6a:b1: 1d:26:16:ce:48:75:f6:da:3b:7b:37:f0:81:86:14:36:92:33: c0:0a:6f:ca:4a:93:2f:ad:87:31:05:09:33:b8:e3:ad:5d:df: 08:3c:2e:23:55:8f:4d:af:9d:07:65:06:07:2a:be:f9:22:f8: f8:3c:68:2b:b1:cc:0f:1c:58:ee:b0:83:c5:10:37:6a:96:9e: ae:bd:e9:65:42:7c:f6:56:3d:a4:b5:f2:0a:e4:92:b4:5e:7a: fd:2f:88:89:e1:13:bd:30:bd:e0:8a:c2:10:8e:17:52:70:d9: 24:e4:b3:8d:37:85:a9:d5:02:56:4d:52:8d:c6:fc:aa:0a:59: 28:78:26:d1:44:f7:7f:32:bc:1f:15:15:d7:d4:c0:8f:87:a6: 06:d6:2c:96:e4:d0:97:1f:b4:5d:63:2d:d9:f6:5e:34:3a:31: 0f:0a:24:f5:f3:64:77:37:07:9e:da:2b:1f:22:02:e2:3c:0d: b7:be:f9:b0:aa:68:fb:c4:96:73:9c:8c:6b:ef:03:a1:74:6c: a7:82:33:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zNJzh7gykJuSSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTg1MTU5OTAtNjkwNi00MzJkLWFiZTYtM2QwZmM1ZmE3NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWh6mH9LQppHlZi5Jp8F4903Wu1ovl7mk8Kj soAmplYrpgAgpoIsETsucFg+45y1on2ypmU4gMDbuE6KJg+mpjD1Gf+aNCIdKGQl CPnkRg/aGN4KIaW2Nppp9jQmWxW0p0yYFRiJpaXbIO0FJ96X3b/LqMtnkh0hOvbE Sf+2D0e0PzLjTJ7uyLd+48qEj7ZefMAyWTwSv4yr6D+fV2YnhlbogxSxcRzQcy2k kURCsdZlGfBk0LOq6FPDBL2JRGrdV8M8wi3oKGZ/8DY6K4VxmG7Gm2PtvLlJddgd huJHkPb6jUq7NBUxiC90REDazGwvc9ipjeEuWt3gdaNqA34mKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMD5h4BPyFAcdSIWvo0uUc4oz5hzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDlkYWMzZjgtMzBjMi0z MjgyLWEwYzAtMjQ0MmQzY2FhYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA38g5oG/DiwiPRRru24b3SEXRx+m0Y67XNSlqJGJmARxHGBitGzo0D eCYYi0pCLhT9GQiDarEdJhbOSHX22jt7N/CBhhQ2kjPACm/KSpMvrYcxBQkzuOOt Xd8IPC4jVY9Nr50HZQYHKr75Ivj4PGgrscwPHFjusIPFEDdqlp6uvellQnz2Vj2k tfIK5JK0Xnr9L4iJ4RO9ML3gisIQjhdScNkk5LONN4Wp1QJWTVKNxvyqClkoeCbR RPd/MrwfFRXX1MCPh6YG1iyW5NCXH7RdYy3Z9l40OjEPCiT182R3Nwee2isfIgLi PA23vvmwqmj7xJZznIxr7wOhdGyngjOq -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:55 2025 by rpki-client