$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa File: 0f088544-af2e-30e5-ad62-8a9024656cd2.roa (raw, json) Hash identifier: ZJLwJd9UdsvjCB2ycPBQTeQed+5cdlIsZ1wL/RiBZOg= Subject key identifier: DA:B3:FF:C9:B3:54:4F:6D:DF:11:C2:73:04:8D:17:F4:F5:11:7B:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E69E5A740C06FD797C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 20362 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:69:e5:a7:40:c0:6f:d7:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=65185e12-3a1a-4b73-8129-70e5e7200a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:19:65:9e:93:15:81:be:4a:85:33:9d:51: 49:98:fe:d3:15:51:1c:f2:83:6e:11:b3:11:50:21: 76:11:ff:fb:a7:8e:fe:e5:1e:a6:54:5c:d4:70:bb: 2a:c3:0f:21:74:40:bd:ff:f2:8e:f9:7d:0e:bc:3c: 73:00:e5:3a:36:6a:7b:24:ee:f9:82:cf:56:c4:cf: 47:de:03:95:f6:c4:02:0b:fb:c8:68:56:8e:45:6e: 8a:58:e5:59:17:94:33:3f:50:00:ba:2d:f3:7a:70: e5:83:c8:65:29:72:1c:fa:13:66:3a:cd:e4:04:ea: 3f:c5:ce:d7:e5:2f:c5:bd:8f:db:ae:99:31:79:e6: 40:b8:f6:34:e2:85:78:25:00:22:f4:a7:9d:86:b5: 09:19:95:8e:45:b5:e6:b4:33:cc:2f:c5:8c:85:85: f8:6d:40:77:cf:ba:77:1c:91:c7:f4:49:90:d2:e4: d1:7e:fc:aa:2b:fa:1b:c3:fc:de:dc:61:aa:7b:d5: e6:75:91:3e:83:06:42:25:45:37:8d:a5:0c:70:ec: ac:b0:fe:66:a9:10:58:d9:82:32:2f:da:9c:eb:3c: 67:e7:2b:27:93:10:fa:f1:1e:2b:c6:27:62:07:86: c8:8f:7d:7c:33:2c:61:91:6c:0d:b7:2f:24:59:2c: 77:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:FF:C9:B3:54:4F:6D:DF:11:C2:73:04:8D:17:F4:F5:11:7B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:dd:a0:ad:d4:c6:ec:41:c2:07:f7:38:92:a9:8b:96:48:16: ac:96:b3:3f:07:be:a3:36:bb:6a:41:d7:a9:fe:3d:c8:d7:6b: e2:3d:a5:75:a1:3d:18:35:7d:33:8a:25:8b:f7:07:84:19:04: 2f:9f:7c:27:bd:bb:43:60:bb:9f:b2:43:7b:cf:14:79:34:63: 04:96:75:05:75:0b:15:02:fe:e8:d6:90:53:af:9c:25:24:06: 58:3a:49:87:b4:50:0c:46:df:ef:26:c6:b3:d3:24:25:14:9c: f2:88:27:4a:ad:c1:f0:be:48:c7:b8:5e:c8:0d:09:1c:7e:ae: 25:9c:99:6f:4c:58:8d:08:4f:e2:ac:46:e2:51:4b:d6:e4:b9: 0f:f0:6f:f4:49:2c:03:d8:dd:1f:57:99:cd:c9:3b:ed:90:b9: ca:5d:42:1d:9c:d0:83:86:19:d3:4b:c7:eb:17:3e:3e:47:f2: 39:2d:5b:99:f4:c9:88:6b:1d:c1:55:cd:f4:47:47:5e:6a:0f: 7a:f1:79:7e:ae:32:6b:09:20:98:1d:df:5f:a6:c6:c8:24:50: f1:8b:9f:1b:b2:0d:4f:c7:c5:d4:5c:4f:98:52:80:94:8d:63: 9b:47:82:aa:2e:23:22:6b:2e:bd:bd:62:25:ce:bb:b5:47:a4: 55:3a:9d:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y5p5adAwG/Xl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjUxODVlMTItM2ExYS00YjczLTgxMjktNzBlNWU3MjAwYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wZZZ6TFYG+SoUznVFJmP7TFVEc8oNuEbMR UCF2Ef/7p47+5R6mVFzUcLsqww8hdEC9//KO+X0OvDxzAOU6Nmp7JO75gs9WxM9H 3gOV9sQCC/vIaFaORW6KWOVZF5QzP1AAui3zenDlg8hlKXIc+hNmOs3kBOo/xc7X 5S/FvY/brpkxeeZAuPY04oV4JQAi9KedhrUJGZWORbXmtDPML8WMhYX4bUB3z7p3 HJHH9EmQ0uTRfvyqK/obw/ze3GGqe9XmdZE+gwZCJUU3jaUMcOyssP5mqRBY2YIy L9qc6zxn5ysnkxD68R4rxidiB4bIj318MyxhkWwNty8kWSx3GwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNqz/8mzVE9t3xHCcwSNF/T1EXt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwODg1NDQtYWYyZS0z MGU1LWFkNjItOGE5MDI0NjU2Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA83aCt1MbsQcIH9ziSqYuWSBaslrM/B76jNrtqQdep/j3I12viPaV1 oT0YNX0ziiWL9weEGQQvn3wnvbtDYLufskN7zxR5NGMElnUFdQsVAv7o1pBTr5wl JAZYOkmHtFAMRt/vJsaz0yQlFJzyiCdKrcHwvkjHuF7IDQkcfq4lnJlvTFiNCE/i rEbiUUvW5LkP8G/0SSwD2N0fV5nNyTvtkLnKXUIdnNCDhhnTS8frFz4+R/I5LVuZ 9MmIax3BVc30R0deag968Xl+rjJrCSCYHd9fpsbIJFDxi58bsg1Px8XUXE+YUoCU jWObR4KqLiMiay69vWIlzru1R6RVOp0h -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:37 2025 by rpki-client