$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12ad9e3a-7283-3df0-b315-29a7e751a50f.roa File: 12ad9e3a-7283-3df0-b315-29a7e751a50f.roa (raw, json) Hash identifier: y1JRbRos8WtvvI/gn+Wf9dEQk3gAdWK4hE80gYgqacA= Subject key identifier: 1A:16:BB:5F:19:03:33:8C:3D:FC:08:7E:F9:F6:E4:98:7B:53:13:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB00E5D9A4E04CAC51C20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12ad9e3a-7283-3df0-b315-29a7e751a50f.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396589 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:0e:5d:9a:4e:04:ca:c5:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=10fcb0e5-0c07-451d-b1ba-18995da21374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:13:a2:17:12:a8:91:eb:95:5e:c0:7b:c6: a5:2b:ee:63:0b:41:c3:56:c3:3f:61:e5:66:4d:67: d6:1e:a3:83:cc:23:cf:ee:c8:97:e0:f2:32:2d:d3: 7e:84:1d:87:2a:dc:97:7e:32:cc:74:f9:a7:b6:79: 7d:46:47:cb:1c:58:8a:ec:97:3d:68:73:28:43:fa: c7:b8:c7:d2:96:52:9d:a6:bf:c9:b9:dd:4c:61:14: 08:f4:19:37:5a:32:36:88:e8:48:63:14:70:88:af: da:27:73:ab:cf:67:be:f4:3e:0c:2c:7b:c3:9a:94: 78:42:a6:0e:b3:25:75:ac:9b:7d:fd:13:2f:72:95: d8:5a:97:13:98:0b:e1:83:0d:c2:24:e3:f4:4e:78: 28:a7:bd:f6:97:77:57:21:e5:b6:0a:ad:38:d5:a8: 89:9b:2f:80:a2:06:c1:a8:89:a6:15:6b:6b:6d:c4: ff:8a:d7:c6:c8:f2:cb:4c:19:11:10:d2:6b:47:17: 1f:1e:70:ca:5f:6b:c2:06:42:4b:a0:08:00:8f:dc: bd:12:44:b2:d7:41:54:e1:d8:31:0e:92:35:24:2a: ed:65:d2:a1:cf:d9:49:b1:39:04:20:0f:09:e0:76: d3:8f:b8:b2:3b:81:a6:d6:d8:2c:f1:3d:c7:bb:59: f5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:16:BB:5F:19:03:33:8C:3D:FC:08:7E:F9:F6:E4:98:7B:53:13:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12ad9e3a-7283-3df0-b315-29a7e751a50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:93:35:af:91:f3:92:28:b7:7d:b9:a9:40:eb:33:83:e2:22: 8f:27:70:2b:d8:de:2f:41:51:8d:7b:52:56:9f:7b:b3:8c:49: 87:87:53:28:6b:ee:d6:fb:ed:62:da:58:6d:45:9f:f4:15:d0: b9:f7:a1:15:38:9d:a7:5c:54:10:fb:9e:a1:08:a7:d5:9e:2e: 45:d7:d0:5e:54:07:f2:69:36:0d:02:36:70:40:7b:0e:c0:45: 78:fe:10:4e:25:fa:17:40:e0:38:b6:f6:b2:fb:2b:b1:f7:cd: 15:25:ee:4a:29:92:82:4c:63:88:27:be:ed:26:97:74:20:30: 4a:ff:c6:52:bf:b4:db:6a:b7:2b:7c:90:b7:20:f6:53:97:cb: 35:77:22:20:40:1f:7c:d1:b4:5c:f1:7f:55:94:3d:03:b2:a1: 1c:0f:5c:1e:81:d4:28:9b:81:91:04:b9:85:e0:ec:97:a0:38: b7:02:30:1a:0b:bd:f8:d3:33:96:e1:0f:7f:53:e9:47:85:cb: 08:ec:2e:dc:db:32:28:6d:90:a8:7e:d9:a9:ce:b2:4c:4b:75: f7:5c:ef:d2:39:82:3d:f6:5a:62:5b:c2:ce:d8:e0:9d:1d:8a: 75:aa:67:5c:42:e3:cb:b3:de:34:54:f9:7e:98:80:7e:1d:92: ef:9b:17:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLAOXZpOBMrFHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTBmY2IwZTUtMGMwNy00NTFkLWIxYmEtMTg5OTVkYTIxMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH0TohcSqJHrlV7Ae8alK+5jC0HDVsM/YeVm TWfWHqODzCPP7siX4PIyLdN+hB2HKtyXfjLMdPmntnl9RkfLHFiK7Jc9aHMoQ/rH uMfSllKdpr/Jud1MYRQI9Bk3WjI2iOhIYxRwiK/aJ3Orz2e+9D4MLHvDmpR4QqYO syV1rJt9/RMvcpXYWpcTmAvhgw3CJOP0Tngop732l3dXIeW2Cq041aiJmy+AogbB qImmFWtrbcT/itfGyPLLTBkRENJrRxcfHnDKX2vCBkJLoAgAj9y9EkSy10FU4dgx DpI1JCrtZdKhz9lJsTkEIA8J4HbTj7iyO4Gm1tgs8T3Hu1n19wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoWu18ZAzOMPfwIfvn25Jh7UxNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTJhZDllM2EtNzI4My0z ZGYwLWIzMTUtMjlhN2U3NTFhNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6TNa+R85Iot325qUDrM4PiIo8ncCvY3i9BUY17Ulafe7OMSYeHUyhr 7tb77WLaWG1Fn/QV0Ln3oRU4nadcVBD7nqEIp9WeLkXX0F5UB/JpNg0CNnBAew7A RXj+EE4l+hdA4Di29rL7K7H3zRUl7kopkoJMY4gnvu0ml3QgMEr/xlK/tNtqtyt8 kLcg9lOXyzV3IiBAH3zRtFzxf1WUPQOyoRwPXB6B1CibgZEEuYXg7JegOLcCMBoL vfjTM5bhD39T6UeFywjsLtzbMihtkKh+2anOskxLdfdc79I5gj32WmJbws7Y4J0d inWqZ1xC48uz3jRU+X6YgH4dku+bF30= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:33 2025 by rpki-client