$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa File: 172e475a-8153-336c-8bb5-c27b6f69a079.roa (raw, json) Hash identifier: +YTSOlfgPz146ErIXcw+NZptgdE4X291kwPAHTb/KN4= Subject key identifier: BA:E8:C4:4E:32:CE:0F:4E:BA:A8:72:D7:22:BA:9C:67:92:39:F6:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72C8E7AF582CD8FCF1000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397194 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2c:8e:7a:f5:82:cd:8f:cf:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=59f4e777-71aa-4e4d-8882-c6fcfece4417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:82:a2:2b:4d:8f:1a:ac:46:98:3e:73:16: 47:c4:fc:e7:ca:6d:08:65:7b:98:c2:97:07:be:ef: 3c:41:bc:bb:c5:ae:bb:25:4c:65:49:a4:e7:06:fa: b6:01:02:fe:cc:69:f4:f4:e2:3b:e6:a8:55:f6:85: 1a:ae:33:1a:68:e0:81:24:57:28:6e:ac:01:93:56: 12:ef:65:70:c2:09:82:ac:51:4b:23:77:65:81:90: 83:7a:dc:a9:b8:1a:af:65:5d:e0:7d:6b:a8:6d:29: 92:6a:22:08:7c:5a:79:26:21:b4:8c:94:67:31:dc: cd:2e:de:cc:b1:39:f2:ca:58:c2:23:36:ac:c6:62: 21:d1:7e:38:6c:a4:33:a9:f0:30:d9:e8:a3:ee:21: 1d:13:81:96:a6:9c:e8:ba:a6:a9:02:2c:05:3b:c1: 63:52:bc:2d:cf:30:10:d1:f2:f0:68:44:49:d1:07: de:d6:a3:9a:08:87:c3:0d:9e:1c:f3:86:20:9d:25: 56:ec:57:ab:eb:57:68:ad:8e:84:ba:6a:ad:86:d4: f8:77:48:18:fc:99:d5:e2:bb:e8:94:81:b5:48:3b: 84:05:b3:ee:b6:f2:20:4b:a7:e2:41:8d:88:56:a6: 17:25:9b:8d:04:06:80:89:2a:d1:79:fc:70:99:c3: 31:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:C4:4E:32:CE:0F:4E:BA:A8:72:D7:22:BA:9C:67:92:39:F6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:04:ab:5d:f2:f6:2a:be:73:78:a4:1d:13:2d:b7:a2:4b: 36:65:d7:1f:9d:0f:af:7f:f6:62:a0:c5:72:69:e7:7f:3f:ce: 02:d6:a6:69:22:69:26:2e:53:bd:8f:70:71:8a:73:c1:90:9f: 31:b2:a3:f9:cd:dc:3a:82:5f:65:78:68:70:8b:6c:06:b2:48: c0:7b:e8:06:f7:0e:5b:2f:e6:2f:ff:51:7c:8f:ab:b7:b8:ad: d1:8e:2d:b8:b8:6a:8c:3a:94:5e:4b:c4:66:d0:22:ff:b4:93: b4:17:93:bb:7b:22:62:cc:d2:e0:17:bc:7b:a2:7f:6b:e8:91: dd:4f:1c:91:0b:bd:ce:73:00:4b:9e:96:81:01:82:7b:cf:e6: 9d:6b:13:65:0f:8c:bf:a6:27:f5:88:7d:2f:2a:e4:77:c8:3e: 36:79:d3:3a:4d:f7:85:8c:27:59:36:ec:20:2f:30:bf:0b:59: 60:06:a2:86:6d:72:a3:3b:4a:c9:4e:6b:99:82:ea:32:77:60: 45:61:e7:fd:38:30:1d:4f:0d:94:a5:8f:66:7c:cd:47:8b:89: 17:fb:c7:f0:a5:fc:08:3d:0e:ec:33:e9:2a:5e:92:00:11:d1: ab:68:b7:dc:8c:fe:d5:25:64:57:e6:da:ec:bf:18:b3:2a:ca: 2a:a6:f9:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yyOevWCzY/PEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTlmNGU3NzctNzFhYS00ZTRkLTg4ODItYzZmY2ZlY2U0NDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3KCoitNjxqsRpg+cxZHxPznym0IZXuYwpcH vu88Qby7xa67JUxlSaTnBvq2AQL+zGn09OI75qhV9oUarjMaaOCBJFcobqwBk1YS 72VwwgmCrFFLI3dlgZCDetypuBqvZV3gfWuobSmSaiIIfFp5JiG0jJRnMdzNLt7M sTnyyljCIzasxmIh0X44bKQzqfAw2eij7iEdE4GWppzouqapAiwFO8FjUrwtzzAQ 0fLwaERJ0Qfe1qOaCIfDDZ4c84YgnSVW7Fer61dorY6EumqthtT4d0gY/JnV4rvo lIG1SDuEBbPutvIgS6fiQY2IVqYXJZuNBAaAiSrRefxwmcMxkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLroxE4yzg9Ouqhy1yK6nGeSOfagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTcyZTQ3NWEtODE1My0z MzZjLThiYjUtYzI3YjZmNjlhMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRhQSrXfL2Kr5zeKQdEy23oks2ZdcfnQ+vf/ZioMVyaed/P84C1qZp ImkmLlO9j3BxinPBkJ8xsqP5zdw6gl9leGhwi2wGskjAe+gG9w5bL+Yv/1F8j6u3 uK3Rji24uGqMOpReS8Rm0CL/tJO0F5O7eyJizNLgF7x7on9r6JHdTxyRC73OcwBL npaBAYJ7z+adaxNlD4y/pif1iH0vKuR3yD42edM6TfeFjCdZNuwgLzC/C1lgBqKG bXKjO0rJTmuZguoyd2BFYef9ODAdTw2UpY9mfM1Hi4kX+8fwpfwIPQ7sM+kqXpIA EdGraLfcjP7VJWRX5trsvxizKsoqpvk3 -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:02 2025 by rpki-client