$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa File: 192d22d0-af30-3acb-b853-5e328fdab43a.roa (raw, json) Hash identifier: 8U5nDkNU9+BGir3NOX0SSVNfEjxFtTe0t//NJz+wGvQ= Subject key identifier: 99:3F:8B:BF:BD:9F:B0:A1:94:ED:FE:34:E8:26:BA:B0:75:55:CC:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB44D4E0D2F025CFF4D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396615 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b4:4d:4e:0d:2f:02:5c:ff:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=22482104-136c-4357-ba7d-9fedbdc10dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:c7:1d:5c:0c:21:fa:64:9e:bb:5d:3c:d1: 1a:6c:60:0b:7e:96:0b:68:ad:b3:1d:14:ad:77:be: 1d:3d:24:4a:23:ec:d4:dd:0b:e8:4b:5d:5c:b5:eb: 24:b3:4f:45:df:97:70:11:a5:bf:97:73:09:ea:63: 89:14:9e:f5:8b:c1:5b:5f:e9:c0:f0:f0:0b:7d:0f: 46:52:e3:29:ca:fc:61:f1:35:36:a4:39:de:0a:e7: ef:76:78:00:1e:1c:17:6f:17:d4:74:6e:5d:a4:34: cb:9d:0d:65:4b:8e:cd:6a:27:cc:a1:5b:d9:57:b6: 99:52:6f:9e:1d:59:30:7d:50:d9:0e:51:5a:ed:71: 8a:10:a6:91:29:5b:ff:9d:f7:e3:8f:c8:7f:74:6a: e9:87:e7:de:cb:ba:9c:64:32:2d:54:e8:18:13:56: 25:75:5f:0e:de:53:61:d7:df:7a:b4:ce:2c:5a:df: aa:fd:5c:9d:ac:0f:a8:6f:cb:de:2a:60:94:b1:15: 40:e4:bb:fc:fe:a3:53:67:9b:ab:e2:3c:88:fa:b6: b9:b4:9e:0c:05:20:43:c7:d1:0e:10:d4:1e:46:9c: 2d:5e:63:19:8f:69:71:21:89:c0:66:54:03:77:75: b3:89:de:9a:bd:93:8d:c8:a0:26:a2:44:1d:79:6f: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:8B:BF:BD:9F:B0:A1:94:ED:FE:34:E8:26:BA:B0:75:55:CC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d0:7a:20:3d:46:e1:19:44:27:1d:06:6a:58:12:08:d6:ac: 0d:76:1a:14:52:79:06:cb:4b:6f:e3:75:6b:ce:46:cb:52:eb: b8:e7:5f:75:bf:4d:f2:c4:d3:14:db:d6:9e:e8:20:d8:a5:17: 3b:1a:d4:6a:4a:b2:20:6d:32:ad:3a:8e:c3:e3:ac:ea:0a:66: 10:3a:74:39:17:98:65:ec:5b:09:da:6c:30:55:af:0c:50:99: eb:aa:84:2c:46:cc:b1:8c:3e:63:29:1d:e4:e8:3e:0a:b6:9b: c7:da:1e:4b:75:4f:f1:0a:5d:b1:90:6e:04:6e:c1:93:1a:6e: 23:c1:37:97:2e:d0:ed:c2:83:4e:f2:97:eb:06:96:bd:28:ff: ad:5a:79:01:52:88:5d:c0:e6:ba:15:59:bb:03:43:cc:89:c0: 64:78:13:49:4c:bb:8b:1d:cc:0f:0b:fc:73:bb:7b:3f:90:09: f0:96:b8:85:67:ee:76:a7:8b:b6:66:ad:2b:26:fb:84:88:0f: fa:59:48:91:54:6a:bf:07:73:b5:b2:20:60:b5:38:c1:66:b7: 3c:ee:ca:f0:d3:5d:d2:ae:b1:8d:f0:e0:13:df:5a:26:22:a0: 5c:3b:f8:c8:2c:a7:bd:34:3c:95:dc:2b:a7:e8:17:cd:6d:28: f4:81:5d:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLRNTg0vAlz/TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjI0ODIxMDQtMTM2Yy00MzU3LWJhN2QtOWZlZGJkYzEwZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9nHHVwMIfpknrtdPNEabGALfpYLaK2zHRSt d74dPSRKI+zU3QvoS11ctesks09F35dwEaW/l3MJ6mOJFJ71i8FbX+nA8PALfQ9G UuMpyvxh8TU2pDneCufvdngAHhwXbxfUdG5dpDTLnQ1lS47NaifMoVvZV7aZUm+e HVkwfVDZDlFa7XGKEKaRKVv/nffjj8h/dGrph+fey7qcZDItVOgYE1YldV8O3lNh 1996tM4sWt+q/VydrA+ob8veKmCUsRVA5Lv8/qNTZ5ur4jyI+ra5tJ4MBSBDx9EO ENQeRpwtXmMZj2lxIYnAZlQDd3Wzid6avZONyKAmokQdeW8jpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk/i7+9n7ChlO3+NOgmurB1VczaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZDIyZDAtYWYzMC0z YWNiLWI4NTMtNWUzMjhmZGFiNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXQeiA9RuEZRCcdBmpYEgjWrA12GhRSeQbLS2/jdWvORstS67jnX3W/ TfLE0xTb1p7oINilFzsa1GpKsiBtMq06jsPjrOoKZhA6dDkXmGXsWwnabDBVrwxQ meuqhCxGzLGMPmMpHeToPgq2m8faHkt1T/EKXbGQbgRuwZMabiPBN5cu0O3Cg07y l+sGlr0o/61aeQFSiF3A5roVWbsDQ8yJwGR4E0lMu4sdzA8L/HO7ez+QCfCWuIVn 7nani7ZmrSsm+4SID/pZSJFUar8Hc7WyIGC1OMFmtzzuyvDTXdKusY3w4BPfWiYi oFw7+Mgsp700PJXcK6foF81tKPSBXVo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:03 2025 by rpki-client