$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa File: 1956df97-bede-379e-ba42-7e3c7185bb31.roa (raw, json) Hash identifier: b/XAqs18ZtwGObTsgoNdOISfUZZRnIm5pIKCKB7qg50= Subject key identifier: 93:26:D3:76:29:61:F4:08:77:9D:0C:23:D0:F4:10:4D:1C:4D:14:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72D9110A50F1B92388C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36624 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:91:10:a5:0f:1b:92:38:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=dc5705cd-bb7f-4d7f-ae9a-4b675ca621b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c0:e9:ef:d3:62:69:55:b4:d5:ef:8d:b2:c3: ff:82:a0:13:f7:b0:b6:9b:cd:2a:75:55:5f:75:f8: 95:1c:c2:ab:b0:be:d1:c4:3d:2a:f0:9d:b8:eb:51: 90:3b:06:37:03:9a:e0:03:ea:00:de:59:2d:e4:a1: 90:11:67:9d:c6:54:a6:e7:91:59:55:cd:10:e0:67: 00:dc:30:9c:be:73:1d:87:13:e6:f5:70:f5:8c:df: a6:b6:a5:b3:51:12:bd:ef:9a:64:27:d6:50:be:1b: 92:8c:50:0b:89:10:c7:b9:57:77:2a:70:9a:cd:9c: 5e:9d:90:ce:47:cf:10:bf:48:b4:58:1a:33:02:2a: 62:f7:f0:2f:15:ed:72:1c:3a:cd:ef:54:41:02:81: c9:dc:d0:ad:41:d5:5d:51:af:53:4c:e7:c5:b4:15: eb:ee:ff:54:21:ae:aa:c1:8e:a7:f3:17:ca:90:9b: 6c:a0:88:84:55:1c:62:2d:d0:fa:3b:1c:5f:38:b2: 8b:7c:1b:ce:60:05:6c:e5:d4:1e:68:95:5c:5d:fa: 4c:b6:ec:f1:8c:cc:62:4e:a8:1b:a8:46:d5:40:58: 3a:f7:41:16:a4:7d:ba:a8:ac:a5:d4:3b:fc:dc:e7: 5f:46:ac:b1:52:ee:27:07:bb:29:b6:09:a0:90:d3: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:26:D3:76:29:61:F4:08:77:9D:0C:23:D0:F4:10:4D:1C:4D:14:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1956df97-bede-379e-ba42-7e3c7185bb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7b:55:c2:a0:27:7b:03:0b:4e:08:07:12:64:99:31:b8:1c: 16:2f:32:fe:ca:09:8a:5d:49:1b:6f:19:fc:b7:fe:da:68:2c: 17:a6:41:b0:39:df:a7:0c:df:dc:25:6e:6a:fa:a6:5c:aa:80: 75:6a:55:9f:71:ac:67:89:c1:1c:f7:e8:62:4f:35:95:7d:c4: 96:b6:08:75:ed:c4:af:ad:fb:29:5d:36:ad:b8:b3:b4:14:77: 2e:50:cd:52:f6:4e:24:36:94:ab:a8:15:61:d6:15:d2:e5:a6: b8:ff:81:5b:44:f8:5e:87:03:b4:fe:e1:f8:ca:fb:ca:0a:24: 35:0f:43:96:03:6b:4d:90:4f:49:17:72:6e:b2:b9:92:d1:22: 58:9a:33:80:15:5c:9d:92:d1:ac:9c:81:1f:99:90:2e:61:ae: 17:5b:fe:d8:25:c4:99:57:c9:08:fc:58:a7:ef:47:ef:aa:53: 0a:6d:3f:41:5f:70:cd:69:e4:5f:6f:0b:22:71:4d:bd:4c:f4: de:ed:c6:9d:09:ca:d5:4f:f9:f6:bc:4e:7b:2f:f5:db:1e:e9: 3a:6e:de:69:2e:b4:2c:bd:46:e5:f2:48:74:cf:3b:91:aa:ca: 02:c1:7d:0d:65:42:b3:64:ff:f5:89:95:e1:aa:fb:af:92:e4: 10:19:48:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y2REKUPG5I4jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGM1NzA1Y2QtYmI3Zi00ZDdmLWFlOWEtNGI2NzVjYTYyMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisDp79NiaVW01e+NssP/gqAT97C2m80qdVVf dfiVHMKrsL7RxD0q8J2461GQOwY3A5rgA+oA3lkt5KGQEWedxlSm55FZVc0Q4GcA 3DCcvnMdhxPm9XD1jN+mtqWzURK975pkJ9ZQvhuSjFALiRDHuVd3KnCazZxenZDO R88Qv0i0WBozAipi9/AvFe1yHDrN71RBAoHJ3NCtQdVdUa9TTOfFtBXr7v9UIa6q wY6n8xfKkJtsoIiEVRxiLdD6OxxfOLKLfBvOYAVs5dQeaJVcXfpMtuzxjMxiTqgb qEbVQFg690EWpH26qKyl1Dv83OdfRqyxUu4nB7sptgmgkNOlIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJMm03YpYfQId50MI9D0EE0cTRSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk1NmRmOTctYmVkZS0z NzllLWJhNDItN2UzYzcxODViYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAae1XCoCd7AwtOCAcSZJkxuBwWLzL+ygmKXUkbbxn8t/7aaCwXpkGw Od+nDN/cJW5q+qZcqoB1alWfcaxnicEc9+hiTzWVfcSWtgh17cSvrfspXTatuLO0 FHcuUM1S9k4kNpSrqBVh1hXS5aa4/4FbRPhehwO0/uH4yvvKCiQ1D0OWA2tNkE9J F3JusrmS0SJYmjOAFVydktGsnIEfmZAuYa4XW/7YJcSZV8kI/Fin70fvqlMKbT9B X3DNaeRfbwsicU29TPTe7cadCcrVT/n2vE57L/XbHuk6bt5pLrQsvUbl8kh0zzuR qsoCwX0NZUKzZP/1iZXhqvuvkuQQGUgi -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:53 2025 by rpki-client