$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa File: 1b78363f-e1eb-3ae5-ad01-db598270fa74.roa (raw, json) Hash identifier: aZujgqYsmwjXx0nvd7ARHtKXhhzmsr7kFFEA5nbkf0c= Subject key identifier: 01:F6:46:B6:F1:9D:15:9C:A3:62:55:05:7C:5C:4B:14:20:44:7D:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E733D6C6D36BAFC73C5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 32651 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:d6:c6:d3:6b:af:c7:3c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=7262b1f7-be35-4793-9f2e-beba3b793cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:4a:7f:be:84:39:e9:14:7c:17:b1:41:7c: 63:39:33:9c:c5:0c:c1:79:80:70:39:71:3d:41:7c: 44:7d:e7:bc:03:0a:18:4c:15:b3:7f:e8:43:c0:4d: f2:b8:81:84:05:e8:2a:6c:61:e4:05:38:e5:3d:84: 2c:0f:3d:0d:76:1c:67:92:e1:42:28:61:6b:54:bf: b4:32:c6:ac:22:3a:fb:43:4c:2c:a8:42:e6:eb:50: d1:73:12:76:a0:75:67:c4:83:0c:22:0b:74:8a:f4: a2:ed:de:2b:fd:4d:00:b4:bb:1a:46:71:82:09:91: 12:f4:40:69:15:17:ff:e9:35:6b:b6:16:c5:05:a4: a2:f7:66:3d:65:b5:57:04:2c:cf:c1:79:7e:07:3b: 2a:49:1e:06:34:23:ca:1c:7b:95:63:a9:0d:ea:2b: 54:d3:a1:2d:83:5c:ec:28:4f:8c:13:f0:5d:12:d3: 82:8d:be:21:1f:9f:2a:33:3b:89:31:78:7e:ad:10: a1:43:0e:2e:b8:ac:46:51:45:54:bb:6c:87:08:b8: f9:72:cd:35:7e:2a:55:e1:c9:43:9d:b0:bf:49:32: a0:02:81:ea:1d:89:5b:2a:08:4f:35:9b:92:cc:29: 81:e2:2a:52:2f:f0:2c:19:9e:35:ce:36:a8:70:5c: c4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:46:B6:F1:9D:15:9C:A3:62:55:05:7C:5C:4B:14:20:44:7D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:39:bc:e8:6b:1d:ab:2a:8c:cf:d3:a0:9e:b4:b4:21:3e:a8: 27:55:b6:f5:4c:02:f5:d7:24:55:e2:bc:49:1d:69:12:de:eb: 01:fc:89:1c:95:8a:2a:b6:91:b4:7b:7e:4c:cd:d5:02:b6:b8: d6:a1:df:86:0d:37:c4:a1:8c:37:1f:a9:3e:20:eb:2d:05:f1: 61:08:06:7f:5c:e6:b7:5c:35:9c:0d:f8:e8:c4:6a:d7:4b:6d: f5:39:d6:d2:f9:e6:e0:0e:b5:21:c6:18:9f:ae:4a:cf:d7:71: 9b:4a:87:2d:fe:ca:4b:9e:b3:6c:3b:1b:8b:8a:fe:f4:af:3b: e5:35:7a:37:46:86:9c:d7:dd:4e:e0:50:f9:a4:6f:d4:37:e5: 08:11:c1:33:fe:1b:be:23:0c:c1:18:80:27:5d:80:b8:2a:74: d5:f5:30:26:ec:d8:19:37:5c:28:48:c3:cc:4f:07:19:23:49: 30:66:fb:5b:45:48:02:66:69:a1:08:45:87:cd:26:fc:8c:8e: 1f:0f:e6:b2:37:de:14:fc:13:42:be:97:4e:b9:cb:c3:16:d7: cb:96:5e:2b:76:a4:34:6d:c5:1b:5e:e8:74:c6:28:f5:9e:dd: 9a:20:38:5e:2f:62:d4:ad:51:2a:4e:c8:35:d6:d1:60:5a:ec: fb:d9:86:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zPWxtNrr8c8XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NzI2MmIxZjctYmUzNS00NzkzLTlmMmUtYmViYTNiNzkzY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLlKf76EOekUfBexQXxjOTOcxQzBeYBwOXE9 QXxEfee8AwoYTBWzf+hDwE3yuIGEBegqbGHkBTjlPYQsDz0NdhxnkuFCKGFrVL+0 MsasIjr7Q0wsqELm61DRcxJ2oHVnxIMMIgt0ivSi7d4r/U0AtLsaRnGCCZES9EBp FRf/6TVrthbFBaSi92Y9ZbVXBCzPwXl+BzsqSR4GNCPKHHuVY6kN6itU06Etg1zs KE+ME/BdEtOCjb4hH58qMzuJMXh+rRChQw4uuKxGUUVUu2yHCLj5cs01fipV4clD nbC/STKgAoHqHYlbKghPNZuSzCmB4ipSL/AsGZ41zjaocFzElwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAH2RrbxnRWco2JVBXxcSxQgRH1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI3ODM2M2YtZTFlYi0z YWU1LWFkMDEtZGI1OTgyNzBmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlObzoax2rKozP06CetLQhPqgnVbb1TAL11yRV4rxJHWkS3usB/Ikc lYoqtpG0e35MzdUCtrjWod+GDTfEoYw3H6k+IOstBfFhCAZ/XOa3XDWcDfjoxGrX S231OdbS+ebgDrUhxhifrkrP13GbSoct/spLnrNsOxuLiv70rzvlNXo3Roac191O 4FD5pG/UN+UIEcEz/hu+IwzBGIAnXYC4KnTV9TAm7NgZN1woSMPMTwcZI0kwZvtb RUgCZmmhCEWHzSb8jI4fD+ayN94U/BNCvpdOucvDFtfLll4rdqQ0bcUbXuh0xij1 nt2aIDheL2LUrVEqTsg11tFgWuz72Yaq -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:08 2025 by rpki-client