$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa File: 2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa (raw, json) Hash identifier: afx5wMLQgd9EMLkeJFj7w/FW9hTkIztekuWlPuFJnj0= Subject key identifier: 43:37:F9:68:B3:13:19:DD:60:BE:BD:DF:00:A6:75:62:CE:71:88:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB133AB8652CE24388400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 32651 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:33:ab:86:52:ce:24:38:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0e939cad-f935-46cb-b76d-ff791795cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:a0:68:a5:41:d3:39:8c:dd:90:ef:6a:73: ef:0a:3e:76:fc:d5:dc:f0:2c:4b:86:6f:a6:37:85: ed:2f:34:94:55:1f:66:0a:50:3f:39:7c:3e:e4:7f: 60:38:74:af:0d:ee:ed:d2:0f:f0:90:60:e5:08:00: f7:c2:a1:98:85:80:fd:83:ff:d9:64:c2:1c:ad:4d: 84:a8:af:1b:8a:d5:15:24:d6:43:e2:9d:df:00:7b: 61:ab:a8:31:9f:57:91:d3:a5:d7:f0:89:43:99:bb: c2:3f:11:d3:7d:e1:f1:74:4c:c4:d2:48:aa:e0:c6: 41:03:fd:76:5a:68:ce:11:d2:83:1c:11:33:1b:11: 30:61:da:e0:3c:30:de:5c:5e:04:c8:73:24:12:1a: 7e:1a:00:2f:7e:d7:43:35:b3:d7:9b:f7:e6:a0:68: c2:38:cf:c0:18:3b:55:c4:5b:ea:a1:09:1f:2a:bd: fb:2a:2a:97:ab:f3:f3:a0:ee:88:f9:a9:98:56:04: 35:f7:ee:72:0f:11:4e:24:53:29:00:16:01:e0:10: 42:e9:53:b8:f4:53:de:e4:e5:17:9a:b0:e3:48:0b: fe:19:60:c9:1a:7b:63:21:3a:72:e5:1f:b6:ca:6b: 84:74:7f:e9:6f:5a:2a:c0:42:5f:2c:24:9c:04:6c: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:F9:68:B3:13:19:DD:60:BE:BD:DF:00:A6:75:62:CE:71:88:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2bb689e0-e6c6-340a-87ec-681e6120f5ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d7:34:31:bb:8e:b4:a6:0e:9b:7d:0a:4e:56:e4:a3:4b:ad: d3:6a:4b:32:97:3a:a2:a4:1a:72:ac:20:8f:98:2d:ff:c4:68: cc:55:5e:37:b9:6c:51:51:a9:46:e5:92:93:10:d0:c4:23:71: d2:16:67:f0:cb:1e:51:d4:32:9c:b6:39:26:68:5f:bb:00:a0: 7e:07:a5:6c:e0:a3:88:28:aa:49:55:31:7d:23:fd:d8:53:2b: 16:bb:5c:32:6b:c6:b6:42:ce:15:e0:50:df:33:6f:4e:ce:07: 2f:09:73:8c:ae:f3:1b:f4:db:35:2b:e5:11:c0:9e:9e:77:05: 11:b5:39:32:d9:64:70:43:1b:5a:6b:65:8c:29:8e:3d:99:d1: 2a:b8:d8:a9:22:46:84:25:a5:6d:97:6e:7b:ff:7b:ac:34:fb: 75:8f:76:2b:71:dc:d6:a8:5f:2f:52:a4:11:fc:d4:70:0b:9f: da:ec:e3:55:ae:c4:4d:94:07:73:d4:85:e4:0f:4d:41:01:fa: ed:50:6d:1d:4b:7d:96:37:86:b1:45:6b:de:64:04:3e:75:0e: a0:07:9c:25:d9:00:5d:44:87:29:71:af:b6:1d:6c:c1:f1:91: c6:08:59:22:f1:4a:9f:04:62:b0:ea:17:09:18:52:fc:d7:96: 92:35:da:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLEzq4ZSziQ4hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGU5MzljYWQtZjkzNS00NmNiLWI3NmQtZmY3OTE3OTVjZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZigaKVB0zmM3ZDvanPvCj52/NXc8CxLhm+m N4XtLzSUVR9mClA/OXw+5H9gOHSvDe7t0g/wkGDlCAD3wqGYhYD9g//ZZMIcrU2E qK8bitUVJNZD4p3fAHthq6gxn1eR06XX8IlDmbvCPxHTfeHxdEzE0kiq4MZBA/12 WmjOEdKDHBEzGxEwYdrgPDDeXF4EyHMkEhp+GgAvftdDNbPXm/fmoGjCOM/AGDtV xFvqoQkfKr37KiqXq/PzoO6I+amYVgQ19+5yDxFOJFMpABYB4BBC6VO49FPe5OUX mrDjSAv+GWDJGntjITpy5R+2ymuEdH/pb1oqwEJfLCScBGx93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM3+WizExndYL693wCmdWLOcYivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmJiNjg5ZTAtZTZjNi0z NDBhLTg3ZWMtNjgxZTYxMjBmNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7XNDG7jrSmDpt9Ck5W5KNLrdNqSzKXOqKkGnKsII+YLf/EaMxVXje5 bFFRqUblkpMQ0MQjcdIWZ/DLHlHUMpy2OSZoX7sAoH4HpWzgo4goqklVMX0j/dhT Kxa7XDJrxrZCzhXgUN8zb07OBy8Jc4yu8xv02zUr5RHAnp53BRG1OTLZZHBDG1pr ZYwpjj2Z0Sq42KkiRoQlpW2Xbnv/e6w0+3WPditx3NaoXy9SpBH81HALn9rs41Wu xE2UB3PUheQPTUEB+u1QbR1LfZY3hrFFa95kBD51DqAHnCXZAF1Ehylxr7YdbMHx kcYIWSLxSp8EYrDqFwkYUvzXlpI12pM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:58 2025 by rpki-client