$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa File: 3096e349-4454-38f3-b7ed-c55015678503.roa (raw, json) Hash identifier: jeMGvlDCh9IoIaYa/0LZbEZIymPna2p8dZZv4lQc7pA= Subject key identifier: D8:B3:21:09:FC:40:26:4A:99:19:79:0C:3A:D6:B8:57:6C:56:A8:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB0640F96EBF3FED48380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 36616 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:64:0f:96:eb:f3:fe:d4:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=2e3ad209-c9cc-4c24-abc2-e104d52146a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:d6:aa:fc:3e:a1:5a:9c:f7:41:77:ff:7f: 1c:f0:f9:4e:2d:d4:6f:52:01:0b:1d:1f:e7:26:b4: cf:19:7e:ae:1e:a9:06:f1:83:11:de:2a:51:e5:5c: 7b:0e:db:2d:2d:d3:55:8c:18:c6:42:14:79:71:b7: 6e:16:b0:ab:4f:b1:e7:ec:57:ae:8e:5b:ed:61:61: c2:3a:92:dc:fc:4d:76:2f:1b:bb:a4:23:41:38:db: 69:c9:9f:db:6a:21:25:52:5a:d1:57:c5:24:c3:25: 00:be:1b:e9:79:15:68:28:e8:d9:a6:9a:ab:fe:dd: bb:52:15:7d:69:2f:8f:2a:b7:ba:d1:12:20:09:46: d5:d5:f3:71:4d:c7:0f:22:f7:5a:4d:25:eb:23:39: ee:01:0e:3f:1b:66:78:0a:2e:56:5b:2e:bd:4b:49: 4d:02:a6:10:cd:1a:4c:58:8a:14:7c:32:c1:da:94: bb:ba:98:6c:3c:5b:ef:c2:84:bf:7f:19:f8:ec:87: 19:0e:78:2d:04:f1:91:15:c0:44:e9:09:40:8d:cf: f0:65:66:1f:d5:88:6b:4c:a9:e7:62:de:b6:ee:58: 2a:d2:ea:b4:8d:ad:3e:86:63:5b:57:18:29:aa:4b: e1:a3:49:82:50:da:1a:f2:d8:1f:c5:5a:c7:4f:5c: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B3:21:09:FC:40:26:4A:99:19:79:0C:3A:D6:B8:57:6C:56:A8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:26:17:c1:c6:90:2e:67:38:4b:f2:08:d8:3a:29:56:a7:e2: 08:87:9e:d3:c4:59:ed:fa:57:19:ab:ea:29:14:3a:ef:03:79: 60:40:64:e3:ab:e2:72:49:06:e2:39:bb:9f:c7:be:b0:a3:f5: a7:03:82:98:26:ec:05:20:c5:6c:24:7f:62:67:62:24:f4:5d: ca:99:9c:84:ba:74:65:ec:c7:6f:b6:11:18:55:dc:66:4d:ee: c7:1f:a4:60:51:28:bc:50:a2:2b:b1:24:25:e8:ac:7d:71:85: a0:b2:81:22:36:06:5d:75:65:77:55:b3:b0:2f:42:0d:c8:e9: 7f:24:66:2a:cc:a7:e2:2f:7c:b1:31:8f:15:4a:13:47:18:a8: fc:92:84:e0:85:6a:9f:c3:65:86:11:aa:c1:34:55:16:12:d3: 24:d7:5b:2e:a5:81:62:23:93:d7:36:ee:a2:29:b6:77:1c:ac: 17:af:f4:4e:aa:19:2c:56:7e:4b:bf:0e:df:d6:41:96:a6:8a: 41:69:d7:eb:7f:7e:36:bb:62:0d:6e:1f:c8:af:93:45:cb:74: 0f:1a:6a:1f:33:bf:87:31:50:a3:81:26:96:bf:22:de:a6:77: 27:05:c4:bf:0d:00:37:a9:05:ae:b6:4d:76:cc:61:af:88:10: 90:4c:4d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLBkD5br8/7Ug4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmUzYWQyMDktYzljYy00YzI0LWFiYzItZTEwNGQ1MjE0NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudDWqvw+oVqc90F3/38c8PlOLdRvUgELHR/n JrTPGX6uHqkG8YMR3ipR5Vx7DtstLdNVjBjGQhR5cbduFrCrT7Hn7FeujlvtYWHC OpLc/E12Lxu7pCNBONtpyZ/baiElUlrRV8UkwyUAvhvpeRVoKOjZppqr/t27UhV9 aS+PKre60RIgCUbV1fNxTccPIvdaTSXrIznuAQ4/G2Z4Ci5WWy69S0lNAqYQzRpM WIoUfDLB2pS7uphsPFvvwoS/fxn47IcZDngtBPGRFcBE6QlAjc/wZWYf1YhrTKnn Yt627lgq0uq0ja0+hmNbVxgpqkvho0mCUNoa8tgfxVrHT1wKRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNizIQn8QCZKmRl5DDrWuFdsVqikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA5NmUzNDktNDQ1NC0z OGYzLWI3ZWQtYzU1MDE1Njc4NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADomF8HGkC5nOEvyCNg6KVan4giHntPEWe36Vxmr6ikUOu8DeWBAZOOr 4nJJBuI5u5/HvrCj9acDgpgm7AUgxWwkf2JnYiT0XcqZnIS6dGXsx2+2ERhV3GZN 7scfpGBRKLxQoiuxJCXorH1xhaCygSI2Bl11ZXdVs7AvQg3I6X8kZirMp+IvfLEx jxVKE0cYqPyShOCFap/DZYYRqsE0VRYS0yTXWy6lgWIjk9c27qIptnccrBev9E6q GSxWfku/Dt/WQZamikFp1+t/fja7Yg1uH8ivk0XLdA8aah8zv4cxUKOBJpa/It6m dycFxL8NADepBa62TXbMYa+IEJBMTXU= -----END CERTIFICATE-----Generated at Tue Oct 21 08:59:59 2025 by rpki-client