$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa File: 3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa (raw, json) Hash identifier: auKzfpL/qwuLDvzBOHCXxkUsnDu2rBqgZp4ZtGChB/8= Subject key identifier: 40:64:55:61:3D:A4:F4:84:29:B9:1B:33:6D:5A:AF:B7:BF:85:B8:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAEA80A31BA86F5A02220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396600 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ae:a8:0a:31:ba:86:f5:a0:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=cb4c28b8-8c46-4b39-b0d7-61298ae5775a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:59:5a:66:5a:e4:40:54:00:df:6e:d9:10: fa:ea:a0:31:bc:16:6d:75:ad:fe:88:ce:1d:df:1f: 88:df:ba:38:66:f8:7e:31:84:53:f4:74:80:6e:5b: b3:4d:eb:7e:25:d1:3e:dc:8a:52:2f:c0:87:59:cb: 19:6b:c2:9c:5e:8a:0b:09:7f:d2:10:aa:35:08:e1: 57:7f:06:98:60:f3:56:db:b9:7a:76:ef:a2:37:dc: 58:18:8a:b3:66:38:30:c6:f8:bc:f4:d0:e5:f4:5a: a9:18:9b:4b:1e:52:ab:02:32:c4:1a:2b:de:92:c7: ca:b7:e1:39:bb:13:db:c8:69:32:14:ff:39:9c:71: 5c:4c:6b:74:db:f0:88:ee:98:c8:52:61:5e:03:18: 91:14:b2:ee:0c:b0:00:59:e3:28:cb:19:4d:40:1c: 8d:02:85:c3:00:eb:68:f4:57:eb:13:be:f2:e9:b6: 78:b6:bd:fc:c2:50:c8:fb:08:4b:bb:4e:28:46:1a: 72:7c:dc:ac:68:c4:ac:e0:5d:01:f6:ea:58:97:f3: 62:60:0f:5f:73:12:1c:b5:10:ab:e5:50:f5:b0:42: 2f:3b:c0:d7:4f:40:38:d0:3f:59:ee:f5:f5:c9:31: f5:f4:fb:28:7f:20:0c:66:63:4f:37:e2:31:69:8a: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:55:61:3D:A4:F4:84:29:B9:1B:33:6D:5A:AF:B7:BF:85:B8:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:79:22:3a:86:90:eb:dd:0c:cc:8a:19:22:9a:8e:76:63:fb: 38:6f:6c:8c:31:4d:7d:19:c6:44:c8:cd:20:49:9f:cb:d0:db: 94:c6:da:f2:15:10:c1:52:a3:35:de:2e:08:7e:29:53:05:69: 00:bb:c5:66:66:f0:8d:10:0b:2e:4f:5b:e1:c8:8c:d9:54:b0: f9:cc:c5:45:ce:44:0c:0a:00:29:71:bd:03:0d:d5:f7:75:37: e8:25:57:fb:13:86:2c:5f:46:a9:0e:7c:2d:7f:c2:d1:9b:17: c6:23:03:b1:5b:c9:1e:74:6f:f4:d0:3b:18:f9:43:8d:a6:de: 0e:50:17:3d:87:f5:71:20:20:7d:65:e4:61:fd:dd:49:10:8a: 35:16:44:f3:a1:e7:ae:64:0f:f5:c4:4f:e6:a1:cf:df:64:1a: 5f:88:a9:85:f8:53:57:3e:02:e7:5a:4d:86:7d:29:0b:e2:45: f5:96:5a:a7:27:43:e1:19:d4:29:b8:be:93:ee:fa:ca:b0:94: fd:a1:7a:79:a0:e7:4f:be:46:af:8a:6d:a9:69:f7:a2:25:8f: 86:d5:32:62:95:61:d5:18:a4:95:df:c2:a5:b5:dd:dc:e6:e4: eb:80:c2:e6:6b:30:e1:28:31:f9:2a:0a:3c:a4:97:58:60:d9: 65:08:e4:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK6oCjG6hvWgIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2I0YzI4YjgtOGM0Ni00YjM5LWIwZDctNjEyOThhZTU3NzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+RZWmZa5EBUAN9u2RD66qAxvBZtda3+iM4d 3x+I37o4Zvh+MYRT9HSAbluzTet+JdE+3IpSL8CHWcsZa8KcXooLCX/SEKo1COFX fwaYYPNW27l6du+iN9xYGIqzZjgwxvi89NDl9FqpGJtLHlKrAjLEGiveksfKt+E5 uxPbyGkyFP85nHFcTGt02/CI7pjIUmFeAxiRFLLuDLAAWeMoyxlNQByNAoXDAOto 9FfrE77y6bZ4tr38wlDI+whLu04oRhpyfNysaMSs4F0B9upYl/NiYA9fcxIctRCr 5VD1sEIvO8DXT0A40D9Z7vX1yTH19PsofyAMZmNPN+IxaYpxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBkVWE9pPSEKbkbM21ar7e/hbieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U1ZDc5ZjUtZTkyMi0z YjlhLTlkZmYtYmZlNTliYTAyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ5IjqGkOvdDMyKGSKajnZj+zhvbIwxTX0ZxkTIzSBJn8vQ25TG2vIV EMFSozXeLgh+KVMFaQC7xWZm8I0QCy5PW+HIjNlUsPnMxUXORAwKAClxvQMN1fd1 N+glV/sThixfRqkOfC1/wtGbF8YjA7FbyR50b/TQOxj5Q42m3g5QFz2H9XEgIH1l 5GH93UkQijUWRPOh565kD/XET+ahz99kGl+IqYX4U1c+AudaTYZ9KQviRfWWWqcn Q+EZ1Cm4vpPu+sqwlP2henmg50++Rq+Kbalp96Ilj4bVMmKVYdUYpJXfwqW13dzm 5OuAwuZrMOEoMfkqCjykl1hg2WUI5N0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:53 2025 by rpki-client