$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa File: 433a0255-ffa3-385b-91f5-1418051da1ff.roa (raw, json) Hash identifier: 2fnyMkr+q94jQerOj3nVjN05bWS94eEEq+WzGoqfSc8= Subject key identifier: 40:40:ED:3D:AC:D1:BD:55:39:C0:07:13:DB:A3:27:04:DC:3A:75:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72BD377E80684F39E3F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36619 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2b:d3:77:e8:06:84:f3:9e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c4d1c3b8-3047-477d-99b7-420f78e65b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:66:f6:31:3e:36:10:9d:0d:a2:82:2d:50: e8:36:aa:74:2a:28:d7:db:e9:7f:07:9d:3c:bb:8d: ed:9a:32:ce:55:4c:21:16:5e:5a:75:35:f3:af:94: 4d:3e:83:df:33:f3:34:a1:3b:3b:b5:c1:d9:d1:9c: 05:42:c0:08:40:db:a9:fb:0e:49:22:41:61:50:6b: 78:7f:23:c6:2a:df:70:1c:ac:99:ec:ba:ce:d0:98: b0:cc:f8:be:42:aa:d8:ca:9d:99:2c:39:f1:26:86: 9a:5a:a0:9d:fa:22:e7:de:15:10:0c:30:67:48:96: 42:9f:ba:e0:f7:c7:90:f2:f0:62:86:e4:f0:c5:34: 3c:1a:3a:59:8e:b2:e6:12:9b:da:cc:35:7b:17:e7: b2:2d:be:53:24:98:b3:cf:b2:86:8d:dc:c5:1d:9b: ce:f3:ab:62:a8:6c:ba:61:c8:ee:d0:9f:ca:78:7c: 6a:32:85:2c:e8:de:a3:89:2a:1c:b5:cf:ee:09:f9: f2:7f:ea:2d:15:c3:2f:26:2a:ab:b1:fd:be:56:a5: 64:4e:e7:0d:37:ff:1e:1a:d0:86:cc:7b:1e:d9:ee: 05:15:53:3f:f2:3d:a8:bc:c9:3e:41:28:78:55:a5: 91:65:74:65:c8:df:59:40:68:4f:bf:9f:a6:aa:ab: b1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:40:ED:3D:AC:D1:BD:55:39:C0:07:13:DB:A3:27:04:DC:3A:75:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4a:aa:05:50:74:8b:81:f0:a8:5c:32:5c:7e:4f:5c:ba:0c: 26:57:3f:4b:be:9f:22:7e:15:7a:89:27:02:98:5a:90:85:d3: f7:22:58:04:34:c7:01:3d:84:d1:27:e6:69:0b:99:47:55:78: 42:e4:6d:82:29:2b:f0:31:9f:84:16:fa:f4:df:0c:40:7b:36: 63:53:6a:3b:0a:84:1f:5e:7e:bf:0c:73:be:cc:e4:be:fa:59: 1a:9f:26:a9:ff:bd:9c:cf:01:a1:fd:96:76:81:71:13:70:72: c6:82:e3:42:61:84:5e:d0:9e:da:dd:64:1d:83:6d:79:1e:f7: 1f:25:99:26:97:32:a5:de:c3:23:93:c1:94:f5:73:b3:0a:95: ea:5b:4a:3c:77:4f:6b:47:84:31:30:2a:b2:20:31:f1:c8:7a: 3e:d3:cd:e8:29:3c:ba:eb:e9:76:2e:7d:ed:00:be:29:ac:12: c0:22:dd:89:43:1b:4b:28:db:e4:91:e7:ee:55:30:d7:3a:d7: 4f:7f:68:c3:54:b0:51:ea:7e:0f:41:47:bf:3f:3b:91:b8:7b: 5f:09:b8:7d:a2:17:b3:df:62:77:bb:88:2f:1d:a6:3a:e8:f3: be:ab:cd:20:0a:ff:0e:1e:84:f7:1f:34:60:4a:79:84:8b:54: 56:ae:38:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yvTd+gGhPOePwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YzRkMWMzYjgtMzA0Ny00NzdkLTk5YjctNDIwZjc4ZTY1YjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yNm9jE+NhCdDaKCLVDoNqp0KijX2+l/B508 u43tmjLOVUwhFl5adTXzr5RNPoPfM/M0oTs7tcHZ0ZwFQsAIQNup+w5JIkFhUGt4 fyPGKt9wHKyZ7LrO0JiwzPi+QqrYyp2ZLDnxJoaaWqCd+iLn3hUQDDBnSJZCn7rg 98eQ8vBihuTwxTQ8GjpZjrLmEpvazDV7F+eyLb5TJJizz7KGjdzFHZvO86tiqGy6 Ycju0J/KeHxqMoUs6N6jiSoctc/uCfnyf+otFcMvJiqrsf2+VqVkTucNN/8eGtCG zHse2e4FFVM/8j2ovMk+QSh4VaWRZXRlyN9ZQGhPv5+mqquxGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBA7T2s0b1VOcAHE9ujJwTcOnVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzYTAyNTUtZmZhMy0z ODViLTkxZjUtMTQxODA1MWRhMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBSqoFUHSLgfCoXDJcfk9cugwmVz9Lvp8ifhV6iScCmFqQhdP3IlgE NMcBPYTRJ+ZpC5lHVXhC5G2CKSvwMZ+EFvr03wxAezZjU2o7CoQfXn6/DHO+zOS+ +lkanyap/72czwGh/ZZ2gXETcHLGguNCYYRe0J7a3WQdg215HvcfJZkmlzKl3sMj k8GU9XOzCpXqW0o8d09rR4QxMCqyIDHxyHo+083oKTy66+l2Ln3tAL4prBLAIt2J QxtLKNvkkefuVTDXOtdPf2jDVLBR6n4PQUe/PzuRuHtfCbh9ohez32J3u4gvHaY6 6PO+q80gCv8OHoT3HzRgSnmEi1RWrjjo -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:36 2025 by rpki-client