$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa File: 459572fb-ad1b-3597-974f-68e154989cc8.roa (raw, json) Hash identifier: winxD5yxOxg5/m44T8qWE2SgdHwYSNeQgyDiQZFJQUw= Subject key identifier: 9A:C8:07:2A:B1:43:02:EF:AF:52:33:FD:FF:D0:FE:17:CF:9E:71:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAF52CB84A917AB30AEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 211369 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:af:52:cb:84:a9:17:ab:30:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1dc9459e-19c6-40b9-91c3-240b1e1922c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:8b:a8:49:65:17:b2:d9:2e:a2:37:4a:06: 66:37:5d:ae:62:85:87:e0:92:ec:7f:fc:27:5c:df: a5:9d:f4:51:b0:f0:9f:c7:5b:5e:03:27:56:85:9a: 76:0c:e4:82:56:71:6a:fa:b6:67:62:a1:c9:d7:5a: 52:3e:7a:4f:c5:01:90:fd:92:45:23:c6:73:04:a7: 27:90:04:94:02:cf:d9:90:f7:99:f4:de:01:e3:73: fd:c2:f1:d4:e0:e0:4b:0c:f1:f0:4f:a0:10:72:09: 11:58:c3:17:17:81:09:84:77:f7:69:20:90:85:78: f9:e0:56:27:04:bd:3f:a5:15:40:28:70:85:ac:26: e2:79:3f:46:48:b5:54:64:5b:65:12:95:fb:c5:e0: e0:e1:aa:07:cc:90:8d:db:df:65:a2:3c:2c:a5:23: af:8f:1d:5a:c2:9c:df:57:55:ac:99:be:32:69:c3: 45:3b:3c:5d:23:db:11:e2:30:90:ee:23:27:34:0f: 37:68:79:5e:50:32:83:ca:23:18:49:51:b2:61:d6: ef:ad:8d:2e:78:22:8f:05:3d:a7:8e:5b:04:25:2a: f5:50:de:35:e3:1a:68:28:7b:68:4d:eb:be:6b:cf: ac:89:bf:23:3e:08:09:9a:a0:a3:9d:64:16:b4:6b: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C8:07:2A:B1:43:02:EF:AF:52:33:FD:FF:D0:FE:17:CF:9E:71:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:95:03:87:0a:aa:d0:06:48:cc:1f:d2:d4:7c:e5:60:95:42: ad:53:50:1b:0c:48:d5:45:f7:8b:0b:a9:14:f4:5a:00:ba:90: 3d:f7:79:ba:49:44:27:f2:7c:57:f6:b7:c2:d2:5c:fc:26:66: b8:62:ca:5f:fa:de:3b:8e:18:65:77:6f:2b:a4:ac:6b:6d:6f: c2:98:14:ba:04:72:b9:60:7b:68:a0:e2:e2:67:e0:f2:80:9a: 7b:f7:d6:a1:a0:1f:d4:1b:d1:a0:89:da:77:28:2e:b2:93:0e: b5:89:00:87:8b:eb:63:53:43:95:20:46:66:4c:b3:ac:c2:b3: f1:a0:c0:f4:77:5a:a6:f0:3a:e0:21:4a:55:c2:ee:68:29:b0: 44:eb:ab:9b:d1:4f:3d:26:a5:32:c0:78:47:55:a1:6a:68:d0: 0a:6a:8d:be:29:61:88:d6:4a:81:b4:8f:fd:b3:3d:17:4c:49: 08:f0:ef:4d:ab:f6:f7:c0:58:c0:a8:6f:c8:82:00:cc:f8:42: 7d:9f:f4:96:1a:a7:4e:43:bf:b2:af:0b:37:e4:ee:ea:d6:37: 8c:f2:21:78:5c:3e:0e:a2:39:f8:97:b1:54:32:46:9f:eb:63: ad:dc:64:07:40:3d:45:86:42:07:ad:3c:b9:8b:10:d6:ec:bc: ac:67:e8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK9Sy4SpF6swrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWRjOTQ1OWUtMTljNi00MGI5LTkxYzMtMjQwYjFlMTkyMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZeLqEllF7LZLqI3SgZmN12uYoWH4JLsf/wn XN+lnfRRsPCfx1teAydWhZp2DOSCVnFq+rZnYqHJ11pSPnpPxQGQ/ZJFI8ZzBKcn kASUAs/ZkPeZ9N4B43P9wvHU4OBLDPHwT6AQcgkRWMMXF4EJhHf3aSCQhXj54FYn BL0/pRVAKHCFrCbieT9GSLVUZFtlEpX7xeDg4aoHzJCN299lojwspSOvjx1awpzf V1Wsmb4yacNFOzxdI9sR4jCQ7iMnNA83aHleUDKDyiMYSVGyYdbvrY0ueCKPBT2n jlsEJSr1UN414xpoKHtoTeu+a8+sib8jPggJmqCjnWQWtGuRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrIByqxQwLvr1Iz/f/Q/hfPnnGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU5NTcyZmItYWQxYi0z NTk3LTk3NGYtNjhlMTU0OTg5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeVA4cKqtAGSMwf0tR85WCVQq1TUBsMSNVF94sLqRT0WgC6kD33ebpJ RCfyfFf2t8LSXPwmZrhiyl/63juOGGV3byukrGttb8KYFLoEcrlge2ig4uJn4PKA mnv31qGgH9Qb0aCJ2ncoLrKTDrWJAIeL62NTQ5UgRmZMs6zCs/GgwPR3WqbwOuAh SlXC7mgpsETrq5vRTz0mpTLAeEdVoWpo0Apqjb4pYYjWSoG0j/2zPRdMSQjw702r 9vfAWMCob8iCAMz4Qn2f9JYap05Dv7KvCzfk7urWN4zyIXhcPg6iOfiXsVQyRp/r Y63cZAdAPUWGQgetPLmLENbsvKxn6Pg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:52 2025 by rpki-client