$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa File: 47d03e3d-c464-3f1e-bbde-02be87964859.roa (raw, json) Hash identifier: EYOBbzlRHrb7N0oocjLrvc/Mb+Uwcph+tcjd60RlkNk= Subject key identifier: 9C:3F:04:1C:E3:6B:F8:53:43:56:37:13:4A:FA:02:C1:5A:66:8B:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB1788240B0703F3F84C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396591 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:78:82:40:b0:70:3f:3f:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d738aa66-ad43-405e-99f1-9eca1b2a7167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:b6:fe:36:7e:29:41:f2:05:75:60:97:75: 37:2e:5e:db:ea:7b:f9:7d:04:20:0c:17:2f:b0:46: 20:b2:5b:02:13:c2:52:9e:1e:d3:4e:e8:d2:e3:21: 3d:de:b5:b4:a2:26:46:8a:02:71:2a:dd:f1:da:03: 76:51:ef:ea:3e:cc:39:11:1b:03:6e:2a:17:d0:68: 25:0a:e4:56:4e:14:a2:b8:93:3d:69:90:83:df:8a: dd:8a:29:4f:05:44:04:14:65:b2:d8:5d:25:ff:ff: 1c:a6:db:fa:ab:88:d8:e7:35:a5:3d:73:4c:63:f7: 1d:1b:56:90:6c:ea:38:2c:44:aa:9b:0e:2e:aa:19: d8:76:4e:26:b6:2d:c1:cb:5d:fd:7e:cc:85:bd:70: 44:a7:4f:59:74:d3:24:23:35:6e:08:63:e7:10:43: ce:d1:57:d8:9b:2a:73:2c:75:62:99:53:bd:53:34: 8f:b0:02:41:62:fc:69:e4:c3:42:8c:27:2b:7f:59: 94:50:61:f0:79:02:19:23:07:a7:a8:c9:7b:5c:d0: 3b:23:ed:12:ea:b4:60:4a:3c:d6:8b:e8:82:78:6e: 47:ec:21:b6:c4:b5:44:56:37:09:80:2c:44:92:e6: 30:ac:12:6e:19:21:d7:cc:c8:da:21:76:a9:6d:bb: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:04:1C:E3:6B:F8:53:43:56:37:13:4A:FA:02:C1:5A:66:8B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:80:79:2a:7c:f1:c6:8c:5e:45:b9:13:88:2e:3d:e2:ae:72: e6:a5:b2:86:bb:bc:9c:85:51:2d:bc:45:a4:c3:d7:37:50:5b: 19:70:17:e4:21:c0:3b:fa:d2:03:8c:8f:2a:04:3e:52:43:51: dc:3c:2b:3f:ab:df:71:a3:3f:fa:4e:ff:55:56:7d:28:95:8b: ba:4f:d2:b3:4f:ee:0d:8f:1e:ee:12:b4:60:88:da:2d:85:9a: 90:d6:33:4c:6f:09:c3:70:c9:40:5c:b1:b2:dc:0f:c1:b4:79: 72:3c:5f:d3:19:55:d1:d4:9a:0c:15:d8:e2:2a:80:5e:82:1f: fc:00:81:64:c9:7a:a1:4a:94:5c:6a:09:26:ee:be:ca:91:f7: cc:ee:b6:6b:94:85:f2:12:ae:8a:e6:24:00:ff:2a:2a:09:54: af:f2:64:b0:ae:11:9d:c8:70:3d:cf:5a:50:e9:e4:cc:14:c5: 17:50:94:45:17:a8:de:eb:c4:c1:e8:56:97:99:69:c9:0c:5a: 50:01:b9:91:7c:6d:30:83:46:af:f8:9d:ef:4c:a3:c8:69:34: a1:f2:7e:6a:42:c9:52:75:d7:0c:6c:ef:89:f5:38:21:a8:8c: 26:05:b1:2c:e2:a8:d7:bf:c5:e6:95:70:ab:b2:16:59:a1:54: dc:a1:4a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLF4gkCwcD8/hMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDczOGFhNjYtYWQ0My00MDVlLTk5ZjEtOWVjYTFiMmE3MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+y2/jZ+KUHyBXVgl3U3Ll7b6nv5fQQgDBcv sEYgslsCE8JSnh7TTujS4yE93rW0oiZGigJxKt3x2gN2Ue/qPsw5ERsDbioX0Ggl CuRWThSiuJM9aZCD34rdiilPBUQEFGWy2F0l//8cptv6q4jY5zWlPXNMY/cdG1aQ bOo4LESqmw4uqhnYdk4mti3By139fsyFvXBEp09ZdNMkIzVuCGPnEEPO0VfYmypz LHVimVO9UzSPsAJBYvxp5MNCjCcrf1mUUGHweQIZIwenqMl7XNA7I+0S6rRgSjzW i+iCeG5H7CG2xLVEVjcJgCxEkuYwrBJuGSHXzMjaIXapbbv4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw/BBzja/hTQ1Y3E0r6AsFaZov2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDdkMDNlM2QtYzQ2NC0z ZjFlLWJiZGUtMDJiZTg3OTY0ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqAeSp88caMXkW5E4guPeKucualsoa7vJyFUS28RaTD1zdQWxlwF+Qh wDv60gOMjyoEPlJDUdw8Kz+r33GjP/pO/1VWfSiVi7pP0rNP7g2PHu4StGCI2i2F mpDWM0xvCcNwyUBcsbLcD8G0eXI8X9MZVdHUmgwV2OIqgF6CH/wAgWTJeqFKlFxq CSbuvsqR98zutmuUhfISrormJAD/KioJVK/yZLCuEZ3IcD3PWlDp5MwUxRdQlEUX qN7rxMHoVpeZackMWlABuZF8bTCDRq/4ne9Mo8hpNKHyfmpCyVJ11wxs74n1OCGo jCYFsSziqNe/xeaVcKuyFlmhVNyhSic= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:48 2025 by rpki-client