$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa File: 4d969e38-8862-3acc-8f97-40db9f1796e3.roa (raw, json) Hash identifier: TLa13P74I+ejuPsM/4vjh81J19nHA0ufhK+IaRFq/4I= Subject key identifier: 3E:4C:46:FD:46:BF:1B:33:83:17:C0:93:19:46:D9:11:22:DA:FE:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72EB2042C5FEBD7EDE600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396578 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:b2:04:2c:5f:eb:d7:ed:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=6d1e9e9a-b18d-443d-8062-da0f61bb3859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:d0:ed:39:fc:48:4a:6c:6c:d9:dc:13:fe: 17:c8:5b:a5:49:4b:a2:4b:71:6f:86:ae:f6:0f:c1: b8:fb:3a:51:cd:9d:b4:b5:b6:e7:bc:c9:6d:f2:c6: 42:b3:be:86:60:7e:ff:4b:f3:92:3c:7d:cc:d5:ec: 6a:5d:be:a3:cd:81:eb:10:89:62:46:26:b5:b4:0e: fd:f0:b0:50:c2:d4:77:ca:bd:cc:0c:8b:46:33:db: 0a:5c:31:54:c2:6e:2f:be:be:22:e5:bc:b7:b5:99: eb:ff:34:eb:f3:a2:32:7d:64:a8:1f:09:de:9c:59: 82:64:ba:81:cd:a3:e2:d8:2c:9f:64:ed:31:73:b4: 54:ce:46:50:6c:d0:8a:a7:05:40:2e:06:04:1b:4e: 96:48:42:35:2a:c5:b8:fe:1b:3d:26:6c:7b:3e:81: a9:c4:f8:54:92:0a:38:66:1f:e8:c0:b4:63:83:19: cc:d3:e2:f9:bd:90:57:1f:7c:a1:c0:aa:89:58:27: 50:c0:ee:70:68:fb:17:8d:da:3f:f5:0a:f8:75:d0: c0:8a:e6:67:5b:98:94:93:1c:6f:af:33:27:e5:8b: 82:9d:0c:0a:79:18:42:64:87:04:ef:b9:b6:a8:fa: 04:a9:23:88:a2:8a:87:93:96:67:04:6d:2a:60:98: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4C:46:FD:46:BF:1B:33:83:17:C0:93:19:46:D9:11:22:DA:FE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:69:c9:4c:1f:af:04:6b:cf:a5:70:50:3b:c9:8b:df:22:f1: 6f:8a:64:12:e3:0c:34:24:df:31:f4:33:9b:9e:25:f6:56:7f: 86:e9:80:d7:bc:83:f3:a4:56:dd:a9:00:91:51:e9:5c:65:f2: aa:a7:ed:a4:23:60:b6:6b:16:73:eb:4f:4a:e3:7a:14:a4:0c: dd:68:2c:40:63:d4:15:e7:15:bc:2c:d8:21:d8:da:eb:34:f3: 21:13:c3:47:33:04:2e:df:bf:c4:e4:50:9a:e1:e3:dc:41:17: 0e:e6:00:89:12:65:3a:32:48:da:d4:bf:56:b4:31:a5:d2:be: f1:4f:ad:dd:32:42:c3:4c:2c:9d:ca:71:00:dc:ee:fc:d0:6b: d5:6e:b3:d8:29:e0:ad:a4:19:31:d1:57:70:1f:3b:98:86:ca: 99:c4:e1:03:c0:98:22:ae:3c:4c:01:5e:54:c4:97:48:b2:de: a6:71:99:d5:02:e8:1f:dd:01:c5:99:ca:1d:00:92:5b:38:e7: 3a:ed:c7:c3:8a:b3:88:c1:36:1b:7d:b0:8f:18:5c:9b:8e:2f: ab:fa:47:21:09:2d:96:f6:b9:b8:02:e1:d5:7f:14:e4:49:4c: 70:31:a0:23:bc:1e:28:6e:2a:0a:9d:07:97:58:cb:25:8c:a1: e8:1e:31:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y6yBCxf69ft5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NmQxZTllOWEtYjE4ZC00NDNkLTgwNjItZGEwZjYxYmIzODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvHQ7Tn8SEpsbNncE/4XyFulSUuiS3Fvhq72 D8G4+zpRzZ20tbbnvMlt8sZCs76GYH7/S/OSPH3M1exqXb6jzYHrEIliRia1tA79 8LBQwtR3yr3MDItGM9sKXDFUwm4vvr4i5by3tZnr/zTr86IyfWSoHwnenFmCZLqB zaPi2CyfZO0xc7RUzkZQbNCKpwVALgYEG06WSEI1KsW4/hs9Jmx7PoGpxPhUkgo4 Zh/owLRjgxnM0+L5vZBXH3yhwKqJWCdQwO5waPsXjdo/9Qr4ddDAiuZnW5iUkxxv rzMn5YuCnQwKeRhCZIcE77m2qPoEqSOIooqHk5ZnBG0qYJhI0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD5MRv1GvxszgxfAkxlG2REi2v64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ5NjllMzgtODg2Mi0z YWNjLThmOTctNDBkYjlmMTc5NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmaclMH68Ea8+lcFA7yYvfIvFvimQS4ww0JN8x9DObniX2Vn+G6YDX vIPzpFbdqQCRUelcZfKqp+2kI2C2axZz609K43oUpAzdaCxAY9QV5xW8LNgh2Nrr NPMhE8NHMwQu37/E5FCa4ePcQRcO5gCJEmU6Mkja1L9WtDGl0r7xT63dMkLDTCyd ynEA3O780GvVbrPYKeCtpBkx0VdwHzuYhsqZxOEDwJgirjxMAV5UxJdIst6mcZnV Augf3QHFmcodAJJbOOc67cfDirOIwTYbfbCPGFybji+r+kchCS2W9rm4AuHVfxTk SUxwMaAjvB4obioKnQeXWMsljKHoHjFR -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:17 2025 by rpki-client