$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa File: 5114d8f2-04b8-3649-9176-eac50a916f72.roa (raw, json) Hash identifier: j6TQgzUhLF404M3Zf76ti8f7f0sX0EZOGAbZ+MWB35c= Subject key identifier: 40:42:CA:E1:8E:31:24:46:BF:03:52:AD:D5:A1:62:DB:C7:38:BB:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73736E60B0C28DC62F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396610 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:37:36:e6:0b:0c:28:dc:62:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=1fa63ab4-3654-40d1-9a3f-ff39c629f940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:e4:2f:eb:22:93:42:25:b7:9e:d3:2d:cb: 89:90:2b:5c:8e:ed:a4:d1:77:7a:02:d5:5c:af:4c: 13:3d:5a:d5:ec:ac:49:f2:7a:94:7e:77:21:d7:35: e8:ae:f9:b0:cf:18:5e:6f:ca:8d:10:5f:ac:b9:ca: f3:2b:32:f3:c4:86:81:2b:f0:33:ea:16:2f:47:b6: a5:44:2e:8c:f2:19:2d:04:7f:67:e8:d8:c1:77:ab: 9b:10:a9:49:96:38:d7:5b:2b:b3:08:b3:34:41:d3: e9:db:d3:ea:e4:5a:57:0e:40:f6:ab:8f:68:7b:f8: 47:38:bc:c6:6c:62:f0:52:3f:b1:a5:f0:1b:c8:0b: 7e:8d:10:02:17:c8:43:3d:44:97:05:b5:a4:f6:3c: 9e:9a:3c:46:f0:b2:77:f1:dd:d7:8b:06:ae:55:2c: e2:17:19:a9:2e:56:6b:05:a6:15:9d:18:8e:79:1a: 28:da:89:e9:26:72:3f:31:16:b2:f0:18:09:12:bc: c0:dd:37:2b:1f:90:9c:0f:c7:35:bd:65:ea:dc:bd: 1e:a3:32:a9:ce:14:88:7d:0d:f8:5e:72:0c:6e:1f: 50:7c:58:2f:79:5c:46:9f:71:d5:11:c6:40:ba:60: af:b4:bb:3d:f0:61:e0:6f:aa:e7:84:78:07:41:14: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:42:CA:E1:8E:31:24:46:BF:03:52:AD:D5:A1:62:DB:C7:38:BB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a5:f0:cd:6c:26:ce:fd:09:9b:5d:52:e4:b9:ac:89:43:07: 7e:0e:17:8a:00:f8:06:bb:d8:69:9c:49:66:c7:60:54:57:16: 97:3c:c8:a0:cb:93:ba:75:fe:4b:86:71:58:dd:6b:cb:47:96: ea:07:3f:d8:fa:80:ca:9d:f9:d3:f0:8e:74:81:07:3f:71:fe: f6:05:96:77:53:a5:7d:14:6d:73:91:52:31:2b:05:ba:2d:08: aa:ba:1e:2d:0b:c6:bd:36:5b:83:6e:1e:b5:15:31:10:0a:d8: 80:37:57:ba:47:f3:4c:89:ab:0f:11:1e:1d:58:2c:a8:8f:8b: b2:a6:d3:88:3d:b4:38:e6:4e:ba:81:58:20:40:1a:8b:3f:aa: 36:15:ed:72:5b:81:a1:77:5a:bd:df:6e:11:ec:b7:f0:e9:6b: c1:3b:9b:83:0e:d2:10:70:1a:c6:06:6d:5d:3c:04:29:32:8d: 79:d4:fb:72:f2:9d:f5:a3:1d:e9:cf:c5:2e:a5:68:c4:cf:61: 96:41:b9:66:f8:40:7b:73:f1:fa:b1:ce:d7:be:fd:b8:dd:f1: 52:c3:95:ad:39:a5:f1:99:23:aa:da:2c:9c:12:51:32:71:39: 6d:a6:14:78:cd:68:95:99:d0:c7:1d:62:38:7b:76:0d:5f:34: f5:d7:39:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zc25gsMKNxi+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MWZhNjNhYjQtMzY1NC00MGQxLTlhM2YtZmYzOWM2MjlmOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs17kL+sik0Ilt57TLcuJkCtcju2k0Xd6AtVc r0wTPVrV7KxJ8nqUfnch1zXorvmwzxheb8qNEF+sucrzKzLzxIaBK/Az6hYvR7al RC6M8hktBH9n6NjBd6ubEKlJljjXWyuzCLM0QdPp29Pq5FpXDkD2q49oe/hHOLzG bGLwUj+xpfAbyAt+jRACF8hDPUSXBbWk9jyemjxG8LJ38d3XiwauVSziFxmpLlZr BaYVnRiOeRoo2onpJnI/MRay8BgJErzA3TcrH5CcD8c1vWXq3L0eozKpzhSIfQ34 XnIMbh9QfFgveVxGn3HVEcZAumCvtLs98GHgb6rnhHgHQRRgeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEBCyuGOMSRGvwNSrdWhYtvHOLtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTExNGQ4ZjItMDRiOC0z NjQ5LTkxNzYtZWFjNTBhOTE2ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/pfDNbCbO/QmbXVLkuayJQwd+DheKAPgGu9hpnElmx2BUVxaXPMig y5O6df5LhnFY3WvLR5bqBz/Y+oDKnfnT8I50gQc/cf72BZZ3U6V9FG1zkVIxKwW6 LQiquh4tC8a9NluDbh61FTEQCtiAN1e6R/NMiasPER4dWCyoj4uyptOIPbQ45k66 gVggQBqLP6o2Fe1yW4Ghd1q9324R7Lfw6WvBO5uDDtIQcBrGBm1dPAQpMo151Pty 8p31ox3pz8UupWjEz2GWQblm+EB7c/H6sc7Xvv243fFSw5WtOaXxmSOq2iycElEy cTltphR4zWiVmdDHHWI4e3YNXzT11znZ -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:32 2025 by rpki-client