$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa File: 543616ba-cc06-3c2a-9970-1fff991634b7.roa (raw, json) Hash identifier: WPQq6+35sjDhwN0DRUb/md8q2tFXPFYbrNFs0FnggO4= Subject key identifier: 90:80:A3:47:98:9A:9F:9F:CF:23:FB:BD:C4:5D:11:18:43:06:35:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E43F4C828B9FB22D440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36626 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:43:f4:c8:28:b9:fb:22:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4bdd638a-c220-4aa2-b078-7a80d54807df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:ff:65:bf:f6:76:21:66:81:28:6b:9d:31: 7e:f3:83:f1:a1:90:f2:04:76:ab:1b:3f:5a:34:d0: b1:3f:6a:f0:9b:93:1b:20:2c:b8:b9:7d:ee:62:a5: 4b:c8:16:0d:d5:6f:54:03:c8:f7:18:f6:c8:8b:78: 4f:55:a8:2e:a2:97:4d:90:c8:7a:98:71:f1:74:06: fd:eb:14:37:11:f0:2d:96:a5:98:0f:52:ff:c6:42: bc:b1:81:d9:18:9b:d8:b6:0f:20:b6:e9:d1:6d:7a: ba:e4:7b:a1:fb:8e:21:f0:06:a3:de:4e:7a:ba:3c: 11:ee:6b:33:37:1f:ba:dc:65:82:c9:4d:74:40:f0: 7b:4e:8c:15:ac:dd:0b:91:9b:93:3e:07:9a:a1:ed: dc:be:fb:9d:38:47:de:93:e1:ab:e1:fc:43:a3:e8: 72:7a:a4:d6:4e:9c:66:9d:5a:2d:73:3f:27:2a:cb: 25:1c:ed:4e:d7:20:7a:3b:c3:0f:6e:85:54:17:6e: 5c:1f:15:75:44:86:90:e3:fe:6a:9b:c2:7c:6f:82: 64:eb:61:a9:23:73:a3:c1:cf:2a:7b:ee:19:ab:29: c2:17:c0:91:49:64:bf:29:e9:52:0d:c9:d9:ef:8e: 69:dd:f1:eb:58:32:7c:03:91:ba:19:48:47:9b:1d: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:A3:47:98:9A:9F:9F:CF:23:FB:BD:C4:5D:11:18:43:06:35:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bc:4c:99:c6:ab:32:16:11:a9:8a:b7:d7:b3:7d:b3:f5:7c: b5:67:80:87:b9:f8:62:b1:a6:3a:24:0e:bb:23:d4:b7:16:dd: f3:13:84:83:15:1f:ab:db:28:6c:f0:c1:0d:33:d7:63:de:b1: 76:a0:89:91:00:77:17:85:52:e3:61:99:80:5e:d5:67:d1:63: e3:3c:26:e4:23:a7:fa:89:6f:e3:6e:49:7b:a1:e5:f9:f5:36: c1:61:01:40:40:cc:c3:81:9e:ce:a9:f5:55:51:c8:a1:39:5c: 2a:0c:d5:43:7c:1f:df:84:15:1e:42:76:3d:64:d2:0f:3c:ad: 8b:f7:95:fa:27:bc:c8:c7:76:6c:7f:1d:7d:7a:ff:d6:f5:ef: 77:82:f3:a5:7e:33:b5:fc:8c:00:62:5e:9a:ed:34:db:e7:9c: 30:54:29:d8:70:38:1f:ca:00:a9:d1:2d:79:f4:b9:8c:7a:d1: 14:36:64:33:4d:82:36:eb:e1:c5:1d:fc:e5:34:10:e1:ec:b4: d5:e4:8c:8c:b0:c7:63:06:e3:2a:c0:05:bb:58:15:d6:e2:b9: 30:51:1c:59:2e:05:4c:e7:4c:3c:d6:ea:6a:36:82:0d:08:d9: 6a:91:12:bc:bb:99:33:9c:f4:a4:09:4f:9c:d6:59:e4:4d:c9: 9e:01:a0:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y5D9Mgoufsi1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGJkZDYzOGEtYzIyMC00YWEyLWIwNzgtN2E4MGQ1NDgwN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVH/Zb/2diFmgShrnTF+84PxoZDyBHarGz9a NNCxP2rwm5MbICy4uX3uYqVLyBYN1W9UA8j3GPbIi3hPVaguopdNkMh6mHHxdAb9 6xQ3EfAtlqWYD1L/xkK8sYHZGJvYtg8gtunRbXq65Huh+44h8Aaj3k56ujwR7msz Nx+63GWCyU10QPB7TowVrN0LkZuTPgeaoe3cvvudOEfek+Gr4fxDo+hyeqTWTpxm nVotcz8nKsslHO1O1yB6O8MPboVUF25cHxV1RIaQ4/5qm8J8b4Jk62GpI3Ojwc8q e+4ZqynCF8CRSWS/KelSDcnZ745p3fHrWDJ8A5G6GUhHmx1WwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJCAo0eYmp+fzyP7vcRdERhDBjVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzNjE2YmEtY2MwNi0z YzJhLTk5NzAtMWZmZjk5MTYzNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlvEyZxqsyFhGpirfXs32z9Xy1Z4CHufhisaY6JA67I9S3Ft3zE4SD FR+r2yhs8MENM9dj3rF2oImRAHcXhVLjYZmAXtVn0WPjPCbkI6f6iW/jbkl7oeX5 9TbBYQFAQMzDgZ7OqfVVUcihOVwqDNVDfB/fhBUeQnY9ZNIPPK2L95X6J7zIx3Zs fx19ev/W9e93gvOlfjO1/IwAYl6a7TTb55wwVCnYcDgfygCp0S159LmMetEUNmQz TYI26+HFHfzlNBDh7LTV5IyMsMdjBuMqwAW7WBXW4rkwURxZLgVM50w81upqNoIN CNlqkRK8u5kznPSkCU+c1lnkTcmeAaD4 -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:15 2025 by rpki-client