$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5459a6b8-69e8-323d-a3b1-19d11e8d77d7.roa File: 5459a6b8-69e8-323d-a3b1-19d11e8d77d7.roa (raw, json) Hash identifier: eHo+rAmJOHWGmnFAeBVxzGV1iej0GsjusV9PCgYz8tY= Subject key identifier: FD:01:A6:1E:BD:73:1A:08:A6:06:3E:5A:94:AF:F0:2B:44:FF:BC:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB1B7664F24AD41988600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5459a6b8-69e8-323d-a3b1-19d11e8d77d7.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396614 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:b7:66:4f:24:ad:41:98:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6de0416d-8a3b-4e3a-b472-3e3be314fb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:b4:3c:f5:89:7b:d5:56:54:a3:1b:28:71: 08:9b:0f:53:bd:f8:55:28:b7:62:35:61:3f:32:58: a2:70:25:88:02:95:28:36:2f:bf:9b:34:fa:30:f3: 3a:81:51:5a:1c:26:64:09:ad:ab:6e:ab:ba:19:4e: 5c:32:4c:03:8e:6d:e0:52:cd:23:29:03:28:0e:d0: 4e:7f:c4:1e:97:38:45:bc:e8:84:43:b3:7e:48:f0: 73:71:f2:d8:5a:38:d9:25:06:14:85:e2:6b:b9:f9: c2:24:0e:e5:b5:fa:85:c7:5c:cb:32:b5:b2:95:3c: fd:00:c7:98:ac:f0:fc:cd:c9:59:04:61:8b:08:85: b2:fb:95:c9:a0:e6:92:e9:49:82:ce:6c:18:61:9f: 7b:72:84:c5:66:ed:ba:87:e0:74:4e:68:06:ba:95: df:4e:2a:f9:b9:30:f1:b8:fb:82:e9:42:92:c4:da: bb:de:ee:16:a1:cc:56:eb:31:03:2a:51:40:91:8a: 55:3e:70:9a:af:01:f9:38:51:bd:a5:31:4a:2b:7f: 18:e0:d6:92:75:b1:12:dd:18:ba:f2:9a:d6:90:41: eb:4b:a3:6e:38:52:b1:31:16:b3:69:8b:1b:e5:0f: f0:67:e8:9e:45:b8:3b:b9:3d:77:fa:65:67:29:dc: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:A6:1E:BD:73:1A:08:A6:06:3E:5A:94:AF:F0:2B:44:FF:BC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5459a6b8-69e8-323d-a3b1-19d11e8d77d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ec:af:8d:d2:4a:44:61:9d:25:a3:e0:3e:ee:85:7f:1c:c5: ed:0a:d5:9b:17:09:ca:0e:a2:0a:9d:aa:fb:a4:73:06:fd:67: ae:5b:2b:87:0c:2a:59:b6:31:78:dd:51:2d:20:09:0b:d2:09: ec:23:1e:9e:98:6b:85:30:9a:05:90:78:e3:00:ad:ca:4d:93: 94:98:6f:71:0a:ac:c9:6c:4e:d2:c2:7c:97:88:88:53:8c:a7: af:60:ad:a0:80:71:67:bd:3c:6e:ad:9a:5e:f8:e4:9a:28:a9: 0e:4a:d0:f0:f5:c6:50:0c:5a:4d:08:43:b9:3c:bf:48:21:10: 73:10:8f:70:a5:aa:06:44:09:0b:8c:f3:81:10:a5:54:40:55: c3:20:5f:aa:02:f7:82:cd:ea:b7:1a:b7:58:19:78:9e:be:39: c1:9b:bb:c1:03:09:c1:21:e4:73:5a:dd:57:2d:22:52:03:34: 72:cc:9f:dd:95:ef:48:a7:b7:d8:c4:0e:98:21:f1:d2:01:4d: 0a:fc:6a:4a:af:4e:01:aa:b1:13:ee:d0:4e:53:2a:73:b7:b9: 37:bf:4b:b6:73:75:d7:fb:05:52:ec:39:46:cd:e9:c4:18:cd: 14:76:1e:1a:a9:0a:a0:5c:a1:89:f9:d2:12:25:f8:8c:9b:98: 95:ca:4a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLG3Zk8krUGYhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmRlMDQxNmQtOGEzYi00ZTNhLWI0NzItM2UzYmUzMTRmYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc20PPWJe9VWVKMbKHEImw9TvfhVKLdiNWE/ MliicCWIApUoNi+/mzT6MPM6gVFaHCZkCa2rbqu6GU5cMkwDjm3gUs0jKQMoDtBO f8QelzhFvOiEQ7N+SPBzcfLYWjjZJQYUheJrufnCJA7ltfqFx1zLMrWylTz9AMeY rPD8zclZBGGLCIWy+5XJoOaS6UmCzmwYYZ97coTFZu26h+B0TmgGupXfTir5uTDx uPuC6UKSxNq73u4WocxW6zEDKlFAkYpVPnCarwH5OFG9pTFKK38Y4NaSdbES3Ri6 8prWkEHrS6NuOFKxMRazaYsb5Q/wZ+ieRbg7uT13+mVnKdzc+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0Bph69cxoIpgY+WpSv8CtE/7xxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ1OWE2YjgtNjllOC0z MjNkLWEzYjEtMTlkMTFlOGQ3N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPsr43SSkRhnSWj4D7uhX8cxe0K1ZsXCcoOogqdqvukcwb9Z65bK4cM Klm2MXjdUS0gCQvSCewjHp6Ya4UwmgWQeOMArcpNk5SYb3EKrMlsTtLCfJeIiFOM p69graCAcWe9PG6tml745JooqQ5K0PD1xlAMWk0IQ7k8v0ghEHMQj3ClqgZECQuM 84EQpVRAVcMgX6oC94LN6rcat1gZeJ6+OcGbu8EDCcEh5HNa3VctIlIDNHLMn92V 70int9jEDpgh8dIBTQr8akqvTgGqsRPu0E5TKnO3uTe/S7Zzddf7BVLsOUbN6cQY zRR2HhqpCqBcoYn50hIl+IybmJXKSpY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:16:07 2025 by rpki-client