$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa File: 599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa (raw, json) Hash identifier: Q+uiHNQuX2DSiZwS/Wllj1uEJZpsO8PGnLsXyLWqevE= Subject key identifier: 4F:76:0C:81:BA:90:34:36:E7:88:53:25:FE:07:C3:DA:CA:0B:22:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E736F3ADEE40D859366D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396562 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:36:f3:ad:ee:40:d8:59:36:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ac3bd1b8-1cfa-49cb-a8dc-fcc4fe452220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2e:f4:78:33:a0:39:f5:cc:59:39:5e:5a:08: 7f:c4:e7:e5:86:ac:dc:e2:64:27:49:a5:bd:a8:be: a9:e8:9e:fd:72:4f:23:c7:96:b8:9f:97:e9:c0:9b: 24:9d:e3:44:04:de:76:84:8f:68:d9:2f:e7:1c:60: 1e:6e:9b:6f:b0:8d:94:b7:14:29:85:d6:68:0d:f2: e4:12:3e:0e:38:f9:a4:9e:2b:2f:1e:8f:92:45:39: 45:1e:70:83:f7:db:3c:fb:71:53:bc:99:39:22:43: 80:9c:e7:28:13:86:62:f4:5e:37:a5:e3:c6:6a:ed: f2:9b:8d:fe:12:a5:cb:ac:a4:55:36:3a:27:b9:17: f0:0f:2f:84:20:14:1f:b1:16:3a:c4:d2:2c:92:b5: 93:4d:40:1f:28:d1:9a:20:a5:dd:26:98:11:93:13: 9f:83:af:81:ee:54:34:f3:b3:25:33:f4:90:d2:7f: cb:14:98:18:07:dc:6c:e2:9f:2b:bf:d5:de:6f:cf: 43:ba:ed:78:19:f6:1c:e5:6d:68:3e:21:4d:1c:31: cc:50:2d:8e:b1:75:1e:bd:3a:c5:fd:f9:9e:a6:b5: 8f:0b:3c:b0:12:a6:9f:cf:52:53:11:b7:1b:a8:80: c2:ee:8c:8d:dc:e7:10:34:e5:f4:8c:40:b0:5e:d2: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:0C:81:BA:90:34:36:E7:88:53:25:FE:07:C3:DA:CA:0B:22:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a7:06:cb:25:28:1d:fd:0d:4e:89:e7:f8:2f:3e:2e:d6:b6: 40:ba:89:30:ad:d1:1e:07:c8:0e:c4:71:fa:b9:f5:a4:2a:52: 42:e8:81:d5:1f:27:b3:03:ce:62:c7:f8:e6:d5:c7:c4:36:da: 21:a8:86:e4:5f:5a:8b:86:b7:9b:44:6c:83:dc:b4:9a:13:5e: f2:f8:b2:3a:27:14:0b:8a:93:ac:f9:6c:47:a4:75:29:26:ea: 89:41:2e:1b:43:24:9c:a9:ea:49:a5:e7:04:f8:27:69:61:19: b9:ab:06:f6:ec:d7:d9:e6:d5:3d:51:50:67:68:c4:9a:8f:c0: 49:6a:c9:10:c2:c0:a7:98:22:73:15:8c:be:42:48:da:a9:39: 94:ec:11:47:f2:d1:c6:46:56:84:8b:b1:81:2f:03:55:f3:04: 26:99:0e:bd:ec:9b:3e:9d:2f:76:8a:c8:35:e1:a3:ed:7a:64: 6a:fc:b3:67:96:6e:42:dc:aa:80:e0:99:ab:7c:6e:e8:a9:21: f1:3e:df:f2:70:36:3a:17:8d:83:39:f8:b1:67:64:60:e6:23: 2e:2e:49:c8:6c:58:13:e3:42:18:20:e0:d0:df:19:6c:cc:39: 97:af:37:cf:7f:e2:92:12:24:a5:44:42:e0:7b:38:14:eb:93: 56:11:f3:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zbzre5A2Fk2bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWMzYmQxYjgtMWNmYS00OWNiLWE4ZGMtZmNjNGZlNDUyMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC70eDOgOfXMWTleWgh/xOflhqzc4mQnSaW9 qL6p6J79ck8jx5a4n5fpwJskneNEBN52hI9o2S/nHGAebptvsI2UtxQphdZoDfLk Ej4OOPmknisvHo+SRTlFHnCD99s8+3FTvJk5IkOAnOcoE4Zi9F43pePGau3ym43+ EqXLrKRVNjonuRfwDy+EIBQfsRY6xNIskrWTTUAfKNGaIKXdJpgRkxOfg6+B7lQ0 87MlM/SQ0n/LFJgYB9xs4p8rv9Xeb89Duu14GfYc5W1oPiFNHDHMUC2OsXUevTrF /fmeprWPCzywEqafz1JTEbcbqIDC7oyN3OcQNOX0jECwXtJlmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE92DIG6kDQ254hTJf4Hw9rKCyLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk5NTg4ZmYtMTdkNS0z ZGM5LWFhYTctMjEyMmIxZWM1MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBopwbLJSgd/Q1Oief4Lz4u1rZAuokwrdEeB8gOxHH6ufWkKlJC6IHV HyezA85ix/jm1cfENtohqIbkX1qLhrebRGyD3LSaE17y+LI6JxQLipOs+WxHpHUp JuqJQS4bQyScqepJpecE+CdpYRm5qwb27NfZ5tU9UVBnaMSaj8BJaskQwsCnmCJz FYy+QkjaqTmU7BFH8tHGRlaEi7GBLwNV8wQmmQ697Js+nS92isg14aPtemRq/LNn lm5C3KqA4JmrfG7oqSHxPt/ycDY6F42DOfixZ2Rg5iMuLknIbFgT40IYIODQ3xls zDmXrzfPf+KSEiSlRELgezgU65NWEfPS -----END CERTIFICATE-----Generated at Mon Oct 20 10:39:12 2025 by rpki-client