$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62e63c58-bb62-3740-a5b7-4d5907b7b32d.roa File: 62e63c58-bb62-3740-a5b7-4d5907b7b32d.roa (raw, json) Hash identifier: ByHUeyXeEGKGD5o8Jit5aFEHtVS5aDDT4iJEUhwYNeI= Subject key identifier: D6:B7:E8:6D:1B:12:2B:F2:63:09:A2:B7:5E:BD:16:BB:CF:12:3A:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73948804F13916995B780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62e63c58-bb62-3740-a5b7-4d5907b7b32d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396615 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:39:48:80:4f:13:91:69:95:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=fc82bba9-df90-41d1-8722-fde0a2ff2962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:01:02:31:66:5f:61:34:5d:2f:87:98:85: ec:7c:a3:cb:db:6f:4c:ad:4c:84:bf:14:30:13:c6: 76:32:fc:71:c0:4a:ba:2e:1e:26:fc:48:66:9f:0e: f2:89:21:ec:52:9d:6a:39:e5:ee:6f:dc:61:2c:c5: f8:3e:c0:ec:e5:f8:10:d6:e9:08:18:96:0b:a2:c0: d5:cb:84:46:ea:01:1f:10:6a:b4:06:a9:8e:60:ac: 59:95:c8:62:4e:56:9b:51:b1:d2:30:ed:a2:b4:28: c6:5a:37:7f:fd:a1:55:86:7c:0e:ea:ea:23:cc:30: c5:30:7b:22:55:c4:21:b7:26:74:36:b6:68:3c:3c: cc:05:b4:b3:29:a6:df:5c:80:9e:ac:86:ba:1f:43: 11:0f:81:ab:fa:c7:83:79:cd:4a:8e:de:22:c8:2c: da:cd:70:e9:21:b1:60:18:55:54:6f:b0:85:47:76: 2d:a5:76:7c:22:6c:ad:9a:61:2c:fe:36:11:e6:6d: 54:c4:78:59:e7:a2:44:01:ae:66:50:47:f8:b5:f5: dd:a5:09:1e:42:ee:4c:ff:53:f7:a4:86:ba:c9:65: be:91:7d:d7:fa:6e:16:d2:cc:30:74:9a:b3:c5:3d: 92:72:2c:33:7c:cf:79:80:b8:f4:0e:9d:48:6d:0f: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:E8:6D:1B:12:2B:F2:63:09:A2:B7:5E:BD:16:BB:CF:12:3A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/62e63c58-bb62-3740-a5b7-4d5907b7b32d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b1:6e:5a:2d:85:fe:bf:0b:64:5f:d5:52:ff:fc:4e:dd:a1: b2:06:29:cb:1f:09:5d:36:b2:e9:69:1f:6b:38:d1:99:10:8f: ff:1a:14:82:bc:fe:c1:8e:9a:37:0f:59:32:cf:8e:42:b8:4f: d7:5d:dd:b9:cf:f3:72:37:40:83:b9:9e:0c:cf:f9:ef:f8:d8: 51:41:c9:6f:35:58:84:3a:ec:17:01:b2:73:b6:ac:f3:fc:fe: 32:5a:fa:2e:ca:d7:9d:df:ce:f4:1b:f2:ee:85:be:dc:4b:1f: c5:7c:90:68:1d:5b:91:cc:dd:5b:21:7d:e7:32:39:1c:5f:ea: 1b:b6:56:a3:7e:f5:9a:80:9a:b4:43:0d:7a:64:f0:ed:5b:ba: 5c:62:3b:19:57:9a:d7:e0:15:a6:77:ec:97:8c:82:f8:aa:23: 55:ad:64:a1:4b:1f:40:1f:de:88:22:78:49:cd:77:e7:b6:5e: 01:3e:4e:0f:db:23:bb:3f:0a:10:7d:97:b6:e7:c4:ad:09:cf: 91:74:81:1e:9c:8a:a7:03:4c:ae:c4:ef:fa:ff:70:05:6a:72: 1e:17:40:a7:dd:09:43:4b:d9:d4:43:03:6a:37:ea:8a:26:09: 72:e2:37:84:ab:f0:03:47:3d:05:b6:52:51:34:dd:e6:16:2a: 02:c1:c8:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zlIgE8TkWmVt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmM4MmJiYTktZGY5MC00MWQxLTg3MjItZmRlMGEyZmYyOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2cBAjFmX2E0XS+HmIXsfKPL229MrUyEvxQw E8Z2MvxxwEq6Lh4m/Ehmnw7yiSHsUp1qOeXub9xhLMX4PsDs5fgQ1ukIGJYLosDV y4RG6gEfEGq0BqmOYKxZlchiTlabUbHSMO2itCjGWjd//aFVhnwO6uojzDDFMHsi VcQhtyZ0NrZoPDzMBbSzKabfXICerIa6H0MRD4Gr+seDec1Kjt4iyCzazXDpIbFg GFVUb7CFR3YtpXZ8ImytmmEs/jYR5m1UxHhZ56JEAa5mUEf4tfXdpQkeQu5M/1P3 pIa6yWW+kX3X+m4W0swwdJqzxT2SciwzfM95gLj0Dp1IbQ/7PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNa36G0bEivyYwmit169FrvPEjrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjJlNjNjNTgtYmI2Mi0z NzQwLWE1YjctNGQ1OTA3YjdiMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATsW5aLYX+vwtkX9VS//xO3aGyBinLHwldNrLpaR9rONGZEI//GhSC vP7Bjpo3D1kyz45CuE/XXd25z/NyN0CDuZ4Mz/nv+NhRQclvNViEOuwXAbJztqzz /P4yWvouyted3870G/Luhb7cSx/FfJBoHVuRzN1bIX3nMjkcX+obtlajfvWagJq0 Qw16ZPDtW7pcYjsZV5rX4BWmd+yXjIL4qiNVrWShSx9AH96IInhJzXfntl4BPk4P 2yO7PwoQfZe258StCc+RdIEenIqnA0yuxO/6/3AFanIeF0Cn3QlDS9nUQwNqN+qK Jgly4jeEq/ADRz0FtlJRNN3mFioCwciz -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:16 2025 by rpki-client