$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa File: 659f45f4-1930-35f3-bd28-8eec0ba978f8.roa (raw, json) Hash identifier: i55mJuYET3bLo+I2EOSl9orrPagJHeO74dP53Pdmd+c= Subject key identifier: 5E:C7:9E:50:A0:67:FB:04:17:13:CF:07:97:CB:CD:D4:F2:C3:3A:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CACEFE40F1DAE68DFA100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397202 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ac:ef:e4:0f:1d:ae:68:df:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d99e31f4-3de7-4e39-ac59-7961278e7de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2e:02:ec:73:42:9b:62:31:29:97:5e:5e:34: 18:27:17:92:c5:ae:00:71:03:67:65:b0:ba:0d:20: b4:7c:40:d8:9d:9d:a6:29:ae:9e:73:04:3e:0c:c5: 71:ad:b8:0e:07:e2:0a:f4:6b:f7:dc:1d:c3:a7:c2: 1b:71:75:65:b5:d4:0f:5e:c3:9d:32:1c:a0:82:fd: 02:10:0e:f5:6a:96:6e:07:67:49:ef:c7:76:6a:3a: 7b:b7:d8:0e:f6:14:aa:4c:25:18:bd:ac:87:1c:6a: a3:81:12:61:e6:0c:62:12:f4:58:58:4d:9b:8a:03: bb:0a:a4:7e:be:3c:06:a1:18:fa:5b:91:cc:e8:73: 75:0c:8a:a8:53:00:94:e5:2a:d8:46:ba:11:15:bb: e9:31:ec:c4:4d:16:5f:c3:cf:ce:32:b7:a2:19:ff: 75:ee:91:41:51:1c:60:08:8e:d4:f9:15:33:68:81: d3:c1:a1:37:9c:15:4f:2c:d7:c8:72:1b:28:10:ab: 6e:44:cd:b1:a2:27:5f:9e:c8:e0:41:49:7f:6b:d4: 8e:f6:b6:53:a1:90:7c:21:0c:df:d5:37:33:ef:eb: 68:ef:bb:47:16:e2:58:a5:b2:f6:7b:1e:bc:57:b8: 02:77:d1:58:62:a4:55:ee:7c:4e:7e:fd:d6:a7:3b: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C7:9E:50:A0:67:FB:04:17:13:CF:07:97:CB:CD:D4:F2:C3:3A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:70:7a:07:1c:e2:60:93:cc:f7:b8:6f:e9:d0:d4:f3:6b:84: 3b:eb:d1:b7:f7:59:03:32:32:4e:28:de:b9:7f:f6:ce:39:ef: 50:28:8a:6c:77:93:01:31:0c:31:5c:5e:f3:7c:6c:59:62:ac: 8d:a1:9c:24:76:ef:a3:4d:9e:da:29:2e:ba:dc:da:2c:59:51: a5:26:8a:18:4f:20:c1:90:cd:0b:24:3e:ef:89:42:81:b9:b0: f0:8d:38:3d:79:5b:b7:bf:fe:13:b6:fe:43:a2:64:08:2e:c8: 57:39:71:cd:ca:01:96:e9:80:02:eb:78:45:2e:d0:83:48:2c: b6:48:b1:3a:f4:7b:fb:21:4c:8c:74:f7:d1:80:c3:3f:d0:2d: 58:bc:91:bf:c6:fe:98:1d:8a:cb:49:2f:ee:a5:2c:9e:1c:ed: d7:f0:92:f5:fb:3c:d3:95:2f:f8:49:7d:8f:8a:31:00:98:d5: d2:8a:e2:fe:29:ca:80:19:c0:68:fe:1b:c4:85:8a:47:75:31: 50:1c:a9:77:8f:be:3f:0a:6d:bf:17:d0:46:b7:e2:12:07:85: 5d:4e:8b:ff:eb:11:c6:5f:06:eb:79:d1:b5:a4:6b:35:3d:bc: e2:48:a3:57:e2:8d:6c:b6:5d:a6:d5:cc:15:ed:eb:2f:31:51: 38:2f:60:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKzv5A8drmjfoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDk5ZTMxZjQtM2RlNy00ZTM5LWFjNTktNzk2MTI3OGU3ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS4C7HNCm2IxKZdeXjQYJxeSxa4AcQNnZbC6 DSC0fEDYnZ2mKa6ecwQ+DMVxrbgOB+IK9Gv33B3Dp8IbcXVltdQPXsOdMhyggv0C EA71apZuB2dJ78d2ajp7t9gO9hSqTCUYvayHHGqjgRJh5gxiEvRYWE2bigO7CqR+ vjwGoRj6W5HM6HN1DIqoUwCU5SrYRroRFbvpMezETRZfw8/OMreiGf917pFBURxg CI7U+RUzaIHTwaE3nBVPLNfIchsoEKtuRM2xoidfnsjgQUl/a9SO9rZToZB8IQzf 1Tcz7+to77tHFuJYpbL2ex68V7gCd9FYYqRV7nxOfv3WpztLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7HnlCgZ/sEFxPPB5fLzdTywzpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjU5ZjQ1ZjQtMTkzMC0z NWYzLWJkMjgtOGVlYzBiYTk3OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRwegcc4mCTzPe4b+nQ1PNrhDvr0bf3WQMyMk4o3rl/9s4571Aoimx3 kwExDDFcXvN8bFlirI2hnCR276NNntopLrrc2ixZUaUmihhPIMGQzQskPu+JQoG5 sPCNOD15W7e//hO2/kOiZAguyFc5cc3KAZbpgALreEUu0INILLZIsTr0e/shTIx0 99GAwz/QLVi8kb/G/pgdistJL+6lLJ4c7dfwkvX7PNOVL/hJfY+KMQCY1dKK4v4p yoAZwGj+G8SFikd1MVAcqXePvj8Kbb8X0Ea34hIHhV1Oi//rEcZfBut50bWkazU9 vOJIo1fijWy2XabVzBXt6y8xUTgvYIk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:33 2025 by rpki-client