$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa File: 741259b8-470d-3e80-8df2-ca35db8344b2.roa (raw, json) Hash identifier: U0Y2iQjMu0YnKTD2ccjYG4ELOhw8P1ULYT2Mu979u1c= Subject key identifier: 51:1A:3B:D6:A5:D7:EF:BF:02:B1:6A:8A:68:9C:B0:76:9B:01:59:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73051C65DC136900405BB Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396550 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:51:c6:5d:c1:36:90:04:05:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=10e059d5-6e8f-4eca-8089-81f32c4a357b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b5:46:f6:00:a2:65:57:c2:e8:f1:6c:6e:69: 96:98:0a:41:04:5b:c2:93:55:6c:c4:6b:ff:d7:40: 2c:c1:87:06:67:ad:fa:f9:02:22:52:93:a0:bb:70: 8c:c0:c8:f7:bd:bd:3c:b5:e5:92:66:33:89:45:35: c0:d6:d1:70:52:cd:2d:c4:fe:95:9e:33:e6:c0:51: c9:a5:8d:da:c6:11:a0:ff:bf:84:21:7d:a1:8b:9e: 12:ce:b1:38:68:12:ef:8c:e7:e6:15:57:57:a7:91: 36:3d:d9:48:0f:ed:3d:08:4c:37:65:ff:c5:00:5c: 11:ea:25:41:c6:47:c4:8a:df:73:ed:25:29:9f:14: 04:e8:64:c3:c8:33:ed:04:6f:a9:51:c1:8d:91:1f: e9:e1:5e:9b:e8:85:c8:98:36:8c:16:d9:2e:e4:bb: 2b:b6:d7:50:33:eb:50:5a:76:0c:35:d5:a3:20:21: 78:68:29:bd:98:13:6a:b8:e9:b4:6b:f8:2a:26:89: 4d:d3:90:b6:bc:10:ae:67:e3:ae:d9:98:b5:cd:86: 38:d2:b8:5c:41:0c:f8:51:38:a5:12:f4:ac:6e:97: 53:32:14:1e:9a:b4:48:34:95:27:d5:5f:98:7a:f4: 62:81:c6:56:93:fb:f8:f8:c1:1e:32:51:f5:1c:59: 24:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1A:3B:D6:A5:D7:EF:BF:02:B1:6A:8A:68:9C:B0:76:9B:01:59:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:19:64:38:74:91:17:b9:fc:ba:a0:a4:66:0e:0f:34:7b:cf: 6d:7f:c5:7a:0a:2f:b6:ae:6a:b0:25:85:8e:9c:ac:a0:26:33: 97:97:c5:ae:e5:4e:d3:aa:2e:7e:3e:f3:56:02:d7:4b:d6:ba: 79:0f:24:a2:56:0b:ce:ee:98:16:4a:40:8d:45:c8:46:49:32: 60:ac:04:f2:67:76:10:6f:a2:dd:93:60:b1:2b:99:0d:44:4d: 6f:ad:02:6f:d4:29:36:34:4a:02:6e:f5:f7:2c:eb:89:49:4d: 9d:a1:51:cf:43:82:32:da:c4:f1:5e:a9:90:a2:32:62:9f:67: 61:ed:0d:02:66:f2:ee:df:28:d2:ed:f3:22:71:7e:a9:13:d5: 59:d3:05:00:86:00:bc:60:7c:d9:9b:2d:90:51:74:8a:61:cf: e8:3b:8b:ec:d3:17:8e:a8:74:d0:d9:96:8c:c4:95:c9:4b:d6: ec:20:01:2f:b2:4e:7d:c2:4a:63:bc:10:66:5d:c6:ac:35:15: 42:39:ff:5a:ed:47:d5:87:da:0a:ff:fa:0b:fc:f9:0c:d7:28: c6:e4:48:00:68:7a:d5:90:7a:3a:6e:a5:03:1f:81:6d:3a:20: fb:dd:67:97:e0:e3:be:74:2a:b3:ba:48:be:e2:22:72:ef:07: 9e:98:ef:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zBRxl3BNpAEBbswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTBlMDU5ZDUtNmU4Zi00ZWNhLTgwODktODFmMzJjNGEzNTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87VG9gCiZVfC6PFsbmmWmApBBFvCk1VsxGv/ 10AswYcGZ636+QIiUpOgu3CMwMj3vb08teWSZjOJRTXA1tFwUs0txP6VnjPmwFHJ pY3axhGg/7+EIX2hi54SzrE4aBLvjOfmFVdXp5E2PdlID+09CEw3Zf/FAFwR6iVB xkfEit9z7SUpnxQE6GTDyDPtBG+pUcGNkR/p4V6b6IXImDaMFtku5LsrttdQM+tQ WnYMNdWjICF4aCm9mBNquOm0a/gqJolN05C2vBCuZ+Ou2Zi1zYY40rhcQQz4UTil EvSsbpdTMhQemrRINJUn1V+YevRigcZWk/v4+MEeMlH1HFkk4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFEaO9al1++/ArFqimicsHabAVlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzQxMjU5YjgtNDcwZC0z ZTgwLThkZjItY2EzNWRiODM0NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJGWQ4dJEXufy6oKRmDg80e89tf8V6Ci+2rmqwJYWOnKygJjOXl8Wu 5U7Tqi5+PvNWAtdL1rp5DySiVgvO7pgWSkCNRchGSTJgrATyZ3YQb6Ldk2CxK5kN RE1vrQJv1Ck2NEoCbvX3LOuJSU2doVHPQ4Iy2sTxXqmQojJin2dh7Q0CZvLu3yjS 7fMicX6pE9VZ0wUAhgC8YHzZmy2QUXSKYc/oO4vs0xeOqHTQ2ZaMxJXJS9bsIAEv sk59wkpjvBBmXcasNRVCOf9a7UfVh9oK//oL/PkM1yjG5EgAaHrVkHo6bqUDH4Ft OiD73WeX4OO+dCqzuki+4iJy7weemO9K -----END CERTIFICATE-----Generated at Mon Oct 20 10:25:56 2025 by rpki-client