$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78bc6128-39a3-3e2a-bd03-fdbfe91c2b28.roa File: 78bc6128-39a3-3e2a-bd03-fdbfe91c2b28.roa (raw, json) Hash identifier: TTwAWGCIjm3jjTKiA5HJjnUYvXK+KY44SfHuzlJxAbo= Subject key identifier: F6:2A:AE:20:BA:88:1B:4C:16:46:F7:CD:A1:BA:F4:FC:50:B6:B3:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E730C1761238E56D08DEA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78bc6128-39a3-3e2a-bd03-fdbfe91c2b28.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397211 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:c1:76:12:38:e5:6d:08:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=65bc55d1-a42d-470d-a4b5-1f665593974a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:99:46:cc:47:d6:e0:42:ab:e0:d4:5e:11:d1: 37:e2:8c:5f:d6:8d:0d:f1:76:e0:a5:54:14:6b:de: 9b:ae:b4:4f:d7:58:bd:25:ef:cb:24:4c:41:bc:88: 6b:cc:68:c6:8a:4b:38:34:ab:d4:a4:b9:41:9a:94: de:7d:48:2a:c4:01:11:de:cf:2f:44:80:01:63:73: f0:96:89:b6:33:39:c7:1b:95:75:c5:38:66:22:a4: e9:74:2b:8f:b8:00:71:b9:07:09:94:33:de:1b:c2: c9:b7:2b:05:fa:0a:0d:a9:84:90:77:7e:b6:c1:56: 51:3b:4d:24:90:7d:8c:c6:82:60:71:83:e2:71:bd: 27:f3:58:e4:a4:64:d2:e7:78:b8:39:0d:23:f3:36: dd:e5:72:be:82:03:b4:4d:63:e8:4f:fd:50:83:65: 09:a8:4b:98:ba:72:7f:e3:8b:7c:c1:97:d0:af:8a: 73:70:29:50:a5:2b:a2:23:cc:24:9b:50:52:a9:07: 11:71:05:fe:04:19:54:73:96:dc:2f:6b:6b:5b:60: 63:17:7e:0f:d3:6e:49:42:e8:70:1a:4d:8d:be:b0: a2:71:c9:ca:f5:ae:5d:06:56:5f:6a:43:52:80:10: 8e:df:28:5c:97:1b:c3:b6:58:07:ba:9d:c0:24:b2: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:AE:20:BA:88:1B:4C:16:46:F7:CD:A1:BA:F4:FC:50:B6:B3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78bc6128-39a3-3e2a-bd03-fdbfe91c2b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c1:e5:3b:9c:42:0e:e4:96:16:33:99:a4:33:40:43:75:df: 2a:10:3a:50:1e:4c:61:f5:58:b8:3f:31:ad:ce:8f:ca:1f:b2: 30:18:75:bf:ac:b7:68:a3:6a:f1:7e:20:83:2d:88:e6:5a:66: da:50:39:9f:a0:1e:dd:a0:09:34:a4:51:b6:c4:89:ac:23:05: 9f:65:c3:3b:40:1d:1a:e1:23:ff:3a:ea:a0:f8:bd:bc:e7:a8: 50:00:32:9e:0b:74:39:56:11:62:e6:02:52:e7:67:05:be:02: 1e:49:77:ae:4d:af:03:b8:aa:dc:43:3a:30:d4:0f:6c:0b:e3: b2:03:dc:1a:68:19:33:51:0f:c1:e3:0c:61:ba:db:9c:02:7a: f9:af:1e:fd:14:61:1b:22:8b:ea:4d:51:d5:73:ff:bf:4f:41: 0a:b1:77:40:43:70:c3:10:1b:6f:1a:b3:32:75:77:6a:80:ee: 93:20:a8:36:a2:ad:0e:35:38:a1:a5:ce:b6:ff:44:6e:ff:6f: f5:80:f6:71:4d:9d:f5:d7:4c:b1:80:0b:91:9c:b5:be:64:c3: 54:fd:c7:f8:10:39:bd:2b:26:aa:1c:55:83:09:5b:96:1b:07: 2f:13:b8:58:9e:a9:d5:05:09:f4:ac:f3:f8:05:92:38:f0:fa: a5:29:a5:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zDBdhI45W0I3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjViYzU1ZDEtYTQyZC00NzBkLWE0YjUtMWY2NjU1OTM5NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJlGzEfW4EKr4NReEdE34oxf1o0N8XbgpVQU a96brrRP11i9Je/LJExBvIhrzGjGiks4NKvUpLlBmpTefUgqxAER3s8vRIABY3Pw lom2MznHG5V1xThmIqTpdCuPuABxuQcJlDPeG8LJtysF+goNqYSQd362wVZRO00k kH2MxoJgcYPicb0n81jkpGTS53i4OQ0j8zbd5XK+ggO0TWPoT/1Qg2UJqEuYunJ/ 44t8wZfQr4pzcClQpSuiI8wkm1BSqQcRcQX+BBlUc5bcL2trW2BjF34P025JQuhw Gk2NvrCiccnK9a5dBlZfakNSgBCO3yhclxvDtlgHup3AJLKO4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPYqriC6iBtMFkb3zaG69PxQtrNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhiYzYxMjgtMzlhMy0z ZTJhLWJkMDMtZmRiZmU5MWMyYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4weU7nEIO5JYWM5mkM0BDdd8qEDpQHkxh9Vi4PzGtzo/KH7IwGHW/ rLdoo2rxfiCDLYjmWmbaUDmfoB7doAk0pFG2xImsIwWfZcM7QB0a4SP/Ouqg+L28 56hQADKeC3Q5VhFi5gJS52cFvgIeSXeuTa8DuKrcQzow1A9sC+OyA9waaBkzUQ/B 4wxhutucAnr5rx79FGEbIovqTVHVc/+/T0EKsXdAQ3DDEBtvGrMydXdqgO6TIKg2 oq0ONTihpc62/0Ru/2/1gPZxTZ3110yxgAuRnLW+ZMNU/cf4EDm9KyaqHFWDCVuW GwcvE7hYnqnVBQn0rPP4BZI48PqlKaUZ -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:04 2025 by rpki-client