$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa File: 867a3490-759c-3fa2-a869-8e920a15b939.roa (raw, json) Hash identifier: 1FSlIU2zajlH1oW1t+oBpE6YDlIvNnkW6w1UTvbjR6c= Subject key identifier: FD:4D:AA:AF:2D:CC:79:CB:57:69:9F:12:37:94:BF:21:83:A2:8B:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3EA1D2BEFC07F022000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397197 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:ea:1d:2b:ef:c0:7f:02:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4739c48e-826b-419b-83ad-06044addca7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:79:2c:cd:aa:34:b6:e8:e5:6a:91:82:f5:16: 94:b7:d1:44:8b:56:17:cf:93:01:fe:0b:29:63:3f: 23:4e:42:67:b0:d0:55:02:cd:24:97:67:c0:3f:78: 57:cf:53:e6:40:15:83:ab:c9:ba:4c:5c:cc:e1:44: 54:3e:fe:7e:e1:49:ec:73:06:e1:39:d1:06:03:a9: 19:22:88:a1:8e:35:dc:4a:db:4a:bc:eb:68:91:d3: 1b:74:ec:21:5b:d2:e8:02:a7:2d:ab:fe:6e:5d:28: db:13:ff:c5:28:fa:30:e8:c4:a0:a3:f5:13:67:3a: 91:64:47:be:0e:22:2a:90:1c:6c:96:ca:80:8f:84: 81:7b:2e:5a:52:ad:66:8e:42:3a:8c:ba:1d:48:46: 97:e0:c1:cf:2a:05:61:78:3d:3a:a8:c3:5b:a7:44: 87:5a:41:82:cd:a0:15:ea:ca:1e:37:27:1d:50:7d: 93:42:0b:3f:74:92:c3:a2:77:94:02:a9:0d:0a:72: d1:cf:8e:86:cb:5f:9b:a3:8d:a3:cf:09:12:b1:f6: 73:9a:23:d3:32:5f:8d:56:16:2f:92:25:7e:7a:89: 97:dd:a1:83:00:c8:ca:55:f8:3b:69:cc:53:26:6b: b5:56:7f:1d:af:6b:af:fc:2a:a6:ef:3a:a0:bb:c1: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:AA:AF:2D:CC:79:CB:57:69:9F:12:37:94:BF:21:83:A2:8B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/867a3490-759c-3fa2-a869-8e920a15b939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:f5:96:b7:16:c0:c1:3d:6c:e1:ad:2f:96:11:6f:15:50: c2:a3:2c:42:b1:2f:62:e1:7d:0e:57:d5:5a:79:52:19:d3:00: a4:25:c5:96:f3:be:79:a0:f2:17:e2:99:d7:bf:69:9c:22:77: 8c:86:97:68:e6:29:0e:c9:a8:9f:38:24:79:1e:96:dc:d2:c4: a8:7f:3c:4a:d6:6d:9d:69:ce:65:6c:1d:7e:f8:e6:07:12:b8: 07:98:15:2d:cf:85:bc:59:9b:89:a2:3c:5b:ac:6b:d5:94:fa: af:7f:3d:17:37:75:ea:b1:3e:31:e5:73:19:12:2a:7a:d9:52: 08:0e:72:24:94:18:0b:68:d8:bd:5f:2d:c9:bd:d8:7a:3c:2a: c6:57:11:62:e1:c1:b0:3e:23:a1:73:a1:71:43:85:e5:43:b7: 01:fe:fd:e7:ee:65:eb:17:79:62:00:be:39:3d:fb:25:d2:3e: 20:cb:6b:1c:68:85:70:34:da:c1:42:b4:ae:ba:dc:b6:76:97: f3:31:74:b2:78:d9:8b:44:69:94:6f:65:7d:fb:b8:c9:1b:0f: 25:81:84:56:69:99:1b:01:cf:88:ee:14:57:0d:49:2d:f3:ce: 51:ae:bc:97:92:6c:5e:3d:ab:9f:e6:d8:8e:94:c4:41:51:e0: 95:ec:22:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLPqHSvvwH8CIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDczOWM0OGUtODI2Yi00MTliLTgzYWQtMDYwNDRhZGRjYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3kszao0tujlapGC9RaUt9FEi1YXz5MB/gsp Yz8jTkJnsNBVAs0kl2fAP3hXz1PmQBWDq8m6TFzM4URUPv5+4UnscwbhOdEGA6kZ IoihjjXcSttKvOtokdMbdOwhW9LoAqctq/5uXSjbE//FKPow6MSgo/UTZzqRZEe+ DiIqkBxslsqAj4SBey5aUq1mjkI6jLodSEaX4MHPKgVheD06qMNbp0SHWkGCzaAV 6soeNycdUH2TQgs/dJLDoneUAqkNCnLRz46Gy1+bo42jzwkSsfZzmiPTMl+NVhYv kiV+eomX3aGDAMjKVfg7acxTJmu1Vn8dr2uv/Cqm7zqgu8F/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1Nqq8tzHnLV2mfEjeUvyGDooujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY3YTM0OTAtNzU5Yy0z ZmEyLWE4NjktOGU5MjBhMTViOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXN9Za3FsDBPWzhrS+WEW8VUMKjLEKxL2LhfQ5X1Vp5UhnTAKQlxZbz vnmg8hfimde/aZwid4yGl2jmKQ7JqJ84JHkeltzSxKh/PErWbZ1pzmVsHX745gcS uAeYFS3PhbxZm4miPFusa9WU+q9/PRc3deqxPjHlcxkSKnrZUggOciSUGAto2L1f Lcm92Ho8KsZXEWLhwbA+I6FzoXFDheVDtwH+/efuZesXeWIAvjk9+yXSPiDLaxxo hXA02sFCtK663LZ2l/MxdLJ42YtEaZRvZX37uMkbDyWBhFZpmRsBz4juFFcNSS3z zlGuvJeSbF49q5/m2I6UxEFR4JXsIvk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:55 2025 by rpki-client