$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa File: 961a3609-d1f9-3024-912e-654f43f10735.roa (raw, json) Hash identifier: 2G/S9KRaE+NX+siuMkmfZQEdBIONDzDl6ba8WQXZE+o= Subject key identifier: D6:5C:65:FB:5C:F9:94:A0:9B:8A:1B:A0:54:45:27:37:4F:ED:0E:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E735A38CEEBF923B093180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396603 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:35:a3:8c:ee:bf:92:3b:09:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=263451c3-fef7-411b-b539-9877b1d22d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:ee:93:22:20:3d:30:00:0a:17:67:15:92: b0:fb:9c:93:7f:e4:e1:d3:1c:5e:c2:22:00:ad:70: 3a:2a:b8:31:24:8f:bd:49:a2:1f:8f:ba:35:c4:8a: 2c:33:3e:57:96:16:a1:05:d9:55:16:e3:6d:00:e2: 25:83:52:8a:bd:24:ec:a0:b9:e0:4b:35:39:1a:17: b9:a4:35:e2:0a:2e:14:0e:8e:70:ac:a4:7c:3d:d7: aa:b9:b1:9e:63:45:67:7c:5f:78:19:a5:11:38:07: 67:4a:d2:a4:ca:35:c1:52:fa:34:e0:a0:25:68:fc: 1b:b2:2a:48:0a:8d:49:cb:e6:99:5b:1f:96:06:53: e9:f2:bb:db:3d:b7:db:0a:0e:99:d3:08:12:46:b9: 8e:0e:3a:a2:b7:79:0f:66:70:e8:61:7b:e7:31:59: 65:27:c0:3f:8f:4b:02:63:99:6d:1b:3e:45:fe:42: b5:78:46:fc:dd:30:61:2b:c6:f4:60:fa:13:35:2b: fb:3c:7d:5f:12:ce:44:29:96:f7:75:b5:46:2e:6c: 18:9f:81:f4:92:9c:9a:87:9a:4d:3d:0d:d2:3b:82: 13:05:2f:8b:66:7b:96:95:18:74:fb:01:ed:a8:dc: b7:e7:5d:68:8f:86:61:fd:69:e2:01:43:61:6a:f2: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5C:65:FB:5C:F9:94:A0:9B:8A:1B:A0:54:45:27:37:4F:ED:0E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:11:57:8c:f6:c6:e4:37:ea:de:27:36:e5:49:e3:dc:15:ec: 97:3a:76:ab:5f:29:d4:71:64:67:66:4a:4b:a7:88:11:50:3a: 9b:e8:d1:32:54:bd:ad:f0:e7:de:24:6c:89:63:4d:6d:e8:ad: 8d:b4:24:54:2f:10:d5:6a:62:77:fb:37:e8:09:a6:7d:14:d8: 40:39:1c:82:74:d7:c8:07:3c:a5:a9:7c:0f:0c:14:1b:2c:6a: 84:31:28:1a:13:9d:86:a6:34:5d:75:cc:5b:f6:b3:1a:53:32: 2a:1c:a8:95:c7:a5:f1:cd:c1:54:62:07:3e:79:d3:6b:2a:70: a7:24:5c:33:41:b9:9b:5f:d1:8d:3d:16:74:4f:cc:a7:22:95: f9:e1:09:19:3f:b2:d4:61:59:af:f7:55:65:14:7b:df:23:b9: 22:bd:a8:6f:fc:31:ab:aa:c8:7d:ba:c4:6f:67:71:8b:21:cd: 5b:ef:5a:66:00:41:a4:3e:80:a5:c2:e4:bf:24:fb:cf:2b:13: ab:d0:a5:ce:ed:a7:1c:e3:d4:bb:1b:4b:fd:4f:fb:89:c3:62: 04:fc:a2:51:69:01:9e:ed:48:e6:47:9e:55:e4:ce:36:d8:33: 44:6a:1f:b4:94:11:71:fd:ad:8a:a6:be:35:16:0c:de:3b:05: 45:cb:81:24 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zWjjO6/kjsJMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjYzNDUxYzMtZmVmNy00MTFiLWI1MzktOTg3N2IxZDIyZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNzukyIgPTAAChdnFZKw+5yTf+Th0xxewiIA rXA6KrgxJI+9SaIfj7o1xIosMz5XlhahBdlVFuNtAOIlg1KKvSTsoLngSzU5Ghe5 pDXiCi4UDo5wrKR8PdequbGeY0VnfF94GaUROAdnStKkyjXBUvo04KAlaPwbsipI Co1Jy+aZWx+WBlPp8rvbPbfbCg6Z0wgSRrmODjqit3kPZnDoYXvnMVllJ8A/j0sC Y5ltGz5F/kK1eEb83TBhK8b0YPoTNSv7PH1fEs5EKZb3dbVGLmwYn4H0kpyah5pN PQ3SO4ITBS+LZnuWlRh0+wHtqNy3511oj4Zh/WniAUNhavJr5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNZcZftc+ZSgm4oboFRFJzdP7Q4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTYxYTM2MDktZDFmOS0z MDI0LTkxMmUtNjU0ZjQzZjEwNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYEVeM9sbkN+reJzblSePcFeyXOnarXynUcWRnZkpLp4gRUDqb6NEy VL2t8OfeJGyJY01t6K2NtCRULxDVamJ3+zfoCaZ9FNhAORyCdNfIBzylqXwPDBQb LGqEMSgaE52GpjRddcxb9rMaUzIqHKiVx6XxzcFUYgc+edNrKnCnJFwzQbmbX9GN PRZ0T8ynIpX54QkZP7LUYVmv91VlFHvfI7kivahv/DGrqsh9usRvZ3GLIc1b71pm AEGkPoClwuS/JPvPKxOr0KXO7acc49S7G0v9T/uJw2IE/KJRaQGe7UjmR55V5M42 2DNEah+0lBFx/a2Kpr41FgzeOwVFy4Ek -----END CERTIFICATE-----Generated at Mon Oct 20 15:58:02 2025 by rpki-client