$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa File: 97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa (raw, json) Hash identifier: Uvyt+ghzE+aX/i3yevrnYkWSHPiHGgNg0a1A1g9V8GU= Subject key identifier: A9:71:D8:F3:0C:38:B3:B6:D3:9E:49:2B:57:FC:C5:F6:5A:94:88:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7366F69FF67D6966AD880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396541 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:36:6f:69:ff:67:d6:96:6a:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=426aeb5c-3456-48ca-8a1a-d0217cf8da6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:17:d0:1a:6c:2a:5c:d5:c0:9f:bb:d4:e8: 3d:09:5c:7c:5f:d0:86:60:87:1e:30:18:d6:2b:87: 3a:75:1f:30:77:79:93:78:0a:64:d7:7b:04:1f:31: f7:e1:d6:2a:79:56:a2:eb:00:8d:18:a5:13:d5:41: df:12:33:38:30:c5:a9:9a:ec:7f:bc:f7:91:e0:26: 5d:e4:56:a1:a2:8a:b6:5a:3b:22:93:40:5c:20:80: e4:15:06:3d:8c:74:7e:fd:9d:c8:c9:a2:45:82:86: 85:e9:b1:98:b1:87:49:2a:f7:d4:32:e7:da:6a:1b: ed:a4:59:d1:96:46:5f:c7:f5:f2:1d:bc:d0:e4:71: 02:67:b6:91:f8:55:bc:84:d6:61:f9:ba:ed:1a:f1: 41:d8:f9:d0:97:8f:07:8a:4a:b5:60:d1:7a:fc:a9: f2:48:16:ff:b7:5a:00:27:6d:25:b5:1b:2d:cb:d0: 1e:c3:5f:4b:79:9a:9a:df:f3:80:e2:dd:96:6c:25: a5:67:77:73:d5:fb:23:14:80:a6:92:34:15:f6:01: 20:83:57:0c:d5:5e:49:c5:aa:dd:4a:40:78:00:14: 9e:4c:9c:81:11:91:a5:0c:50:f3:38:8d:20:a7:a2: 74:d5:3f:1b:46:17:e0:a1:e8:e2:bf:42:c9:4d:e0: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:D8:F3:0C:38:B3:B6:D3:9E:49:2B:57:FC:C5:F6:5A:94:88:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9c:1e:fc:cc:f5:72:3e:d4:8a:2b:2d:ef:6a:63:bf:dc:12: 14:23:ad:8c:75:0e:fc:8d:85:7d:a0:bf:c5:35:5e:7d:21:09: d8:e1:d7:ce:fc:36:eb:0e:9c:eb:e4:33:15:e2:8b:ff:65:10: 04:a8:79:a9:24:58:a0:8d:45:ad:e6:a4:bd:ad:1f:fe:0a:45: b7:c8:75:45:7f:73:da:0f:a8:ff:4e:c8:1d:9b:7c:8d:2b:64: a3:a0:c2:56:2c:97:f5:f5:92:0d:fd:ab:77:59:2f:a5:ba:0b: e7:d3:b2:3c:1d:59:71:1c:6a:8c:54:ba:d0:28:c8:66:f2:c3: cb:48:d1:2a:32:22:69:f0:e2:37:c3:87:9f:4e:b6:2e:7b:4f: 3f:0c:93:0c:22:69:1b:e1:35:2a:4f:6d:d8:08:bf:c1:03:7b: fc:59:73:e6:82:f6:18:15:f1:d6:56:cd:94:ff:74:58:0e:4d: ca:c6:da:67:d0:4e:8a:67:d7:da:55:0f:0e:b1:00:32:3c:20: 1b:5f:65:84:3b:c3:b4:e5:44:36:a4:18:9a:a2:02:47:0f:98: 8a:3c:56:d6:7e:e9:16:0e:3e:62:e8:8d:bd:10:1b:5d:85:c7: 31:56:c9:07:91:74:30:84:da:ea:da:22:9e:55:ab:6a:c3:ee: dc:f7:59:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zZvaf9n1pZq2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDI2YWViNWMtMzQ1Ni00OGNhLThhMWEtZDAyMTdjZjhkYTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIQX0BpsKlzVwJ+71Og9CVx8X9CGYIceMBjW K4c6dR8wd3mTeApk13sEHzH34dYqeVai6wCNGKUT1UHfEjM4MMWpmux/vPeR4CZd 5Fahooq2Wjsik0BcIIDkFQY9jHR+/Z3IyaJFgoaF6bGYsYdJKvfUMufaahvtpFnR lkZfx/XyHbzQ5HECZ7aR+FW8hNZh+brtGvFB2PnQl48Hikq1YNF6/KnySBb/t1oA J20ltRsty9Aew19LeZqa3/OA4t2WbCWlZ3dz1fsjFICmkjQV9gEgg1cM1V5Jxard SkB4ABSeTJyBEZGlDFDzOI0gp6J01T8bRhfgoejiv0LJTeBuXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKlx2PMMOLO2055JK1f8xfZalIi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdhMTNlYzgtNWY5MC0z ZWQyLTgxNTQtZTkzN2NlN2FiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBinB78zPVyPtSKKy3vamO/3BIUI62MdQ78jYV9oL/FNV59IQnY4dfO /DbrDpzr5DMV4ov/ZRAEqHmpJFigjUWt5qS9rR/+CkW3yHVFf3PaD6j/Tsgdm3yN K2SjoMJWLJf19ZIN/at3WS+lugvn07I8HVlxHGqMVLrQKMhm8sPLSNEqMiJp8OI3 w4efTrYue08/DJMMImkb4TUqT23YCL/BA3v8WXPmgvYYFfHWVs2U/3RYDk3Kxtpn 0E6KZ9faVQ8OsQAyPCAbX2WEO8O05UQ2pBiaogJHD5iKPFbWfukWDj5i6I29EBtd hccxVskHkXQwhNrq2iKeVatqw+7c91li -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:52 2025 by rpki-client