$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b077a75-5e3f-3593-8936-683561703346.roa File: 9b077a75-5e3f-3593-8936-683561703346.roa (raw, json) Hash identifier: KSMMcTCtA4/2IMWk2wluS5uTU/GnhuEqlWzew6K/pE0= Subject key identifier: 2F:AF:3A:7D:29:79:34:62:CE:AE:78:93:70:99:3B:84:05:05:84:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E734466F6629ABDAA8E640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b077a75-5e3f-3593-8936-683561703346.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396560 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:34:46:6f:66:29:ab:da:a8:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=f3c49db4-0df3-4d76-a888-96c6ce4659ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:22:a6:46:73:ff:22:53:bf:66:71:d0:ea: eb:c8:fe:c3:7d:9a:c4:d1:1b:21:be:bd:5c:5f:39: 4a:1c:f1:e4:56:09:d3:96:46:4e:18:54:64:b1:e4: 06:57:bd:9f:ed:f6:87:2a:c1:2d:9d:af:fd:11:1a: 1f:fc:17:fc:c6:44:a2:55:24:3a:2f:ee:20:57:7c: 99:ef:7a:dc:c2:65:e0:cf:4a:af:0a:a0:f3:c4:b0: 96:fe:e2:35:eb:12:3a:7d:8d:62:87:ad:b4:21:83: c6:8f:05:5f:67:2d:8a:b9:bb:43:04:de:b5:99:2a: a3:22:d6:3d:2d:d6:d2:85:b5:59:ca:3d:90:bb:c6: 48:f3:38:e7:bb:f4:95:fd:e4:6f:4c:48:a6:34:4f: 7c:3b:95:64:24:79:f4:b4:62:85:54:69:3b:ca:2d: 21:87:b9:b7:82:1b:93:af:7b:e3:7c:cb:49:cd:11: 55:bd:6d:7e:77:16:ea:02:67:87:e7:4d:8d:92:dd: e4:01:8a:0b:da:e3:2b:54:0a:ed:7b:56:21:4d:f8: 34:a8:be:0f:d8:f4:3d:f5:a1:17:ba:78:13:a9:21: 28:3d:f1:41:42:56:12:b9:2d:8e:4e:78:9d:08:c6: d1:b9:91:3e:e4:e2:b7:b7:73:67:d6:33:3b:12:2d: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:3A:7D:29:79:34:62:CE:AE:78:93:70:99:3B:84:05:05:84:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b077a75-5e3f-3593-8936-683561703346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:46:3a:17:db:62:cd:42:fb:5e:88:53:cd:0a:d0:21:00:46: 95:6a:18:12:ac:8c:97:dc:9f:44:ec:9f:f0:d4:fa:23:4d:b1: df:f6:a5:70:6f:73:ea:90:09:8c:2e:06:f8:06:b1:ca:d0:26: 84:08:62:c5:04:4b:5c:82:01:13:98:eb:08:96:76:e4:9c:56: 85:ca:84:93:4e:7a:40:2d:42:dc:f1:bf:c8:7e:a4:7e:57:fa: 29:36:25:43:d8:51:e8:c6:2d:cd:bc:3e:df:e1:21:66:81:f6: 99:53:bd:5f:73:80:b1:31:d7:e8:de:2d:36:04:77:80:c2:92: 88:b5:09:f3:92:91:dd:7c:9e:b8:e9:e1:22:42:c6:ea:ea:5e: a8:25:38:77:36:ac:51:65:e0:4c:31:7c:ff:95:c8:36:a0:f6: 97:8c:66:8f:75:3c:8a:c7:f7:64:3f:62:f3:03:9c:32:8e:94: fb:5b:9b:03:bb:4a:0c:a1:7c:fd:f1:19:e1:11:8d:44:86:d1: 2c:c3:f2:d2:b9:d2:c9:f4:37:6d:75:0b:de:23:10:f6:98:1d: 87:10:d7:e5:94:47:cf:37:0a:67:1f:89:eb:a2:fa:35:05:3d: 54:1b:8a:8e:9c:85:f7:eb:b7:c1:75:f4:82:3f:98:d5:8a:69: 4e:66:61:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zRGb2Ypq9qo5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjNjNDlkYjQtMGRmMy00ZDc2LWE4ODgtOTZjNmNlNDY1OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdgipkZz/yJTv2Zx0OrryP7DfZrE0Rshvr1c XzlKHPHkVgnTlkZOGFRkseQGV72f7faHKsEtna/9ERof/Bf8xkSiVSQ6L+4gV3yZ 73rcwmXgz0qvCqDzxLCW/uI16xI6fY1ih620IYPGjwVfZy2KubtDBN61mSqjItY9 LdbShbVZyj2Qu8ZI8zjnu/SV/eRvTEimNE98O5VkJHn0tGKFVGk7yi0hh7m3ghuT r3vjfMtJzRFVvW1+dxbqAmeH502Nkt3kAYoL2uMrVArte1YhTfg0qL4P2PQ99aEX ungTqSEoPfFBQlYSuS2OTnidCMbRuZE+5OK3t3Nn1jM7Ei1fFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC+vOn0peTRizq54k3CZO4QFBYQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWIwNzdhNzUtNWUzZi0z NTkzLTg5MzYtNjgzNTYxNzAzMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4RjoX22LNQvteiFPNCtAhAEaVahgSrIyX3J9E7J/w1PojTbHf9qVw b3PqkAmMLgb4BrHK0CaECGLFBEtcggETmOsIlnbknFaFyoSTTnpALULc8b/IfqR+ V/opNiVD2FHoxi3NvD7f4SFmgfaZU71fc4CxMdfo3i02BHeAwpKItQnzkpHdfJ64 6eEiQsbq6l6oJTh3NqxRZeBMMXz/lcg2oPaXjGaPdTyKx/dkP2LzA5wyjpT7W5sD u0oMoXz98RnhEY1EhtEsw/LSudLJ9DdtdQveIxD2mB2HENfllEfPNwpnH4nrovo1 BT1UG4qOnIX367fBdfSCP5jVimlOZmEq -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:49 2025 by rpki-client