$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa File: 9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa (raw, json) Hash identifier: /3yRRLNSmLAfQ15NS+0xYhN/PxlnlOR2cda63Dedq/M= Subject key identifier: 5F:44:40:78:BF:59:99:C0:6C:3B:7E:BB:D5:60:CC:F9:18:CC:8E:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB2F254E89E556CEB1EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397209 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:f2:54:e8:9e:55:6c:eb:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ad7da08f-d0e3-4dea-a38a-cfef57e471f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:c9:a5:fe:dd:b2:73:05:7d:56:f8:25:67: ba:93:8e:5a:aa:19:72:cb:8b:90:54:31:64:cf:81: be:13:52:3f:fd:1d:58:81:ec:6c:a3:50:e4:a8:95: 0e:d5:e5:05:36:d2:e8:25:55:fe:34:f5:c2:98:f2: a7:dd:9f:17:57:c8:6f:ea:4a:dd:4e:ab:dc:5d:96: 88:fd:08:03:9e:19:3d:65:1d:03:1c:b7:e5:b6:1e: e9:32:ef:e2:bf:f3:b0:ff:22:4b:0a:0f:e5:db:e3: 2a:09:1d:f3:67:ab:56:59:4c:88:50:4b:0a:2f:1b: 79:f5:24:7a:13:b4:76:c9:65:9a:c3:f8:31:7d:8a: 1a:ff:30:b2:5e:57:71:3c:b0:3d:6e:d7:c0:d7:92: 14:c4:ba:d0:f1:b7:ef:3a:35:9e:a0:04:0f:30:7f: 3e:52:59:14:9b:2c:9b:04:5a:58:31:d4:1a:8b:4f: 9c:e9:b7:dc:11:6c:55:58:49:28:a9:01:cc:f5:f8: 7f:4f:56:b4:36:f9:3a:23:80:79:7d:a8:c1:c6:90: 77:a3:db:bf:03:84:39:52:69:d2:06:79:c6:4a:f0: 89:17:3b:c4:1a:7f:90:09:f2:c1:99:bd:08:a4:35: df:0b:33:1f:0e:73:7f:f5:af:8e:15:de:1b:a9:ab: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:40:78:BF:59:99:C0:6C:3B:7E:BB:D5:60:CC:F9:18:CC:8E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:60:dc:19:8c:bf:72:d1:11:81:98:71:8c:aa:f1:d2:1b:f7: 1b:1c:96:46:ea:04:b3:a2:4f:04:f5:d0:d6:0a:bf:33:88:a3: 20:8f:c7:e2:3c:e7:2c:b9:33:64:f1:8e:ba:c5:2d:c7:6d:98: be:e0:45:6d:d3:64:dc:b2:12:d0:9e:2e:ea:44:c9:be:55:41: 22:93:fc:28:64:ef:04:ae:45:04:17:1a:7b:7c:5c:47:31:b6: fe:32:98:87:52:70:df:cc:13:7a:6a:7f:89:76:41:01:25:c7: 8c:70:b4:0b:5b:13:25:21:f3:55:29:bb:67:67:bb:51:d5:0a: 0c:87:99:20:cf:95:32:ed:3b:21:be:cf:cd:2b:60:05:96:af: 50:e8:69:46:a5:b5:07:a3:ac:09:47:10:29:71:1d:f8:55:2e: c3:b2:d6:f5:9e:62:b9:1d:ef:26:54:e7:ac:7b:43:90:fa:fb: ea:9b:67:ac:b6:76:90:af:8c:3a:f9:d2:e0:08:77:99:65:58: f6:11:0e:94:10:ca:a5:85:eb:a7:d5:b9:f3:d3:38:7d:41:4f: dd:eb:00:f7:98:29:b4:e5:88:0d:3e:8f:30:26:ab:90:e5:f4: 18:48:0d:af:ea:bc:a9:ce:ff:13:36:ef:6d:ce:ab:c8:c8:a7: e4:66:45:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLLyVOieVWzrHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWQ3ZGEwOGYtZDBlMy00ZGVhLWEzOGEtY2ZlZjU3ZTQ3MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRvJpf7dsnMFfVb4JWe6k45aqhlyy4uQVDFk z4G+E1I//R1Ygexso1DkqJUO1eUFNtLoJVX+NPXCmPKn3Z8XV8hv6krdTqvcXZaI /QgDnhk9ZR0DHLflth7pMu/iv/Ow/yJLCg/l2+MqCR3zZ6tWWUyIUEsKLxt59SR6 E7R2yWWaw/gxfYoa/zCyXldxPLA9btfA15IUxLrQ8bfvOjWeoAQPMH8+UlkUmyyb BFpYMdQai0+c6bfcEWxVWEkoqQHM9fh/T1a0Nvk6I4B5fajBxpB3o9u/A4Q5UmnS BnnGSvCJFzvEGn+QCfLBmb0IpDXfCzMfDnN/9a+OFd4bqavLUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9EQHi/WZnAbDt+u9VgzPkYzI7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI1Njg5YTUtMWNhNC0z MjllLWExNTYtMDBjNGI4MmQ5OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhg3BmMv3LREYGYcYyq8dIb9xsclkbqBLOiTwT10NYKvzOIoyCPx+I8 5yy5M2TxjrrFLcdtmL7gRW3TZNyyEtCeLupEyb5VQSKT/Chk7wSuRQQXGnt8XEcx tv4ymIdScN/ME3pqf4l2QQElx4xwtAtbEyUh81Upu2dnu1HVCgyHmSDPlTLtOyG+ z80rYAWWr1DoaUaltQejrAlHEClxHfhVLsOy1vWeYrkd7yZU56x7Q5D6++qbZ6y2 dpCvjDr50uAId5llWPYRDpQQyqWF66fVufPTOH1BT93rAPeYKbTliA0+jzAmq5Dl 9BhIDa/qvKnO/xM2723Oq8jIp+RmRdY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:18 2025 by rpki-client