$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa File: a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa (raw, json) Hash identifier: VvPsrpSM0YM0DlxzOJVLvz3tw82vEq9iui1NGOv8QCw= Subject key identifier: 6A:45:A2:27:55:24:55:EF:10:87:44:D7:D1:98:A7:C0:95:83:58:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732DE77594653007E5118 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396591 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:de:77:59:46:53:00:7e:51:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=f8d4776a-91c1-4aa6-ae5f-76142a094c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:d0:d2:8e:37:c8:05:53:bf:bb:cc:9d:36: 4a:a0:5c:1c:fd:8d:9e:7e:a7:1d:de:31:8a:96:1f: d9:46:ac:49:d2:80:e8:aa:57:33:31:94:6e:c2:3e: 6e:5a:c8:9a:41:4f:70:0b:73:32:7a:d2:6f:80:28: fd:c1:0a:13:5d:9f:8e:7a:c9:28:f3:74:85:b9:46: 5f:26:2c:cd:0b:47:38:1a:d6:52:37:18:2f:1c:70: 52:c5:c0:e8:ae:84:6c:0f:e0:2e:3b:8c:c6:cd:9d: 6f:27:f9:6d:3b:71:19:1b:c0:cd:c0:fe:2a:73:85: a3:5a:6b:a3:1a:95:67:7b:e1:db:ad:48:17:81:99: d0:31:8b:1d:99:09:da:dc:0f:eb:97:01:b6:35:57: 34:ae:01:ad:93:1f:43:b6:57:bd:75:ed:0b:b1:1d: a7:e2:a9:a2:20:88:e8:14:50:81:2d:49:74:13:68: a0:7f:d8:15:15:a2:d4:2e:c5:78:eb:1a:64:f6:80: 68:7b:b3:f9:03:4f:fc:25:55:8d:c5:7a:83:b5:7d: b6:4b:65:3e:de:00:ff:c7:ca:70:48:09:d0:34:14: e5:58:10:c0:d4:ce:75:19:90:b3:35:a2:81:dc:1f: 91:c8:8c:cd:04:d4:41:85:d8:a3:75:48:82:82:93: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:A2:27:55:24:55:EF:10:87:44:D7:D1:98:A7:C0:95:83:58:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f7:13:c8:ff:b6:30:c3:bc:86:40:eb:69:93:d0:34:ad:f2: 3d:6c:f7:49:3b:10:f9:d5:8b:89:eb:bd:c9:53:22:e0:9b:06: 55:d1:9e:bb:4f:e9:94:fd:e4:df:48:68:91:49:cd:de:4d:97: 8a:59:21:c3:b3:d8:99:76:2d:6f:5d:1d:38:02:13:05:44:dc: e7:aa:06:b8:7f:b9:47:21:c0:fc:5b:3c:6c:02:98:61:0c:d6: 3a:e1:9a:47:e6:29:67:34:c5:14:60:c2:24:06:1f:fa:1f:13: 8a:1b:fa:3e:ff:6b:7a:ee:66:2d:e8:f8:85:66:07:cb:2c:7f: 6a:4d:28:aa:1a:2d:0d:2f:1a:2a:a9:04:ce:05:94:40:66:6a: 3a:e8:b6:72:10:1f:75:a6:87:81:e8:0d:70:a3:fc:d7:f5:f8: 94:b0:1d:8e:b0:bd:7e:40:4f:a4:d5:47:8e:76:53:3a:3e:08: e2:a2:9e:94:46:3f:6a:fd:d1:80:02:a4:f5:ca:b2:d1:9d:78: f3:91:bb:87:68:ce:33:22:85:86:28:61:13:6a:07:a1:2c:13: cc:ba:28:bb:28:d7:37:ff:50:2a:15:66:a6:5a:f6:7f:cf:9f: 77:02:4e:33:5b:6f:8b:0c:1b:51:a5:df:bd:c1:b4:b1:3d:9b: 34:0d:27:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zLed1lGUwB+URgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjhkNDc3NmEtOTFjMS00YWE2LWFlNWYtNzYxNDJhMDk0YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnQ0o43yAVTv7vMnTZKoFwc/Y2efqcd3jGK lh/ZRqxJ0oDoqlczMZRuwj5uWsiaQU9wC3MyetJvgCj9wQoTXZ+Oesko83SFuUZf JizNC0c4GtZSNxgvHHBSxcDoroRsD+AuO4zGzZ1vJ/ltO3EZG8DNwP4qc4WjWmuj GpVne+HbrUgXgZnQMYsdmQna3A/rlwG2NVc0rgGtkx9Dtle9de0LsR2n4qmiIIjo FFCBLUl0E2igf9gVFaLULsV46xpk9oBoe7P5A0/8JVWNxXqDtX22S2U+3gD/x8pw SAnQNBTlWBDA1M51GZCzNaKB3B+RyIzNBNRBhdijdUiCgpMZ2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGpFoidVJFXvEIdE19GYp8CVg1hLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIyM2M0NDItYWQ4Yi0z ZGNmLWJiZjAtMmUwODhmZDk3YmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAa9xPI/7Yww7yGQOtpk9A0rfI9bPdJOxD51YuJ673JUyLgmwZV0Z67 T+mU/eTfSGiRSc3eTZeKWSHDs9iZdi1vXR04AhMFRNznqga4f7lHIcD8WzxsAphh DNY64ZpH5ilnNMUUYMIkBh/6HxOKG/o+/2t67mYt6PiFZgfLLH9qTSiqGi0NLxoq qQTOBZRAZmo66LZyEB91poeB6A1wo/zX9fiUsB2OsL1+QE+k1UeOdlM6Pgjiop6U Rj9q/dGAAqT1yrLRnXjzkbuHaM4zIoWGKGETagehLBPMuii7KNc3/1AqFWamWvZ/ z593Ak4zW2+LDBtRpd+9wbSxPZs0DSdc -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:48 2025 by rpki-client