$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa File: a2894194-5977-35b0-91f8-795131d217be.roa (raw, json) Hash identifier: i3rRbtPa4yyBkR+oP+SBK/RfMsBQyi9PVYYqGEi5V0E= Subject key identifier: F1:95:13:86:5C:21:9C:E6:73:6D:8E:BA:BA:3A:D4:5C:8A:F9:4C:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB034DA3121FB2A83F7E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396599 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:34:da:31:21:fb:2a:83:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=e1f7e268-3fe1-431e-8001-87560b4c9df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:29:0e:51:9c:48:69:33:61:b0:9a:10:8a: 31:81:69:cf:b8:10:1e:65:81:6e:20:1b:9c:67:25: 45:7a:fe:3f:8e:d5:3a:fa:f8:64:6a:c4:81:60:a4: 80:89:6a:fd:d0:78:35:56:50:40:7c:94:2b:15:2c: 4e:cf:db:04:88:7b:c6:3c:a7:e3:70:2a:06:30:23: 7a:a9:54:bc:f7:0f:8e:b8:34:d9:43:13:89:56:c0: 40:c4:07:34:0e:5a:4a:02:8e:fd:05:ee:db:bc:de: 21:4f:36:af:fc:64:e3:96:13:f6:28:44:1d:6a:67: ca:ae:0b:88:7a:a3:f9:77:e4:f8:a5:7e:90:c1:45: 58:8b:95:1e:26:9b:71:ff:85:40:d3:4f:89:1e:36: ab:d9:bd:28:17:78:ec:51:8e:67:6c:5a:36:b4:7e: a5:c9:ac:b8:f4:c2:3f:28:24:ca:24:cd:79:5c:e9: 0d:39:12:73:c6:66:ac:1a:99:56:05:ef:b0:20:a9: c7:08:fb:6e:ec:6a:85:97:00:72:6c:d9:8e:e9:46: 9b:ca:53:bc:79:2f:77:d4:5b:d4:46:21:dc:28:d2: bb:34:9a:54:cc:9f:a6:f5:c5:fa:99:f7:3c:29:b1: f3:0d:6d:60:e6:46:a2:fe:55:79:d8:09:f1:7f:db: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:95:13:86:5C:21:9C:E6:73:6D:8E:BA:BA:3A:D4:5C:8A:F9:4C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ed:dd:03:91:38:a2:63:66:36:80:58:f1:63:d4:32:99:1a: 07:27:50:5b:da:68:57:16:99:0f:06:2b:49:8c:06:5d:76:f6: 62:f6:51:9b:21:1a:a2:22:ac:c1:e1:be:36:1d:19:0c:92:53: 14:ba:5d:47:5d:28:86:25:3b:61:94:f6:07:d6:3a:0d:bf:fb: 84:e2:f0:50:1e:13:c3:a9:79:fa:b0:a9:cd:5f:fb:2b:2f:00: e4:70:28:9e:0f:3e:fc:c6:33:35:97:b3:ae:20:96:68:c4:ad: 04:5d:07:cc:48:69:e7:d7:20:66:50:eb:83:93:5b:7d:f1:88: 1a:20:38:67:f1:dc:ad:ec:4c:70:e1:dc:8f:8c:52:d6:69:85: 21:ac:50:c4:3f:33:dd:85:33:a3:68:6a:af:45:a4:59:47:cf: e9:9e:c4:fb:fb:b3:50:6b:62:34:e6:7f:94:5e:91:2b:1c:98: d1:fd:21:8f:7f:f2:d7:8f:a7:0a:18:46:77:7c:46:2a:37:13: c1:b3:ff:4a:4d:d8:87:36:00:42:c7:10:53:87:47:50:7f:4f: f3:d8:d2:81:7f:5d:df:09:85:70:7f:f8:ef:f7:9f:33:aa:29: 95:4d:5a:3a:4f:3e:31:a0:af:ba:82:bc:83:8b:5d:72:77:33: 3b:2f:4a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLA02jEh+yqD9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTFmN2UyNjgtM2ZlMS00MzFlLTgwMDEtODc1NjBiNGM5ZGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKopDlGcSGkzYbCaEIoxgWnPuBAeZYFuIBuc ZyVFev4/jtU6+vhkasSBYKSAiWr90Hg1VlBAfJQrFSxOz9sEiHvGPKfjcCoGMCN6 qVS89w+OuDTZQxOJVsBAxAc0DlpKAo79Be7bvN4hTzav/GTjlhP2KEQdamfKrguI eqP5d+T4pX6QwUVYi5UeJptx/4VA00+JHjar2b0oF3jsUY5nbFo2tH6lyay49MI/ KCTKJM15XOkNORJzxmasGplWBe+wIKnHCPtu7GqFlwBybNmO6UabylO8eS931FvU RiHcKNK7NJpUzJ+m9cX6mfc8KbHzDW1g5kai/lV52Anxf9ux5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGVE4ZcIZzmc22Ouro61FyK+UxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI4OTQxOTQtNTk3Ny0z NWIwLTkxZjgtNzk1MTMxZDIxN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETt3QOROKJjZjaAWPFj1DKZGgcnUFvaaFcWmQ8GK0mMBl129mL2UZsh GqIirMHhvjYdGQySUxS6XUddKIYlO2GU9gfWOg2/+4Ti8FAeE8Opefqwqc1f+ysv AORwKJ4PPvzGMzWXs64glmjErQRdB8xIaefXIGZQ64OTW33xiBogOGfx3K3sTHDh 3I+MUtZphSGsUMQ/M92FM6Noaq9FpFlHz+mexPv7s1BrYjTmf5RekSscmNH9IY9/ 8tePpwoYRnd8Rio3E8Gz/0pN2Ic2AELHEFOHR1B/T/PY0oF/Xd8JhXB/+O/3nzOq KZVNWjpPPjGgr7qCvIOLXXJ3MzsvSj4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:41 2025 by rpki-client