$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa File: a531be19-5d60-38e3-b64b-c39e645315b7.roa (raw, json) Hash identifier: BCjtHDC+kp+A1xxHPodSwD+x/6TsrfHsQff6kYz1i7o= Subject key identifier: F6:3C:0C:05:6C:D8:C3:39:89:F0:D5:B6:5A:98:BA:6F:0C:4B:3B:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB351C1405FECDDEE0000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:51:c1:40:5f:ec:dd:ee:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ac3ac689-d031-49aa-b22b-077122605fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:57:b1:ae:31:a4:24:99:68:da:77:e2:f0: 9f:70:19:b6:15:ca:dd:a0:4c:16:4e:ee:f8:c1:7d: df:59:8a:23:ad:b6:6c:cf:8d:c6:b9:06:31:df:7e: 7d:9a:9c:f4:39:c4:56:8b:ec:1c:a9:68:93:fd:b0: f6:4e:96:96:60:1e:42:85:e0:b4:14:ce:0d:03:d6: 2d:3f:e4:03:41:45:23:ad:c7:b7:1d:d9:bb:98:a5: f5:32:b0:9d:3d:7e:0a:59:dd:94:93:c2:d4:97:c0: 22:e9:bd:cf:ae:a6:f8:c5:9a:3c:a0:62:33:6f:42: 5b:87:a3:7e:51:45:48:f5:2e:21:97:f5:06:76:34: 7a:36:75:43:03:96:98:de:09:f1:ef:60:c7:1a:b5: ff:11:6f:92:3c:46:5b:a4:78:84:81:fa:7b:7c:a1: db:9c:ad:29:af:a2:21:56:e6:57:f1:7e:ab:35:25: db:b7:bc:a2:30:32:14:27:f0:db:5a:b6:dc:f3:da: 12:a0:b0:78:0c:ad:a9:9d:80:0a:f7:a8:80:2b:a3: 04:ab:07:5b:9f:bf:f0:ca:99:01:c3:d1:1b:00:bd: 1d:87:7f:7a:44:7e:0f:cc:7c:70:e6:85:8e:74:35: 27:66:c4:d1:e6:08:3d:6d:49:5a:8e:0a:f6:06:29: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:0C:05:6C:D8:C3:39:89:F0:D5:B6:5A:98:BA:6F:0C:4B:3B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7f:69:1e:6a:da:69:4e:fa:da:89:66:1a:f3:44:dc:7f:30: 9c:8a:43:c5:04:51:72:8c:0c:1e:33:97:a3:53:89:3a:b7:8d: 19:a8:6c:50:18:65:f3:af:bc:11:6c:37:1a:4f:e6:fa:03:50: f8:93:4a:0b:6e:b3:76:dd:4a:c3:26:b6:e0:44:cd:86:9a:86: 42:26:58:b0:44:6d:11:4b:44:5c:3e:16:46:45:da:2a:e7:58: 64:37:02:a5:0c:ac:8f:4a:e2:8d:bc:56:7e:8c:65:65:eb:1f: 86:ce:35:cc:53:ef:ec:b7:20:1d:ad:25:cf:cc:f0:22:b0:ca: 8a:2f:b3:da:7a:b5:aa:83:ba:81:60:52:3a:1e:73:83:9f:50: 49:fc:c4:02:6a:95:18:4c:56:47:1a:70:1c:9c:23:a4:ea:d6: 13:fd:d3:6b:51:2f:78:44:fe:6b:92:db:66:ec:69:ce:1d:ff: 2d:4c:04:03:7b:4f:86:c5:fa:5f:50:c3:c1:24:49:45:62:38: 21:da:cd:37:2c:a8:82:1a:a1:f9:0c:5a:1a:40:8d:55:3b:73: 37:53:77:10:97:4e:b7:28:6e:59:1e:2d:9c:03:68:84:35:a9: 37:13:28:47:01:e9:91:30:58:9f:13:56:d0:56:8d:31:34:d7: af:c1:67:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLNRwUBf7N3uAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWMzYWM2ODktZDAzMS00OWFhLWIyMmItMDc3MTIyNjA1ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD1Xsa4xpCSZaNp34vCfcBm2FcrdoEwWTu74 wX3fWYojrbZsz43GuQYx3359mpz0OcRWi+wcqWiT/bD2TpaWYB5CheC0FM4NA9Yt P+QDQUUjrce3Hdm7mKX1MrCdPX4KWd2Uk8LUl8Ai6b3Prqb4xZo8oGIzb0Jbh6N+ UUVI9S4hl/UGdjR6NnVDA5aY3gnx72DHGrX/EW+SPEZbpHiEgfp7fKHbnK0pr6Ih VuZX8X6rNSXbt7yiMDIUJ/DbWrbc89oSoLB4DK2pnYAK96iAK6MEqwdbn7/wypkB w9EbAL0dh396RH4PzHxw5oWOdDUnZsTR5gg9bUlajgr2BilzIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY8DAVs2MM5ifDVtlqYum8MSzspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWJlMTktNWQ2MC0z OGUzLWI2NGItYzM5ZTY0NTMxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd/aR5q2mlO+tqJZhrzRNx/MJyKQ8UEUXKMDB4zl6NTiTq3jRmobFAY ZfOvvBFsNxpP5voDUPiTSgtus3bdSsMmtuBEzYaahkImWLBEbRFLRFw+FkZF2irn WGQ3AqUMrI9K4o28Vn6MZWXrH4bONcxT7+y3IB2tJc/M8CKwyoovs9p6taqDuoFg Ujoec4OfUEn8xAJqlRhMVkcacBycI6Tq1hP902tRL3hE/muS22bsac4d/y1MBAN7 T4bF+l9Qw8EkSUViOCHazTcsqIIaofkMWhpAjVU7czdTdxCXTrcoblkeLZwDaIQ1 qTcTKEcB6ZEwWJ8TVtBWjTE016/BZyA= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:33 2025 by rpki-client