$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad38344e-eaef-3274-b8b8-8190b2fc057d.roa File: ad38344e-eaef-3274-b8b8-8190b2fc057d.roa (raw, json) Hash identifier: ujI7K39Px7Kehlz3XTC7RO5MQ5mGgD6cIBl4mqscIUA= Subject key identifier: 02:B5:1B:57:9A:E1:65:21:79:18:D6:58:31:60:10:AE:09:45:D2:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E729F55AA47AC850385A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad38344e-eaef-3274-b8b8-8190b2fc057d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 19836 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:29:f5:5a:a4:7a:c8:50:38:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e3ed7fa3-70c5-4e74-9862-da8d8358a0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:01:02:cc:6d:d5:56:63:14:6a:45:61:cd:6a: ee:59:77:c2:ce:d1:22:fb:1a:84:ad:42:0f:04:67: 8b:2f:c2:8f:07:79:89:e0:ac:39:47:49:9b:e1:8f: 9b:0d:f2:1b:b0:0b:16:cc:f2:64:17:96:e5:ff:36: 49:fe:1b:31:30:87:2a:9c:da:4b:82:27:eb:00:6f: cb:fb:66:40:a5:26:ea:04:66:dd:c5:52:1d:c3:c1: 02:44:aa:3a:15:f8:e3:ef:8a:af:61:c7:c2:10:c9: e5:75:be:0d:7b:69:56:87:16:79:59:3f:a5:c8:27: a2:ac:79:c6:56:f2:63:7e:05:18:39:54:3d:5d:63: f2:18:a8:3a:28:8f:bb:ed:47:50:58:85:7a:a3:a7: a5:b7:77:43:27:7d:13:af:43:ca:2c:9f:7b:a4:e8: 73:17:02:ef:62:ab:a3:ba:54:82:b4:ad:db:1c:6b: a3:a7:db:46:6f:01:84:43:71:a2:3c:15:93:60:40: 69:50:16:e5:4d:5c:40:6e:52:a8:33:8b:34:5a:b9: 27:9b:ee:35:33:18:c1:18:6f:84:65:d9:f4:36:35: 7f:dc:53:8d:6c:2c:b2:99:27:11:63:33:ad:e4:99: ab:ef:fa:1e:c1:05:a0:0b:af:72:a5:b2:64:fb:dc: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B5:1B:57:9A:E1:65:21:79:18:D6:58:31:60:10:AE:09:45:D2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad38344e-eaef-3274-b8b8-8190b2fc057d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fe:4b:ce:d3:b0:98:e4:cb:0a:12:78:2d:12:f1:51:0a:fa: 00:50:88:c6:aa:63:aa:77:80:3e:68:ca:65:0a:0d:50:9a:55: 31:91:24:09:b7:cd:60:09:e6:a7:5f:09:3a:86:c7:d7:fc:fa: 87:c7:02:a2:7c:15:b2:3b:8d:ea:61:ad:53:d9:73:78:bc:ba: 8a:37:74:90:a6:8a:09:18:12:82:25:a4:bf:4e:9a:34:26:7b: 87:77:a5:5c:a6:77:cd:d2:5a:90:b1:4c:70:c5:b0:0c:19:a8: 2e:a5:93:e2:32:35:9e:98:28:19:57:53:64:61:e3:b7:fb:9d: d0:f0:b5:c4:28:58:68:61:9f:45:1a:45:f5:ef:6a:bd:bd:2d: 1d:57:fb:27:63:9c:b7:45:5c:18:db:47:4c:8d:55:a6:1e:7f: 10:d2:a2:61:84:65:00:a0:9f:d8:f1:1d:10:c9:13:5f:8d:36: 2e:ea:f6:3a:7c:a7:ae:c8:a0:fb:9b:ab:9d:fa:ef:26:f2:73: 3d:e3:ef:e8:14:54:61:aa:ef:90:88:59:aa:73:ed:ca:d5:73: 3d:dc:05:e2:14:93:7e:37:9e:83:1d:2d:04:8e:da:79:35:80: 72:75:02:2e:fc:72:09:1b:50:e0:cf:01:8f:34:33:2d:1e:4c: e5:39:1a:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yn1WqR6yFA4WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTNlZDdmYTMtNzBjNS00ZTc0LTk4NjItZGE4ZDgzNThhMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggECzG3VVmMUakVhzWruWXfCztEi+xqErUIP BGeLL8KPB3mJ4Kw5R0mb4Y+bDfIbsAsWzPJkF5bl/zZJ/hsxMIcqnNpLgifrAG/L +2ZApSbqBGbdxVIdw8ECRKo6Ffjj74qvYcfCEMnldb4Ne2lWhxZ5WT+lyCeirHnG VvJjfgUYOVQ9XWPyGKg6KI+77UdQWIV6o6elt3dDJ30Tr0PKLJ97pOhzFwLvYquj ulSCtK3bHGujp9tGbwGEQ3GiPBWTYEBpUBblTVxAblKoM4s0Wrknm+41MxjBGG+E Zdn0NjV/3FONbCyymScRYzOt5Jmr7/oewQWgC69ypbJk+9wbaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAK1G1ea4WUheRjWWDFgEK4JRdJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWQzODM0NGUtZWFlZi0z Mjc0LWI4YjgtODE5MGIyZmMwNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAd/kvO07CY5MsKEngtEvFRCvoAUIjGqmOqd4A+aMplCg1QmlUxkSQJ t81gCeanXwk6hsfX/PqHxwKifBWyO43qYa1T2XN4vLqKN3SQpooJGBKCJaS/Tpo0 JnuHd6VcpnfN0lqQsUxwxbAMGagupZPiMjWemCgZV1NkYeO3+53Q8LXEKFhoYZ9F GkX172q9vS0dV/snY5y3RVwY20dMjVWmHn8Q0qJhhGUAoJ/Y8R0QyRNfjTYu6vY6 fKeuyKD7m6ud+u8m8nM94+/oFFRhqu+QiFmqc+3K1XM93AXiFJN+N56DHS0Ejtp5 NYBydQIu/HIJG1DgzwGPNDMtHkzlORrP -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:20 2025 by rpki-client