$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa File: af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa (raw, json) Hash identifier: 6Vq/vWcBDMARLzQDZGfTG0/4366MIfrgtSm/ZDinVEI= Subject key identifier: B8:B4:83:B5:59:E7:46:5F:3F:B8:9E:5C:07:FA:BF:68:1A:5C:41:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3420E6397EB81DA2A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397195 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:42:0e:63:97:eb:81:da:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=9d31786f-837f-426b-9a03-1281faf6db68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:31:96:af:cb:b0:2b:03:d1:14:49:2b:ba: 27:75:2a:0a:51:5e:12:f4:c4:98:80:9a:72:f5:6f: dc:55:bb:4a:82:7b:04:4c:b3:81:f8:a2:af:85:ae: c6:a5:e8:ac:e3:b6:eb:7c:e3:25:8a:4c:65:ac:50: 30:d4:56:88:be:4a:9f:c4:7c:f1:f1:ed:d1:b2:45: de:d5:50:ff:dc:a0:e0:b0:11:dd:e5:cd:56:17:50: 5e:af:0c:b4:22:79:ce:81:89:4d:a5:80:63:56:b5: 3d:90:e6:cb:63:88:8f:ec:00:1c:38:3f:c3:1b:63: eb:73:e8:30:f2:72:b1:d3:50:1d:4b:49:cb:f7:6e: e8:6d:fb:8c:c4:64:1f:4e:e3:0c:8b:42:e1:a5:2d: c2:29:ae:99:1c:69:d6:3e:3d:3b:7e:af:4a:b0:d9: ba:28:09:a5:5f:de:87:1e:34:cc:c7:fd:76:40:28: 20:57:b0:bc:21:5d:47:8e:90:7e:fe:69:01:38:9a: 8b:84:e4:e8:f2:0e:a2:8f:1f:50:fc:a5:a7:a2:2d: cb:11:f7:41:e7:43:0c:d6:8f:80:69:27:a4:25:13: b8:4f:bf:e8:d5:0c:3c:31:4e:4f:50:9a:55:35:14: 69:2e:c9:39:6a:ea:b5:21:d7:1f:6c:d1:4e:81:e7: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:83:B5:59:E7:46:5F:3F:B8:9E:5C:07:FA:BF:68:1A:5C:41:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:83:6f:08:68:78:52:af:e3:8a:7e:d7:9e:f4:ad:fb:6a:ee: 26:bd:e2:3c:7b:5a:0b:5e:29:e9:15:7c:a0:fc:0e:5a:69:dd: 4f:95:59:ff:9a:1f:32:1b:e6:40:87:1f:0f:89:2a:6b:b7:f1: 8b:43:3b:25:cf:4b:3a:e8:b7:c0:cd:3d:fd:15:7c:be:9a:8a: 53:d6:5c:1b:43:15:c3:97:aa:f2:05:4a:d2:a2:88:13:5d:94: 8d:6a:bc:a6:55:76:cc:43:f8:71:9b:6d:25:d8:df:aa:ec:a1: 2e:7a:d4:1f:fe:9e:33:c7:d2:cf:1c:f3:24:1f:ef:f7:b3:9d: 66:6c:39:3a:26:75:c6:ca:1c:d1:6d:4e:89:f1:06:59:88:08: b2:aa:ca:71:44:d2:ac:48:53:f9:88:cc:9f:36:13:eb:6a:3b: 8e:9b:b1:4a:1e:ae:58:0c:0b:c8:85:bc:61:90:86:64:a7:ab: 94:39:35:93:cd:49:88:8c:d3:3e:93:05:b5:92:8c:3a:c5:2b: 0f:a9:bc:76:5f:13:8f:7c:b3:54:02:0d:be:70:54:50:97:da: f5:c2:c2:83:73:3f:33:8f:af:10:6d:18:66:c2:10:f5:f8:2e: 56:33:1d:b7:25:1e:20:38:a5:fa:f0:80:75:d7:cf:97:e2:20: 1b:22:b3:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLNCDmOX64HaKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OWQzMTc4NmYtODM3Zi00MjZiLTlhMDMtMTI4MWZhZjZkYjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraQxlq/LsCsD0RRJK7ondSoKUV4S9MSYgJpy 9W/cVbtKgnsETLOB+KKvha7Gpeis47brfOMlikxlrFAw1FaIvkqfxHzx8e3RskXe 1VD/3KDgsBHd5c1WF1Berwy0InnOgYlNpYBjVrU9kObLY4iP7AAcOD/DG2Prc+gw 8nKx01AdS0nL927obfuMxGQfTuMMi0LhpS3CKa6ZHGnWPj07fq9KsNm6KAmlX96H HjTMx/12QCggV7C8IV1HjpB+/mkBOJqLhOTo8g6ijx9Q/KWnoi3LEfdB50MM1o+A aSekJRO4T7/o1Qw8MU5PUJpVNRRpLsk5auq1IdcfbNFOgeebiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi0g7VZ50ZfP7ieXAf6v2gaXEFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjM1ZWItOGUzOS0z NTk5LWJjYmQtZDZhZjdkOTcwOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGODbwhoeFKv44p+1570rftq7ia94jx7WgteKekVfKD8Dlpp3U+VWf+a HzIb5kCHHw+JKmu38YtDOyXPSzrot8DNPf0VfL6ailPWXBtDFcOXqvIFStKiiBNd lI1qvKZVdsxD+HGbbSXY36rsoS561B/+njPH0s8c8yQf7/eznWZsOTomdcbKHNFt TonxBlmICLKqynFE0qxIU/mIzJ82E+tqO46bsUoerlgMC8iFvGGQhmSnq5Q5NZPN SYiM0z6TBbWSjDrFKw+pvHZfE498s1QCDb5wVFCX2vXCwoNzPzOPrxBtGGbCEPX4 LlYzHbclHiA4pfrwgHXXz5fiIBsis10= -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:17 2025 by rpki-client