$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa File: b212bb31-dc6d-3c2f-a244-f88b92faf648.roa (raw, json) Hash identifier: dEL9yQqUtCG4mlGRn5gE70R0xvDOA3P3fkc5Cc/Uc0o= Subject key identifier: D5:12:23:06:80:A1:8C:69:46:87:EA:CF:FB:09:EC:5A:6B:E1:94:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7363C6C1B3E54B53AD1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396585 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:36:3c:6c:1b:3e:54:b5:3a:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d99cd436-9d04-430d-86f1-eb5e63c245ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:0b:06:e8:a3:64:27:05:ac:6b:c9:e4:cb: ac:90:c7:94:21:e5:8c:97:90:b5:00:39:2e:69:28: 21:05:f1:11:40:06:4e:03:13:6f:ec:d8:19:21:09: fa:d6:97:b4:3b:48:7d:e2:24:a4:44:bc:69:98:23: ab:6e:6c:49:60:13:74:1c:1d:02:99:c4:d9:f1:d2: e8:e0:4b:02:cf:69:d2:83:1f:ff:4c:1a:d2:68:57: 72:4e:30:41:9a:98:2f:a4:e3:8c:61:a8:0a:b2:f2: 9f:15:e6:5d:c8:6e:41:1c:78:84:ed:b1:2c:aa:5e: ed:8d:e6:22:53:9c:fd:c1:5d:93:7a:b3:f8:c1:8d: e2:7a:b3:73:82:0e:16:d2:a0:70:37:82:ac:0b:92: 74:4f:bf:ca:ea:42:be:47:93:e4:a9:44:ee:42:2f: f1:ad:8c:8f:68:d2:0a:34:75:27:32:f2:d3:4b:17: 2a:6c:bc:15:5a:b1:b7:8a:f8:51:1b:6c:2a:d7:3b: 48:bc:23:a6:51:49:2b:5d:81:ed:b2:0d:5a:84:2e: c4:39:69:ab:75:a7:de:ac:0f:d6:ae:c9:00:03:8a: 68:f8:42:92:b1:7f:41:e4:e4:55:f1:15:cf:30:60: e7:44:48:6b:19:8c:e9:ec:64:7d:7d:3b:b1:bf:8c: 50:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:12:23:06:80:A1:8C:69:46:87:EA:CF:FB:09:EC:5A:6B:E1:94:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:24:1c:8e:17:a1:5d:9d:8b:b2:3c:bd:b6:c3:6b:77:5f: 7c:46:ca:21:1b:0f:83:60:ec:71:c2:54:93:2b:e4:97:73:3c: 31:a5:2f:b6:43:ed:ba:1e:47:20:6e:50:51:6d:bc:75:97:eb: 7d:cb:5c:5f:17:79:0e:8a:95:59:a0:61:1b:e3:c8:88:38:5c: dc:12:06:29:4d:52:e1:1f:8a:b4:28:ad:6a:d1:3a:68:c2:fa: d0:6f:98:c2:7d:62:22:ed:3e:58:b6:df:cf:9b:45:96:de:66: 24:1d:6a:7e:41:91:ab:5b:6e:f8:25:de:8b:bd:f5:b6:bf:54: 9d:05:08:f1:d8:b6:60:68:73:46:a1:9c:74:fc:60:7b:c3:8f: b6:cd:03:87:e7:95:79:c3:d6:fb:65:b6:94:95:41:81:2b:0d: 52:7f:9b:21:0d:f4:f9:6a:32:d7:c8:06:61:37:87:4a:5d:4b: 9d:62:ea:5b:cd:7d:78:c3:f6:24:76:07:72:e2:c7:df:a7:b2: 08:47:44:a1:32:a0:50:5d:9f:79:74:3f:99:12:04:3a:e6:ff: 85:51:52:a5:6f:4f:7d:15:f5:57:dd:da:7b:d1:64:48:e8:c4: 2f:7b:c2:c2:a8:13:23:54:b0:9f:ef:4f:36:b2:e4:d3:40:50: 07:54:aa:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zY8bBs+VLU60cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDk5Y2Q0MzYtOWQwNC00MzBkLTg2ZjEtZWI1ZTYzYzI0NWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaALBuijZCcFrGvJ5MuskMeUIeWMl5C1ADku aSghBfERQAZOAxNv7NgZIQn61pe0O0h94iSkRLxpmCOrbmxJYBN0HB0CmcTZ8dLo 4EsCz2nSgx//TBrSaFdyTjBBmpgvpOOMYagKsvKfFeZdyG5BHHiE7bEsql7tjeYi U5z9wV2TerP4wY3ierNzgg4W0qBwN4KsC5J0T7/K6kK+R5PkqUTuQi/xrYyPaNIK NHUnMvLTSxcqbLwVWrG3ivhRG2wq1ztIvCOmUUkrXYHtsg1ahC7EOWmrdaferA/W rskAA4po+EKSsX9B5ORV8RXPMGDnREhrGYzp7GR9fTuxv4xQxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNUSIwaAoYxpRofqz/sJ7Fpr4ZRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxMmJiMzEtZGM2ZC0z YzJmLWEyNDQtZjg4YjkyZmFmNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6QiQcjhehXZ2Lsjy9tsNrd198RsohGw+DYOxxwlSTK+SXczwxpS+2 Q+26HkcgblBRbbx1l+t9y1xfF3kOipVZoGEb48iIOFzcEgYpTVLhH4q0KK1q0Tpo wvrQb5jCfWIi7T5Ytt/Pm0WW3mYkHWp+QZGrW274Jd6LvfW2v1SdBQjx2LZgaHNG oZx0/GB7w4+2zQOH55V5w9b7ZbaUlUGBKw1Sf5shDfT5ajLXyAZhN4dKXUudYupb zX14w/Ykdgdy4sffp7IIR0ShMqBQXZ95dD+ZEgQ65v+FUVKlb099FfVX3dp70WRI 6MQve8LCqBMjVLCf7082suTTQFAHVKql -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:06 2025 by rpki-client