$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6498724-37e3-3838-a53c-e53742439cd9.roa File: b6498724-37e3-3838-a53c-e53742439cd9.roa (raw, json) Hash identifier: 72g8UPatXsUDeXdcbGeyXc0TR7ToBiaZqceGtkzWvFo= Subject key identifier: 18:1E:81:ED:32:C8:08:14:41:2F:D9:7C:7C:D4:A9:FA:0F:A3:75:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3B01530D862A1CA7F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6498724-37e3-3838-a53c-e53742439cd9.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396826 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:b0:15:30:d8:62:a1:ca:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=38bd24f2-0827-4bd7-99ec-196f20f464f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:d4:a7:5e:79:42:7d:62:be:54:47:7f:fa: e5:ea:a9:77:74:cc:bb:1a:86:c3:c6:56:e4:4a:dd: 33:ee:04:2a:ef:e1:e4:1f:b5:d3:42:0a:30:a7:5a: a8:aa:fa:94:81:c6:60:68:e4:e5:90:46:16:9c:c4: f3:54:97:8b:28:a9:ab:18:2e:fd:bf:e4:d8:43:8c: b4:e0:fc:d0:1d:94:a9:85:d4:f2:f3:4e:87:49:39: 81:2c:0b:c9:71:46:74:30:f5:73:fa:99:68:b1:a6: 82:12:e5:40:44:03:c8:0f:b5:02:68:38:6d:0e:8b: 13:99:37:6a:b7:34:21:07:71:ed:25:c5:d7:0c:d3: f9:e5:91:4e:64:f5:77:8c:58:bd:c2:95:de:1c:3f: d3:60:2a:d0:43:b3:cc:af:14:40:d8:7b:ab:de:2c: d1:05:2f:3b:e2:ea:35:c2:4c:6a:c7:ea:00:71:0d: 33:f5:fb:56:aa:06:77:e9:fa:21:fa:80:e1:8e:7e: b6:34:df:d7:09:88:ad:05:40:89:42:e9:f6:36:cb: 87:68:62:50:4a:e9:9b:a9:88:a1:92:1a:20:95:fb: 38:e5:7d:80:d9:16:cc:ac:e8:52:6b:3d:bf:de:42: b1:2c:36:53:79:2f:87:48:d2:63:e7:d8:83:8b:c9: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1E:81:ED:32:C8:08:14:41:2F:D9:7C:7C:D4:A9:FA:0F:A3:75:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6498724-37e3-3838-a53c-e53742439cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:22:ae:9d:9a:e7:5e:a4:a9:31:5b:ca:2c:2f:b9:e1:03:d7: 2f:a2:73:1c:71:37:da:ca:57:98:51:1b:b5:e6:6c:b1:28:eb: 02:15:fd:7e:e5:cc:78:ce:54:46:c7:c1:d3:c9:7c:29:b4:e3: 60:c7:33:f3:0a:b5:42:f9:00:20:b5:6c:42:e1:7d:08:1c:9b: d7:90:45:04:45:a3:0d:6b:d4:e6:8a:48:84:6f:26:08:42:09: 2b:bb:4e:f2:63:4d:4d:6a:48:80:ed:09:2e:d6:c4:02:16:99: 00:e2:c1:b0:73:79:81:17:c4:c3:21:41:57:d1:f9:0f:d1:cb: 74:cd:63:b6:c5:80:a8:7f:b1:87:e0:be:35:88:0b:b2:38:eb: ca:94:70:45:10:65:6e:d2:14:d5:fb:fd:96:90:68:53:d7:2b: 8d:2b:db:84:52:1b:21:45:39:1a:7c:96:bb:d7:26:19:6e:4a: 88:41:9a:c4:1e:db:0b:f8:bd:6d:25:47:8e:60:ad:e0:db:4b: ec:92:62:54:19:bc:9f:95:85:8b:39:7e:32:d9:7f:a9:43:9d: b9:16:ca:cb:ef:69:b9:6e:4b:a1:42:f7:b9:9b:12:a9:77:bc: 51:0f:f6:9b:39:04:eb:36:2f:2d:da:5f:4c:38:5b:67:bc:6e: 62:d8:d9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLOwFTDYYqHKf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzhiZDI0ZjItMDgyNy00YmQ3LTk5ZWMtMTk2ZjIwZjQ2NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/Up155Qn1ivlRHf/rl6ql3dMy7GobDxlbk St0z7gQq7+HkH7XTQgowp1qoqvqUgcZgaOTlkEYWnMTzVJeLKKmrGC79v+TYQ4y0 4PzQHZSphdTy806HSTmBLAvJcUZ0MPVz+plosaaCEuVARAPID7UCaDhtDosTmTdq tzQhB3HtJcXXDNP55ZFOZPV3jFi9wpXeHD/TYCrQQ7PMrxRA2Hur3izRBS874uo1 wkxqx+oAcQ0z9ftWqgZ36foh+oDhjn62NN/XCYitBUCJQun2NsuHaGJQSumbqYih khoglfs45X2A2RbMrOhSaz2/3kKxLDZTeS+HSNJj59iDi8keWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgege0yyAgUQS/ZfHzUqfoPo3W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY0OTg3MjQtMzdlMy0z ODM4LWE1M2MtZTUzNzQyNDM5Y2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoirp2a516kqTFbyiwvueED1y+icxxxN9rKV5hRG7XmbLEo6wIV/X7l zHjOVEbHwdPJfCm042DHM/MKtUL5ACC1bELhfQgcm9eQRQRFow1r1OaKSIRvJghC CSu7TvJjTU1qSIDtCS7WxAIWmQDiwbBzeYEXxMMhQVfR+Q/Ry3TNY7bFgKh/sYfg vjWIC7I468qUcEUQZW7SFNX7/ZaQaFPXK40r24RSGyFFORp8lrvXJhluSohBmsQe 2wv4vW0lR45greDbS+ySYlQZvJ+VhYs5fjLZf6lDnbkWysvvabluS6FC97mbEql3 vFEP9ps5BOs2Ly3aX0w4W2e8bmLY2dA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:34 2025 by rpki-client