$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa File: b942e58f-d211-36ad-886c-6c16451f8f09.roa (raw, json) Hash identifier: G7lVnTvXiI5bBpRLM8w3L9wYxg1brXxXsN1swHQEhYk= Subject key identifier: 3F:F9:8E:BF:B3:00:42:DB:E2:0E:C8:59:CA:55:92:DD:D7:F0:BF:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAF93E0B39E1FFCF2B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397210 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:af:93:e0:b3:9e:1f:fc:f2:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0efc3cc5-9c0d-4f69-a1c2-d83142a2fd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:f5:15:3d:b2:32:5c:ae:aa:65:5c:41:41: 82:6b:9b:4b:8b:bc:65:af:dd:a9:e2:80:9c:20:c6: 11:6b:b9:67:64:42:4e:72:1a:3f:d0:38:d5:43:5f: 12:f8:65:00:34:a1:bd:17:3c:e5:0e:37:e8:22:62: 5f:f9:54:82:62:f0:0f:52:48:32:89:42:3f:63:95: e8:8c:aa:47:9f:f4:e0:c1:3f:42:a4:4a:54:81:ee: 59:43:bc:7e:58:94:0c:57:37:3c:81:88:79:a5:66: 21:eb:28:42:30:99:9a:51:e8:5b:29:18:e4:30:33: c0:c4:f4:5b:48:90:c7:50:d2:35:07:6e:6d:22:e4: a5:c8:a3:6d:2b:b2:ba:15:97:e7:0e:cb:f0:c9:19: 15:d6:54:53:19:09:7e:f2:52:83:0e:ec:e4:f3:73: 32:14:f0:4e:a9:9f:42:73:d1:ca:c0:dc:e6:b7:82: c6:55:b3:d4:f0:e1:c4:f8:09:90:3d:5a:d1:42:95: c3:5f:33:2e:50:e7:ec:bb:f9:8f:e5:73:ef:16:cf: 0f:53:a3:92:05:a8:89:88:7b:7d:9d:51:17:45:31: cb:bd:a9:ae:d2:dc:da:d6:4e:f8:17:be:f9:df:39: f0:e6:74:5f:a6:1a:3b:1e:03:43:29:bf:7b:96:31: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F9:8E:BF:B3:00:42:DB:E2:0E:C8:59:CA:55:92:DD:D7:F0:BF:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9d:42:cb:5f:0c:cd:bd:40:28:a2:5e:e8:24:7d:ef:f2:f6: 11:48:26:e3:f5:33:15:e2:3f:ac:b4:c5:00:e8:3c:ae:47:19: 21:ea:4f:59:27:44:06:85:36:d5:71:83:a2:60:61:3c:fd:0c: ce:ae:40:64:93:8e:60:c8:c7:7c:d4:72:65:8c:f5:ad:ae:95: e3:f4:03:6f:5a:12:f6:59:8d:02:8e:73:72:e9:6b:60:d2:fb: 74:86:33:07:e1:85:f0:0d:00:b3:96:56:77:09:45:d9:98:3c: 4f:a2:16:d8:cc:97:78:6d:06:31:12:e5:be:ba:90:6b:b8:73: a2:a6:70:6d:37:99:fa:1f:3b:6c:d4:b2:9a:c6:87:54:5e:7a: 26:55:59:08:bb:04:bb:8c:09:95:14:1f:b3:bc:ec:19:45:86: 07:35:cb:33:1b:dc:81:29:05:9f:b5:68:95:2e:85:e6:5f:a7: a5:bc:02:42:06:8b:5a:c0:10:76:4c:66:3d:d6:18:13:7f:6b: a6:78:0a:83:ed:ac:5a:8f:38:e2:5f:55:87:c2:89:b6:79:84: 7b:fe:c6:8f:65:91:e0:db:90:60:59:e3:16:e6:38:4c:04:a7: af:82:70:27:08:d4:ef:da:0f:c3:5c:40:d9:79:4a:80:39:da: a7:c5:d5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK+T4LOeH/zysYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGVmYzNjYzUtOWMwZC00ZjY5LWExYzItZDgzMTQyYTJmZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6X1FT2yMlyuqmVcQUGCa5tLi7xlr92p4oCc IMYRa7lnZEJOcho/0DjVQ18S+GUANKG9FzzlDjfoImJf+VSCYvAPUkgyiUI/Y5Xo jKpHn/TgwT9CpEpUge5ZQ7x+WJQMVzc8gYh5pWYh6yhCMJmaUehbKRjkMDPAxPRb SJDHUNI1B25tIuSlyKNtK7K6FZfnDsvwyRkV1lRTGQl+8lKDDuzk83MyFPBOqZ9C c9HKwNzmt4LGVbPU8OHE+AmQPVrRQpXDXzMuUOfsu/mP5XPvFs8PU6OSBaiJiHt9 nVEXRTHLvamu0tza1k74F7753znw5nRfpho7HgNDKb97ljFUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/5jr+zAELb4g7IWcpVkt3X8L8xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk0MmU1OGYtZDIxMS0z NmFkLTg4NmMtNmMxNjQ1MWY4ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGdQstfDM29QCiiXugkfe/y9hFIJuP1MxXiP6y0xQDoPK5HGSHqT1kn RAaFNtVxg6JgYTz9DM6uQGSTjmDIx3zUcmWM9a2uleP0A29aEvZZjQKOc3Lpa2DS +3SGMwfhhfANALOWVncJRdmYPE+iFtjMl3htBjES5b66kGu4c6KmcG03mfofO2zU sprGh1ReeiZVWQi7BLuMCZUUH7O87BlFhgc1yzMb3IEpBZ+1aJUuheZfp6W8AkIG i1rAEHZMZj3WGBN/a6Z4CoPtrFqPOOJfVYfCibZ5hHv+xo9lkeDbkGBZ4xbmOEwE p6+CcCcI1O/aD8NcQNl5SoA52qfF1Vk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:33 2025 by rpki-client