$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa File: ba01f06e-95a6-3810-b336-c2de627801ec.roa (raw, json) Hash identifier: 8spMQa7AC3ze7qOESt/6p3r+cldW1DkZ5iuj1qTvw2w= Subject key identifier: BB:E6:CD:27:C0:08:37:E4:F0:84:5F:BA:F6:2C:CF:09:90:17:25:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB24D8C917F88C2690280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396581 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:4d:8c:91:7f:88:c2:69:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=bfd71547-6c62-48c0-b3f9-a6f02d09ec3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:57:5b:8a:91:b7:85:f9:51:e3:ac:2a:e4: 32:38:b3:0b:c7:3d:18:6b:7a:a9:4b:de:29:af:06: 3c:e1:59:44:25:44:e0:08:ed:d9:e4:52:da:a2:9a: 61:e7:5f:9e:1e:91:97:90:7c:a0:99:65:9d:13:49: 78:6c:6b:67:68:28:05:49:5a:7e:d9:a3:b3:5e:6c: 0f:eb:8f:1a:de:aa:bc:fe:21:45:f2:38:3a:ef:84: 0d:b3:a3:1f:c2:cd:e2:a1:79:0a:01:c1:d8:bd:5e: 21:8e:82:47:f5:7b:6d:e4:60:76:fc:89:00:f9:a6: 68:50:0e:8b:97:a9:f2:1b:a8:98:97:fa:40:fb:b2: eb:a6:28:99:26:37:f3:f8:32:dd:16:1b:ca:98:23: 5f:d1:1f:77:71:cc:2b:cf:4e:42:70:25:15:7f:a3: 57:a8:b1:60:41:aa:ee:b5:ed:23:6c:da:55:5c:24: 49:b3:64:ab:64:4f:f2:77:9e:47:1a:20:55:96:b3: c8:54:11:70:ba:1a:f2:cb:f3:40:5c:fb:8a:2b:49: 4a:de:6c:b5:e3:66:66:08:13:fc:bc:70:fd:7d:0c: 2f:4a:2b:7b:08:43:a5:5d:d2:5b:0b:73:1b:d9:32: 0d:30:1a:39:77:39:65:dc:28:1d:e7:88:16:95:b8: 71:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E6:CD:27:C0:08:37:E4:F0:84:5F:BA:F6:2C:CF:09:90:17:25:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e8:08:f3:70:ed:28:da:ff:82:d2:e8:97:1b:25:f8:33:5d: b5:15:35:93:21:57:c3:c1:43:4c:38:54:17:90:13:3a:8b:34: c1:03:63:b8:67:4a:f0:d2:b7:3f:34:a0:29:22:40:4e:9d:f2: 41:ff:c2:cd:0a:21:95:a8:77:51:a8:91:56:a7:ce:55:98:ef: c0:4a:d6:18:69:28:86:6d:b9:06:84:dc:d5:ed:e7:72:4f:dd: 03:98:a0:b6:67:f0:3f:bb:db:5b:d3:b7:e8:84:5b:79:7e:96: 03:34:e3:01:f3:00:4e:c6:a6:bc:77:9c:1c:67:b9:93:e5:17: eb:6b:a9:4d:05:58:31:ff:00:fb:c3:37:95:4e:8d:4c:eb:96: 70:e8:ae:25:91:6c:42:e0:d3:4c:1c:3a:21:a0:c2:06:c0:ff: 9a:56:90:ed:30:83:20:a4:4e:8d:5b:5b:27:8c:fb:9b:19:f4: f8:26:7c:c7:6d:13:3d:e1:30:1e:f9:14:d0:3a:fa:82:fc:66: 11:96:6d:48:6a:39:9f:70:7b:42:f8:81:e7:61:a3:0b:9f:57: cd:e7:d5:85:91:d1:1d:f4:4b:09:12:29:11:e9:26:6e:ba:d2: ae:ed:8b:e8:eb:ed:7d:8b:ae:11:cf:8d:f0:d3:eb:08:71:26: f7:a7:69:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLJNjJF/iMJpAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YmZkNzE1NDctNmM2Mi00OGMwLWIzZjktYTZmMDJkMDllYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qtXW4qRt4X5UeOsKuQyOLMLxz0Ya3qpS94p rwY84VlEJUTgCO3Z5FLaopph51+eHpGXkHygmWWdE0l4bGtnaCgFSVp+2aOzXmwP 648a3qq8/iFF8jg674QNs6Mfws3ioXkKAcHYvV4hjoJH9Xtt5GB2/IkA+aZoUA6L l6nyG6iYl/pA+7LrpiiZJjfz+DLdFhvKmCNf0R93ccwrz05CcCUVf6NXqLFgQaru te0jbNpVXCRJs2SrZE/yd55HGiBVlrPIVBFwuhryy/NAXPuKK0lK3my142ZmCBP8 vHD9fQwvSit7CEOlXdJbC3Mb2TINMBo5dzll3Cgd54gWlbhxWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvmzSfACDfk8IRfuvYszwmQFyUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEwMWYwNmUtOTVhNi0z ODEwLWIzMzYtYzJkZTYyNzgwMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjoCPNw7Sja/4LS6JcbJfgzXbUVNZMhV8PBQ0w4VBeQEzqLNMEDY7hn SvDStz80oCkiQE6d8kH/ws0KIZWod1GokVanzlWY78BK1hhpKIZtuQaE3NXt53JP 3QOYoLZn8D+721vTt+iEW3l+lgM04wHzAE7Gprx3nBxnuZPlF+trqU0FWDH/APvD N5VOjUzrlnDoriWRbELg00wcOiGgwgbA/5pWkO0wgyCkTo1bWyeM+5sZ9PgmfMdt Ez3hMB75FNA6+oL8ZhGWbUhqOZ9we0L4gedhowufV83n1YWR0R30SwkSKRHpJm66 0q7ti+jr7X2LrhHPjfDT6whxJvenaUE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:37:26 2025 by rpki-client