$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa File: c34f924c-10f3-3f1a-882e-56663b0511c4.roa (raw, json) Hash identifier: hkE4E3zmH7kvnl1rXxOUAN3/3HjcIni4j0HOalEwC2g= Subject key identifier: 1F:EF:98:53:4F:8E:9A:CD:3E:80:8E:BC:30:29:54:E9:90:3F:9A:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72DE37B0CF40DBBEB3680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396597 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:e3:7b:0c:f4:0d:bb:eb:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=12542906-e6ca-4954-b88a-9a83032acd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:53:cb:1e:d3:f7:bd:3c:df:2b:68:c6:a0: 5f:11:97:a1:d2:b5:4d:53:c1:9d:c9:32:fc:2e:51: d6:a6:87:06:26:c2:76:d3:b2:96:94:60:11:cc:e8: 9b:f4:32:a7:5f:81:87:84:f3:5e:0d:47:11:ad:36: 95:37:c8:41:20:21:fd:a0:8a:9c:49:02:9e:f1:e4: 70:fc:6e:92:53:d1:9b:de:b4:a4:cd:f4:66:55:6e: 9a:e6:24:76:8c:6f:6f:42:41:8b:5e:1e:7b:1b:af: bb:04:09:d4:23:6e:a1:b5:88:e5:b9:a2:06:97:18: d3:c2:df:4e:fe:2d:ec:8b:2d:b9:ba:54:f3:b7:34: 3f:68:52:81:1c:78:9f:fc:3e:15:f0:04:fc:9b:41: be:6f:a1:e3:e2:3d:d6:d8:e6:a2:f5:cb:31:62:67: 72:c1:86:33:22:c5:a6:2e:9a:44:06:9a:ec:ed:76: 09:9a:a5:fe:2e:6b:99:7c:b0:18:bf:79:c3:ac:27: 1e:b7:22:6d:83:2a:a6:80:ff:8d:1d:89:47:26:9e: 30:6b:20:01:81:dc:85:fc:9b:12:72:21:e5:9f:52: a4:57:1d:73:f9:80:d7:ae:d9:a2:69:27:13:62:12: 03:1e:be:02:45:a5:b5:ab:d8:d6:65:4d:9d:2f:97: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EF:98:53:4F:8E:9A:CD:3E:80:8E:BC:30:29:54:E9:90:3F:9A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c34f924c-10f3-3f1a-882e-56663b0511c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4f:7c:02:b6:8f:c8:35:a1:de:03:d6:21:ef:f6:59:51:26: 61:f7:d9:81:18:7e:64:63:fa:c2:84:c4:be:a4:7f:af:f1:7f: 6b:cf:b6:d0:4f:d3:ca:48:1a:48:16:ce:d0:4d:f6:ca:b5:f9: 30:6e:f0:19:4c:ea:a8:9c:a8:c8:96:de:55:94:73:ec:70:9d: 3f:94:04:d9:2d:64:4d:89:92:8d:14:3c:f5:e0:35:bb:3e:bc: 41:f4:ce:a4:99:0c:71:9c:67:98:b7:c7:50:9e:0a:9b:68:77: f0:d7:48:a0:73:7d:5f:c7:07:f0:de:aa:d1:48:d7:0f:4c:b3: 9d:ea:15:a5:9d:36:68:20:91:7e:73:f1:c9:38:15:86:71:47: 8c:ef:62:6d:35:35:8f:1f:50:9d:7f:1a:df:fc:31:2e:ed:67: 59:58:8c:0f:01:9f:d8:d2:9a:37:de:df:d7:a2:a8:31:01:31: aa:5e:9a:a5:c4:be:7a:71:b9:a2:c5:fd:56:37:3f:7a:be:de: b1:46:15:3c:4f:32:5c:e6:1b:bd:e5:f4:44:99:3b:f0:c4:70: fc:51:08:b7:9e:79:3c:a8:be:a2:b6:9f:a0:c9:39:52:c0:fb: fd:6b:5a:ae:db:79:17:95:17:67:6b:2f:76:70:97:e8:11:ff: 38:ea:27:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y3jewz0DbvrNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTI1NDI5MDYtZTZjYS00OTU0LWI4OGEtOWE4MzAzMmFjZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UlTyx7T97083ytoxqBfEZeh0rVNU8GdyTL8 LlHWpocGJsJ207KWlGARzOib9DKnX4GHhPNeDUcRrTaVN8hBICH9oIqcSQKe8eRw /G6SU9Gb3rSkzfRmVW6a5iR2jG9vQkGLXh57G6+7BAnUI26htYjluaIGlxjTwt9O /i3siy25ulTztzQ/aFKBHHif/D4V8AT8m0G+b6Hj4j3W2Oai9csxYmdywYYzIsWm LppEBprs7XYJmqX+LmuZfLAYv3nDrCcetyJtgyqmgP+NHYlHJp4wayABgdyF/JsS ciHln1KkVx1z+YDXrtmiaScTYhIDHr4CRaW1q9jWZU2dL5fTtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB/vmFNPjprNPoCOvDApVOmQP5q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzM0ZjkyNGMtMTBmMy0z ZjFhLTg4MmUtNTY2NjNiMDUxMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlT3wCto/INaHeA9Yh7/ZZUSZh99mBGH5kY/rChMS+pH+v8X9rz7bQ T9PKSBpIFs7QTfbKtfkwbvAZTOqonKjIlt5VlHPscJ0/lATZLWRNiZKNFDz14DW7 PrxB9M6kmQxxnGeYt8dQngqbaHfw10igc31fxwfw3qrRSNcPTLOd6hWlnTZoIJF+ c/HJOBWGcUeM72JtNTWPH1Cdfxrf/DEu7WdZWIwPAZ/Y0po33t/XoqgxATGqXpql xL56cbmixf1WNz96vt6xRhU8TzJc5hu95fREmTvwxHD8UQi3nnk8qL6itp+gyTlS wPv9a1qu23kXlRdnay92cJfoEf846ict -----END CERTIFICATE-----Generated at Mon Oct 20 08:15:53 2025 by rpki-client