$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa File: c8b3dff7-8897-3692-893d-51a768f982fa.roa (raw, json) Hash identifier: i2m4EIwqQmmj5wH4cqHVXPn7EAU9gTrXGcxm0P+qcZg= Subject key identifier: 38:60:D6:D6:2A:C6:A7:E3:DD:93:E1:88:74:1B:0B:CF:0A:03:A1:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3909F450D4D92506EE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 36620 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:90:9f:45:0d:4d:92:50:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=12b98a4f-df56-401e-bbf3-f90783fb74d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:de:c5:36:ee:20:c9:7f:fc:76:67:f1:92: 57:8b:83:41:3c:76:67:3c:5b:44:1e:ec:e4:d7:ad: e3:52:74:93:0b:21:03:3a:70:fe:06:07:25:87:95: 5d:11:af:32:85:4e:74:55:6a:30:b1:b3:65:7c:68: 0c:aa:94:2c:85:13:55:2e:a5:93:2f:03:27:7b:47: 24:f8:96:91:6d:3c:fb:b5:6b:6c:74:e0:e6:90:de: 02:c1:04:4e:de:8f:de:7e:48:a8:bc:a7:55:98:df: cf:f5:b1:65:90:c3:98:c2:61:66:42:19:fa:98:b5: 52:69:31:e3:2d:46:2f:9e:84:9c:4b:99:ac:d9:1e: 54:ce:0b:87:d4:cb:d9:be:44:71:d8:6b:39:df:68: 0c:01:89:e8:ad:6b:ec:28:c6:cd:d5:7e:0d:9d:cc: fc:26:2c:54:4f:79:06:f2:91:e0:bf:de:90:ba:b1: 93:dc:ff:7b:7d:db:c3:e0:ff:7b:96:f0:34:84:4f: 03:2f:9f:9a:84:a1:21:6b:1e:30:83:be:a7:f4:ba: db:12:88:5a:c7:c5:df:45:a6:e4:4c:78:19:e5:37: 8f:30:63:c0:e8:35:bc:4e:ac:57:3e:ee:ca:a1:d9: 4b:67:a9:32:cf:06:b4:23:fb:71:52:2a:48:78:85: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:D6:D6:2A:C6:A7:E3:DD:93:E1:88:74:1B:0B:CF:0A:03:A1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ab:02:5b:06:b8:f9:21:29:43:49:ad:6c:3b:03:37:53:13: 92:00:0e:23:cf:fd:a4:3e:ec:4e:e6:16:ff:77:c9:e6:5b:fb: f4:67:09:e7:31:53:6b:56:15:7f:63:a7:15:3c:38:a4:67:de: 0d:e4:b7:61:bd:9f:53:d5:23:87:50:a1:ea:c0:90:60:4e:95: a9:b3:cf:4e:2b:d1:ff:56:4e:58:41:31:d0:2c:28:c8:27:7a: a8:87:e8:45:aa:f2:87:5f:84:0f:b2:e7:98:f3:46:74:cc:05: e6:86:75:c7:eb:5f:d3:79:32:43:e0:9f:8e:b4:9d:d1:fb:8e: a4:61:c0:b1:f6:23:44:21:49:35:0b:84:ff:3a:e4:25:fe:83: 4a:68:e8:9b:a8:52:01:67:58:80:63:08:27:b2:a6:4d:f0:c8: 8a:3f:d8:17:62:a6:a5:77:e8:a6:02:f1:85:b6:8b:38:bc:51: 3a:c2:73:89:00:03:63:be:49:35:ad:bf:5b:b7:8b:15:26:2c: bf:cc:b9:1c:9e:23:9e:91:dc:2c:f0:e9:75:37:ac:ef:a2:89: a7:d2:48:1e:e6:3c:08:f9:d9:e8:da:64:d5:49:2e:8c:90:c6: bd:24:e6:e7:d3:4f:c7:62:9b:58:06:c1:ee:a3:55:d3:e7:e6: f3:61:5a:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLOQn0UNTZJQbuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTJiOThhNGYtZGY1Ni00MDFlLWJiZjMtZjkwNzgzZmI3NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv/exTbuIMl//HZn8ZJXi4NBPHZnPFtEHuzk 163jUnSTCyEDOnD+Bgclh5VdEa8yhU50VWowsbNlfGgMqpQshRNVLqWTLwMne0ck +JaRbTz7tWtsdODmkN4CwQRO3o/efkiovKdVmN/P9bFlkMOYwmFmQhn6mLVSaTHj LUYvnoScS5ms2R5UzguH1MvZvkRx2Gs532gMAYnorWvsKMbN1X4Nncz8JixUT3kG 8pHgv96QurGT3P97fdvD4P97lvA0hE8DL5+ahKEhax4wg76n9LrbEohax8XfRabk THgZ5TePMGPA6DW8TqxXPu7KodlLZ6kyzwa0I/txUipIeIV/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhg1tYqxqfj3ZPhiHQbC88KA6FaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhiM2RmZjctODg5Ny0z NjkyLTg5M2QtNTFhNzY4Zjk4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWrAlsGuPkhKUNJrWw7AzdTE5IADiPP/aQ+7E7mFv93yeZb+/RnCecx U2tWFX9jpxU8OKRn3g3kt2G9n1PVI4dQoerAkGBOlamzz04r0f9WTlhBMdAsKMgn eqiH6EWq8odfhA+y55jzRnTMBeaGdcfrX9N5MkPgn460ndH7jqRhwLH2I0QhSTUL hP865CX+g0po6JuoUgFnWIBjCCeypk3wyIo/2BdipqV36KYC8YW2izi8UTrCc4kA A2O+STWtv1u3ixUmLL/MuRyeI56R3Czw6XU3rO+iiafSSB7mPAj52ejaZNVJLoyQ xr0k5ufTT8dim1gGwe6jVdPn5vNhWhE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:14:07 2025 by rpki-client