$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa File: c94d6964-346a-351b-80d6-bc38161ce464.roa (raw, json) Hash identifier: MFinEPg09+FOerVgiX8GCF8XqsUE7cRmfQKqf2XbE6w= Subject key identifier: 66:D4:DC:4A:31:21:01:D1:AF:37:66:27:9C:FB:B2:7C:31:5D:56:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72FC92C697DE69E57FB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396602 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2f:c9:2c:69:7d:e6:9e:57:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=9edca336-503e-4617-9667-11e30f0a189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:a6:6b:46:af:1a:28:98:3a:e8:e2:bc:47: 44:bb:0a:2b:2a:e3:53:78:78:fa:7f:c9:b8:18:cb: fd:37:e5:4e:3d:08:48:ac:26:e6:9f:67:c4:f7:a9: 34:4f:7d:32:bf:71:ff:66:86:1b:92:72:cf:fa:c7: f5:4c:fd:31:bf:ca:43:6f:61:2e:b9:cc:ce:d0:6c: 5c:30:c4:9a:85:71:cc:c7:a0:0b:0e:32:94:9f:f9: a7:58:11:5a:17:a4:63:4a:79:68:38:71:aa:7f:c6: 90:c9:97:8c:5a:fe:ba:1f:83:4b:07:ff:1c:e8:1d: 39:1f:96:77:45:37:f3:e6:15:67:f7:2d:2f:8d:4a: 54:91:d4:1d:9f:f1:b8:3a:da:1c:60:13:95:09:87: a8:64:64:58:de:1b:95:c3:12:4d:ec:d5:20:58:c6: 5c:25:29:ec:47:a2:d4:69:9d:f1:2b:f9:52:98:06: 92:79:56:e0:fe:82:a9:30:e7:9a:43:a8:e8:ed:96: 48:06:5e:64:2e:18:43:5f:59:10:d4:3f:63:aa:c6: 28:04:1f:f4:3a:b8:09:4c:ff:af:d5:81:09:a7:6e: 4b:2a:50:4e:28:2a:65:46:a2:cc:ba:9b:8a:8f:c2: 83:4c:4a:6c:8d:4f:92:03:6c:4f:ea:d4:be:3c:e0: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:DC:4A:31:21:01:D1:AF:37:66:27:9C:FB:B2:7C:31:5D:56:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7a:11:7c:09:e1:a6:d8:49:86:1a:7f:e9:ae:a6:34:02:d6: a3:17:98:08:05:58:33:8a:34:1a:8d:12:18:9e:71:4a:4e:67: c0:f1:a0:1a:d9:a0:b2:f4:5a:98:50:22:6f:7c:e3:e3:1e:65: 49:cf:65:cf:ea:d6:78:67:c5:12:6a:cb:65:e9:fa:22:6d:ab: 9c:01:89:bc:cb:18:4d:49:1f:25:15:50:b1:58:01:41:3e:fa: 53:ee:7e:4b:ef:76:20:32:ec:f3:b6:3a:32:7c:b3:44:3c:dc: 33:8b:99:4f:79:99:39:86:04:90:5c:25:53:2f:c5:40:67:c3: 37:fe:87:ab:81:33:ea:c6:e4:4a:81:8c:c7:d6:cd:f5:64:e0: 31:05:2a:8c:e4:a8:4e:a4:00:1f:d8:33:4a:f3:e7:ff:9c:22: f0:c0:80:fc:df:17:9f:28:41:64:14:8e:e5:ac:03:5a:2f:0b: 61:9d:22:5b:bf:6e:da:ad:76:01:73:75:92:d4:61:96:c8:64: 38:b6:ac:17:1c:00:0d:66:dd:b6:20:3c:0c:9f:4b:49:25:fe: 1d:78:b6:bd:c8:e5:d4:2a:10:54:b2:aa:3f:f7:00:4e:6c:41: aa:ec:88:f0:c6:dc:c5:c6:e2:bc:6e:f7:b8:e6:e1:fb:9d:8e: 27:a4:ff:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y/JLGl95p5X+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OWVkY2EzMzYtNTAzZS00NjE3LTk2NjctMTFlMzBmMGExODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG2ma0avGiiYOujivEdEuworKuNTeHj6f8m4 GMv9N+VOPQhIrCbmn2fE96k0T30yv3H/ZoYbknLP+sf1TP0xv8pDb2EuuczO0Gxc MMSahXHMx6ALDjKUn/mnWBFaF6RjSnloOHGqf8aQyZeMWv66H4NLB/8c6B05H5Z3 RTfz5hVn9y0vjUpUkdQdn/G4OtocYBOVCYeoZGRY3huVwxJN7NUgWMZcJSnsR6LU aZ3xK/lSmAaSeVbg/oKpMOeaQ6jo7ZZIBl5kLhhDX1kQ1D9jqsYoBB/0OrgJTP+v 1YEJp25LKlBOKCplRqLMupuKj8KDTEpsjU+SA2xP6tS+PODE4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGbU3EoxIQHRrzdmJ5z7snwxXVZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk0ZDY5NjQtMzQ2YS0z NTFiLTgwZDYtYmMzODE2MWNlNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPehF8CeGm2EmGGn/prqY0AtajF5gIBVgzijQajRIYnnFKTmfA8aAa 2aCy9FqYUCJvfOPjHmVJz2XP6tZ4Z8USastl6foibaucAYm8yxhNSR8lFVCxWAFB PvpT7n5L73YgMuzztjoyfLNEPNwzi5lPeZk5hgSQXCVTL8VAZ8M3/oergTPqxuRK gYzH1s31ZOAxBSqM5KhOpAAf2DNK8+f/nCLwwID83xefKEFkFI7lrANaLwthnSJb v27arXYBc3WS1GGWyGQ4tqwXHAANZt22IDwMn0tJJf4deLa9yOXUKhBUsqo/9wBO bEGq7IjwxtzFxuK8bve45uH7nY4npP/+ -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:57 2025 by rpki-client