$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa File: d1cb972a-829e-361f-a2e0-9112a7813d46.roa (raw, json) Hash identifier: Yykoa8FbGtcB4hFgHg3yQ/kW2o+rWfUJKbP0homDAUQ= Subject key identifier: 4B:B5:4A:8E:DF:0D:F6:3F:21:3C:CF:9D:D1:9C:3E:C7:30:55:74:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB2D0BDE177D5AA9FDC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 36619 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:d0:bd:e1:77:d5:aa:9f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6509025c-9ff8-4bfd-acf6-f944ed7df91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:1f:39:23:15:32:d6:4e:64:be:6b:11:1c: 5a:23:9f:a8:1f:a5:6f:d6:cf:8b:98:45:e2:26:f0: ed:59:92:35:65:16:fe:7c:8e:b8:8b:f7:ef:33:1e: 73:07:97:2c:04:c8:8e:05:e5:ca:2c:61:98:81:28: 6b:4f:3c:90:c5:39:4d:0b:a1:88:84:fb:69:be:64: a4:4b:0e:67:64:b8:73:11:cf:42:24:65:01:9b:bc: 87:9b:53:2a:7b:3f:45:4f:3f:ca:3c:bc:75:eb:2d: 27:11:4f:06:08:08:0a:83:9a:3a:eb:dc:1f:6e:e0: c5:7e:82:e7:8b:b0:7b:ea:81:bd:6b:84:97:6b:9c: 64:04:3c:6c:79:f2:fa:2b:07:4a:c6:37:8a:e5:24: 9e:87:54:2f:70:64:c4:7a:b7:03:bb:17:35:d3:da: 72:04:87:9b:20:57:45:2f:21:b5:d2:0b:1a:38:5d: c4:a0:5f:cb:ff:0d:bb:d7:11:9a:09:f0:02:c1:10: 74:20:ae:47:d3:75:bd:22:a8:9b:c5:bf:d5:bd:e5: 12:e5:44:37:44:da:a0:d3:1c:94:51:c2:ad:a1:6a: 1c:fe:11:43:3a:df:52:84:1b:3d:c8:f4:ef:0b:b5: 47:88:05:e7:a2:c3:c0:88:65:44:18:c6:16:7c:08: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B5:4A:8E:DF:0D:F6:3F:21:3C:CF:9D:D1:9C:3E:C7:30:55:74:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1cb972a-829e-361f-a2e0-9112a7813d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b0:9a:bb:b0:48:bf:d1:94:93:fa:03:6d:2d:73:65:bf:97: 65:dd:72:3d:53:96:ee:4b:2e:20:f9:45:4b:3f:89:8a:52:7c: 8f:7b:84:07:61:0c:53:c4:d0:a3:db:31:b6:cd:c7:0d:6f:c0: a6:6c:12:5d:be:23:ac:d6:d0:93:09:b9:71:53:91:e6:6b:df: 25:24:70:ea:8b:c3:22:6a:8a:c2:92:51:3f:65:cb:a6:2e:db: e8:81:e7:5c:cf:5f:65:54:5e:4a:63:70:46:21:3f:ec:46:2d: 94:83:2a:d7:81:af:d5:9b:d5:f5:9d:8a:a2:5d:48:b3:7a:5a: 05:20:96:5d:0e:7b:04:0f:ea:3c:ef:8c:d6:24:f9:8f:10:27: 65:74:ef:ae:53:71:8c:d3:2e:ba:a6:91:bc:c2:5f:c7:35:1b: 26:8e:c9:cf:03:25:b7:40:d5:60:2b:bf:f2:4d:8b:52:05:6a: 4e:85:f9:27:42:87:c5:cb:01:90:eb:22:b2:b2:b9:41:2a:35: 3a:fe:30:b5:ae:2d:b0:26:c5:ff:a3:ca:b3:d3:90:da:94:b6: 9a:a2:d7:ab:eb:03:61:2d:e5:a7:74:04:a8:99:db:b8:2d:1d: 39:3d:bd:32:d4:4d:5b:0c:00:22:01:1e:b7:3a:46:10:7d:ea: 48:e9:21:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLLQveF31aqf3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjUwOTAyNWMtOWZmOC00YmZkLWFjZjYtZjk0NGVkN2RmOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMfOSMVMtZOZL5rERxaI5+oH6Vv1s+LmEXi JvDtWZI1ZRb+fI64i/fvMx5zB5csBMiOBeXKLGGYgShrTzyQxTlNC6GIhPtpvmSk Sw5nZLhzEc9CJGUBm7yHm1Mqez9FTz/KPLx16y0nEU8GCAgKg5o669wfbuDFfoLn i7B76oG9a4SXa5xkBDxsefL6KwdKxjeK5SSeh1QvcGTEercDuxc109pyBIebIFdF LyG10gsaOF3EoF/L/w271xGaCfACwRB0IK5H03W9Iqibxb/VveUS5UQ3RNqg0xyU UcKtoWoc/hFDOt9ShBs9yPTvC7VHiAXnosPAiGVEGMYWfAix9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu1So7fDfY/ITzPndGcPscwVXTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDFjYjk3MmEtODI5ZS0z NjFmLWEyZTAtOTExMmE3ODEzZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+wmruwSL/RlJP6A20tc2W/l2Xdcj1Tlu5LLiD5RUs/iYpSfI97hAdh DFPE0KPbMbbNxw1vwKZsEl2+I6zW0JMJuXFTkeZr3yUkcOqLwyJqisKSUT9ly6Yu 2+iB51zPX2VUXkpjcEYhP+xGLZSDKteBr9Wb1fWdiqJdSLN6WgUgll0OewQP6jzv jNYk+Y8QJ2V0765TcYzTLrqmkbzCX8c1GyaOyc8DJbdA1WArv/JNi1IFak6F+SdC h8XLAZDrIrKyuUEqNTr+MLWuLbAmxf+jyrPTkNqUtpqi16vrA2Et5ad0BKiZ27gt HTk9vTLUTVsMACIBHrc6RhB96kjpIWk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:59 2025 by rpki-client