$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa File: d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa (raw, json) Hash identifier: 4skxg/Vgacc5giykUnlg5GyOXbLk+HF3xALMya6koWY= Subject key identifier: 4F:03:5D:B5:FE:5A:55:79:94:56:2E:92:C8:57:A9:71:04:BA:96:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72CB47109273327809700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396566 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2c:b4:71:09:27:33:27:80:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0d75d37f-1dac-466d-af85-6c143eb993fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4e:99:8c:27:ff:e2:6a:f0:56:dc:8e:59:8e: 53:cc:8a:00:9f:6f:25:4c:2b:c1:a2:ff:22:89:d9: 6d:9d:27:bd:2c:63:61:d1:58:9f:e4:0d:be:1f:78: 83:17:a6:61:7c:1b:3c:3b:f6:a7:72:38:27:d5:41: ec:81:7f:07:b2:18:2a:44:a6:55:46:ce:e9:93:cb: 42:dc:db:22:5a:3e:d9:f8:d7:c4:31:c9:23:b5:82: 4f:82:74:a2:90:0e:f9:06:6a:b4:01:e9:d8:ee:94: 57:ed:5a:bc:bd:f5:6e:4f:ac:80:66:ad:17:f3:06: 76:73:d3:48:e9:8a:7d:97:ef:80:c4:54:b1:d0:f7: 2b:15:e7:41:7b:01:da:cc:7d:bc:2e:e5:b8:81:47: d8:0f:36:a6:a2:7c:de:fa:1f:f9:70:3e:38:c6:79: 29:27:13:ba:01:dd:77:b8:5c:ff:71:49:64:40:a6: 60:e4:b6:1f:b9:c0:6d:71:98:e0:03:bb:e5:2d:56: 5c:f9:c4:6f:8d:a0:bc:09:50:36:44:93:43:a3:92: 0b:c8:85:38:ef:f4:89:a9:b4:25:bc:01:ce:fd:49: 8f:7b:79:c7:d3:f4:5f:1e:82:f4:e4:e9:d2:12:19: cd:cd:00:64:f4:8a:83:51:6d:06:ca:82:1a:cb:f4: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:03:5D:B5:FE:5A:55:79:94:56:2E:92:C8:57:A9:71:04:BA:96:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:00:42:a8:e5:49:c2:8a:c2:a7:14:d5:2e:0d:e0:6b:8a:0d: 5b:f3:d9:83:77:b5:ab:a4:8a:fd:db:74:33:ac:64:a2:74:65: de:18:ce:0f:41:54:61:f2:50:a7:0b:bf:0d:87:6d:9d:01:14: b2:60:de:5f:9c:31:b3:38:f2:bd:fd:89:42:99:09:87:b6:89: 77:7a:7b:d5:6b:e1:fd:f4:bf:68:6a:3d:5b:cf:07:d3:29:5a: c0:78:e9:99:eb:c7:39:63:3f:91:74:f2:8b:65:29:d4:d0:cd: 08:6f:a2:b7:6d:b4:b5:a2:c0:0f:05:ad:d8:1f:e3:e8:de:38: f5:f7:9d:c7:00:2e:da:c3:4f:db:72:97:f2:a3:b4:5a:58:97: 29:a5:49:60:82:cb:3d:9c:91:06:05:80:8f:49:8a:89:2a:4a: 07:ce:3c:2a:93:d4:13:4b:db:98:eb:c9:03:fb:90:74:04:bd: 20:39:59:c8:f4:2a:f1:2a:e0:38:46:ac:a6:79:54:b9:dd:17: 16:5c:d9:04:cd:63:2d:55:60:d8:df:3c:fd:d9:fa:d0:93:26: 52:c9:b1:6d:69:a2:4a:50:fc:3e:12:b6:18:2f:49:40:db:f9: 82:ca:3f:ee:77:54:60:64:02:07:ba:a8:9c:6a:7c:10:1f:eb: f1:e3:1c:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yy0cQknMyeAlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGQ3NWQzN2YtMWRhYy00NjZkLWFmODUtNmMxNDNlYjk5M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi06ZjCf/4mrwVtyOWY5TzIoAn28lTCvBov8i idltnSe9LGNh0Vif5A2+H3iDF6ZhfBs8O/ancjgn1UHsgX8HshgqRKZVRs7pk8tC 3NsiWj7Z+NfEMckjtYJPgnSikA75Bmq0AenY7pRX7Vq8vfVuT6yAZq0X8wZ2c9NI 6Yp9l++AxFSx0PcrFedBewHazH28LuW4gUfYDzamonze+h/5cD44xnkpJxO6Ad13 uFz/cUlkQKZg5LYfucBtcZjgA7vlLVZc+cRvjaC8CVA2RJNDo5ILyIU47/SJqbQl vAHO/UmPe3nH0/RfHoL05OnSEhnNzQBk9IqDUW0GyoIay/QiSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE8DXbX+WlV5lFYukshXqXEEupYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDQyM2U1YWQtNTY0Ni0z YzkzLWI5NmEtZTkxZDQ5YzBhMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2AEKo5UnCisKnFNUuDeBrig1b89mDd7WrpIr923QzrGSidGXeGM4P QVRh8lCnC78Nh22dARSyYN5fnDGzOPK9/YlCmQmHtol3envVa+H99L9oaj1bzwfT KVrAeOmZ68c5Yz+RdPKLZSnU0M0Ib6K3bbS1osAPBa3YH+Po3jj1953HAC7aw0/b cpfyo7RaWJcppUlggss9nJEGBYCPSYqJKkoHzjwqk9QTS9uY68kD+5B0BL0gOVnI 9CrxKuA4RqymeVS53RcWXNkEzWMtVWDY3zz92frQkyZSybFtaaJKUPw+ErYYL0lA 2/mCyj/ud1RgZAIHuqicanwQH+vx4xxI -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:17 2025 by rpki-client