$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa File: daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa (raw, json) Hash identifier: g9xxfbAAmHgCsvOieya7FrMsBNam9kMu1PQT/0hTmkc= Subject key identifier: 88:0D:08:AF:D9:92:68:11:56:AB:94:2B:45:F9:18:79:9C:D2:BF:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72A461ABB047CEA741080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396546 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2a:46:1a:bb:04:7c:ea:74:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5143cd06-5173-4ae6-9fc1-e711e4a07705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:0f:14:a3:b7:dc:e5:f2:13:37:b2:0c:f2: d4:80:db:ad:c5:e2:ab:c4:e0:88:bb:2c:63:4d:56: 89:3c:57:e2:6b:db:09:8a:f3:a2:fd:40:f0:5b:9a: 26:8b:17:70:ea:e1:fd:ae:03:10:63:90:fe:50:76: 07:3e:8d:2a:6e:1a:f1:c1:f6:06:e7:27:2d:51:e6: 46:94:1f:c2:9c:83:e6:79:d5:c4:45:72:c5:7f:8e: db:01:0b:35:ec:b4:1c:d1:bc:e9:9b:50:86:d9:bd: 4b:25:38:03:ef:1f:06:e3:c0:a3:37:b2:35:95:2f: 81:a8:8e:be:d2:c3:ef:d3:fa:ad:29:5b:0b:06:e1: 85:7e:6b:0d:96:58:35:2b:12:9d:17:57:e4:d8:b4: 5b:54:c0:65:c4:8d:16:d4:7c:09:33:ef:f9:74:2c: 70:a7:bf:66:03:c4:72:ae:f7:27:25:d3:6d:73:e0: 40:da:08:c4:b6:10:56:02:7a:a3:8e:02:7b:f8:0b: 81:e7:fb:5f:a7:f4:c7:d1:ac:85:b0:29:14:28:b5: 9a:56:bd:14:c4:ed:46:df:f1:a0:d7:46:37:0e:9b: 88:5f:5c:9a:b4:01:bc:fd:51:9c:b9:95:02:46:ca: 1a:f9:ce:58:e1:c9:89:90:2e:bd:50:cd:91:5e:b8: b4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:08:AF:D9:92:68:11:56:AB:94:2B:45:F9:18:79:9C:D2:BF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:87:9a:10:f2:e2:c3:ea:c5:ea:1e:29:30:ce:88:db:bc:3f: 88:7a:e5:c9:a2:a0:77:d4:c2:a1:f0:20:c2:b1:45:03:be:58: d9:96:17:bd:bb:07:fb:5c:4c:a6:1b:d0:53:93:03:5f:cc:20: 5e:6f:ff:19:e9:1a:0c:d8:3b:28:8e:22:b0:57:d7:71:63:bc: 2e:d4:fe:c8:d1:6e:77:d2:74:cd:a6:88:10:2e:fd:01:b8:26: 05:78:e9:2d:6e:d4:c3:74:d7:93:53:f9:c9:1f:a7:2d:04:26: 8b:f0:a9:7c:39:50:18:a3:f0:9e:7d:93:5d:6d:df:23:69:ce: 1b:c0:99:07:71:c3:f8:5a:a9:38:3e:b0:47:c0:44:bf:f7:1f: dd:ee:56:a2:6c:8a:de:ea:de:7f:20:fb:30:58:0b:cb:c5:3d: c8:72:d5:e0:26:82:53:56:a6:71:f1:d4:0d:16:77:a4:99:44: 69:ac:be:04:c9:a0:e7:e4:5f:9c:25:5b:67:7f:83:e8:f0:7e: a5:0b:4c:21:b5:3f:ee:6e:b9:61:3f:c5:7b:8b:42:ff:7f:da: ac:96:2f:50:5f:2b:6f:6f:5d:27:54:20:47:00:0d:39:a2:ae: 3c:14:0d:61:c5:fa:f7:f9:d3:f8:7f:33:f2:ae:06:41:b9:59: cb:0e:b2:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ypGGrsEfOp0EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTE0M2NkMDYtNTE3My00YWU2LTlmYzEtZTcxMWU0YTA3NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1YPFKO33OXyEzeyDPLUgNutxeKrxOCIuyxj TVaJPFfia9sJivOi/UDwW5omixdw6uH9rgMQY5D+UHYHPo0qbhrxwfYG5yctUeZG lB/CnIPmedXERXLFf47bAQs17LQc0bzpm1CG2b1LJTgD7x8G48CjN7I1lS+BqI6+ 0sPv0/qtKVsLBuGFfmsNllg1KxKdF1fk2LRbVMBlxI0W1HwJM+/5dCxwp79mA8Ry rvcnJdNtc+BA2gjEthBWAnqjjgJ7+AuB5/tfp/TH0ayFsCkUKLWaVr0UxO1G3/Gg 10Y3DpuIX1yatAG8/VGcuZUCRsoa+c5Y4cmJkC69UM2RXri0iQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIgNCK/ZkmgRVquUK0X5GHmc0r8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFlYzI2NTMtOGNjYi0z Y2NiLTkwZGMtMjNkOGFkOTFkOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLh5oQ8uLD6sXqHikwzojbvD+IeuXJoqB31MKh8CDCsUUDvljZlhe9 uwf7XEymG9BTkwNfzCBeb/8Z6RoM2DsojiKwV9dxY7wu1P7I0W530nTNpogQLv0B uCYFeOktbtTDdNeTU/nJH6ctBCaL8Kl8OVAYo/CefZNdbd8jac4bwJkHccP4Wqk4 PrBHwES/9x/d7laibIre6t5/IPswWAvLxT3IctXgJoJTVqZx8dQNFnekmURprL4E yaDn5F+cJVtnf4Po8H6lC0whtT/ubrlhP8V7i0L/f9qsli9QXytvb10nVCBHAA05 oq48FA1hxfr3+dP4fzPyrgZBuVnLDrJI -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:59 2025 by rpki-client