$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa File: db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa (raw, json) Hash identifier: 3a42jLKRXlMIBTeZ4N9QtFSa8Uglz8iIlAhoDkwjg9g= Subject key identifier: DF:BA:81:A1:60:CE:0F:9D:5F:70:58:AB:45:BE:94:02:4B:9E:9D:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB155CCCFBC5E3F1E3F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396596 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:55:cc:cf:bc:5e:3f:1e:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=3b43e577-971d-46fe-aaca-ee9e9bda79f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:f9:28:b6:97:c3:f5:94:84:1c:0d:55:26: 13:fd:7c:45:6f:13:88:73:30:f5:62:05:89:e8:1e: b2:57:a9:cf:76:19:ad:d5:dd:ac:85:fd:18:88:ea: ed:cf:7d:0e:c2:28:2a:6b:24:61:e6:85:85:19:58: 3c:b3:14:03:0e:6f:52:b0:2a:7f:86:0e:88:4f:b2: 80:72:de:1e:ce:d4:9a:94:ce:11:df:70:96:cd:48: bc:6e:ec:9f:cd:f3:74:5d:ba:3c:00:09:e5:72:99: 85:ce:66:3c:16:7b:bc:47:a1:8a:5c:73:73:9a:11: f1:55:f7:ee:f0:fc:33:37:6f:e8:8c:57:cb:6b:d2: 73:87:78:83:ca:b3:89:40:df:1d:3d:ee:af:20:e3: 22:d3:db:1e:3e:13:0a:13:8d:b9:61:b0:40:7f:b1: 7f:15:fe:cf:bb:0c:84:4b:c4:83:aa:eb:2c:bb:e3: 0f:33:bf:cc:90:0a:5e:6d:5c:cb:2b:52:89:03:81: 95:71:07:c2:dd:fe:c4:ce:08:60:d6:dd:99:61:7b: 08:66:59:0d:2c:7d:46:ac:9f:fc:57:d0:37:d9:1d: b9:b6:b5:c5:93:f8:98:72:d2:30:c0:fb:dc:bb:3a: 11:2d:cd:e9:c9:80:5b:78:cc:fd:fd:25:67:ec:9e: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:81:A1:60:CE:0F:9D:5F:70:58:AB:45:BE:94:02:4B:9E:9D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:06:94:84:41:52:8b:97:ec:0e:99:2f:9e:75:46:4e:48:b1: 22:f2:06:4b:bd:45:39:2d:eb:02:1f:34:ec:b6:ac:1f:75:3c: f7:b7:cf:9c:18:6c:b7:94:a8:c4:e9:ee:a8:29:28:43:8b:75: c2:d4:75:07:9f:a2:ec:ac:11:16:28:3c:ae:ee:73:6e:27:20: dd:d2:26:dc:8e:e1:df:63:56:76:2a:81:7d:b7:2f:c0:04:a4: f5:2d:a4:ea:73:f7:0b:2e:d3:d6:03:77:0a:2a:b4:df:55:62: d6:1d:00:2d:be:f4:b6:3c:f5:34:df:51:c3:ba:b8:f8:ed:fd: c4:08:59:8b:f7:19:8f:4b:df:7a:c1:41:26:d1:02:77:a4:1f: e2:72:fd:fc:e7:b3:89:55:7d:09:15:ef:9a:24:4b:a0:1c:4b: 43:ab:6a:45:73:70:8b:7f:5d:89:5d:7c:8c:0c:13:d7:d9:66: 5c:fb:87:3a:e2:37:7b:cd:3e:d4:32:3b:94:18:58:e0:aa:01: 00:cc:85:8d:01:62:87:af:94:d8:84:f3:74:f4:0d:28:6d:a6: 09:1a:3d:9e:ad:79:65:40:fe:ba:97:7d:02:c3:61:00:3f:21: 6d:df:a2:00:6f:a8:1a:da:c7:e8:c8:69:fe:35:f5:c5:0c:de: f7:48:16:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLFVzM+8Xj8eP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2I0M2U1NzctOTcxZC00NmZlLWFhY2EtZWU5ZTliZGE3OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdT5KLaXw/WUhBwNVSYT/XxFbxOIczD1YgWJ 6B6yV6nPdhmt1d2shf0YiOrtz30OwigqayRh5oWFGVg8sxQDDm9SsCp/hg6IT7KA ct4eztSalM4R33CWzUi8buyfzfN0Xbo8AAnlcpmFzmY8Fnu8R6GKXHNzmhHxVffu 8PwzN2/ojFfLa9Jzh3iDyrOJQN8dPe6vIOMi09sePhMKE425YbBAf7F/Ff7PuwyE S8SDqussu+MPM7/MkApebVzLK1KJA4GVcQfC3f7Ezghg1t2ZYXsIZlkNLH1GrJ/8 V9A32R25trXFk/iYctIwwPvcuzoRLc3pyYBbeMz9/SVn7J6VUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+6gaFgzg+dX3BYq0W+lAJLnp1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0OTA3ZDQtNTEwMi0z ZDdiLWFlOGQtMzYwMjdmZTRlYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4GlIRBUouX7A6ZL551Rk5IsSLyBku9RTkt6wIfNOy2rB91PPe3z5wY bLeUqMTp7qgpKEOLdcLUdQefouysERYoPK7uc24nIN3SJtyO4d9jVnYqgX23L8AE pPUtpOpz9wsu09YDdwoqtN9VYtYdAC2+9LY89TTfUcO6uPjt/cQIWYv3GY9L33rB QSbRAnekH+Jy/fzns4lVfQkV75okS6AcS0OrakVzcIt/XYldfIwME9fZZlz7hzri N3vNPtQyO5QYWOCqAQDMhY0BYoevlNiE83T0DShtpgkaPZ6teWVA/rqXfQLDYQA/ IW3fogBvqBrax+jIaf419cUM3vdIFlI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:30 2025 by rpki-client