$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa File: de962637-5957-3361-b0f3-b1ed59737e18.roa (raw, json) Hash identifier: LJHp1/HAK5Ci5PHQAejuQ/AAvBdVVUqs+RrHoAfL2Ts= Subject key identifier: 63:ED:7B:0F:5F:5B:7C:17:DF:B4:90:21:36:AF:7F:0F:E8:56:BA:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7371882416875C85CA000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396613 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:37:18:82:41:68:75:c8:5c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=50493e87-9b67-4750-8d1b-2be52d32578d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:6c:20:0e:49:5f:d4:82:90:0e:f7:e8:02: 33:8f:92:84:37:c4:ca:a5:97:58:ee:f5:0b:48:29: 0e:16:43:36:ca:91:d4:c2:09:75:2e:27:6d:52:d0: 71:69:67:e7:3b:5c:c5:20:f2:b9:66:13:0f:b3:8b: 29:79:a0:af:23:36:a1:30:e5:05:69:60:27:1e:90: 6a:b8:29:78:ef:01:2a:2a:b8:65:7b:7e:83:09:d9: 91:30:92:c0:f8:a8:cb:4a:eb:28:84:87:4c:c3:8c: 70:04:c4:b4:4d:80:76:63:2c:47:e5:39:34:92:9e: 12:11:46:5d:0a:42:18:23:a2:32:dc:93:f6:b6:96: 10:cc:18:47:36:e6:f8:a6:c6:40:1f:ff:49:3c:0f: f0:03:ef:e3:9c:49:2d:03:d0:bf:4e:cb:85:3a:00: 0c:67:0a:1a:e1:40:08:2d:35:94:ed:1b:7e:67:ec: 6e:2c:c1:14:a4:a9:f2:d8:1f:a2:51:4e:4a:d3:8b: 12:6e:52:0e:95:68:93:36:47:85:ed:bb:7b:23:af: 3d:c0:7f:8e:44:2b:f0:2d:84:35:0f:c1:c0:eb:79: db:a4:e5:ed:a9:0f:6e:0a:b1:62:2e:5d:8f:a5:64: 1e:7e:e3:62:1b:78:10:f4:e1:58:d5:2d:28:02:26: 42:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:7B:0F:5F:5B:7C:17:DF:B4:90:21:36:AF:7F:0F:E8:56:BA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:36:2c:e9:9a:c9:41:6f:04:0f:bb:78:d4:55:82:ae:a4:ec: 32:7f:c4:a2:3d:c5:6b:14:3c:36:c8:b0:10:1d:1c:c9:3a:e2: 91:9d:20:7f:29:f2:2d:92:7c:df:5f:66:07:c5:ed:33:12:2f: 39:4d:be:42:30:63:cb:ae:4b:22:86:51:15:16:f5:7b:68:ab: dc:a3:ae:ed:59:13:af:71:0f:95:84:60:8e:31:d5:d7:ff:a6: 69:6b:11:48:96:44:11:79:9c:bb:df:39:01:c3:50:70:7e:16: 40:8e:13:91:65:4b:1e:f5:6d:ee:83:f9:34:88:dd:97:86:33: ad:85:82:be:c7:3f:70:5a:e3:c8:dc:42:b7:49:71:fe:d1:95: af:3a:33:d3:0c:42:16:59:49:64:4f:98:c5:10:c4:6f:3f:76: 74:48:42:cd:8e:50:26:9e:67:f6:5e:b8:3c:4b:31:76:cd:b9: ca:88:6c:d4:8f:0d:65:13:4e:3e:35:eb:af:8e:0b:ee:61:7a: 2c:44:82:71:10:47:b5:e5:f4:6a:06:5a:a6:25:e5:47:c6:08: 20:b3:e2:31:d4:7c:fe:fc:7a:c9:01:05:b2:f5:5b:89:98:68: de:3b:5f:a9:5b:d8:c7:01:0c:f7:e4:36:5f:0a:98:5e:8f:80: 5e:52:38:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zcYgkFodchcoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTA0OTNlODctOWI2Ny00NzUwLThkMWItMmJlNTJkMzI1NzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMZsIA5JX9SCkA736AIzj5KEN8TKpZdY7vUL SCkOFkM2ypHUwgl1LidtUtBxaWfnO1zFIPK5ZhMPs4speaCvIzahMOUFaWAnHpBq uCl47wEqKrhle36DCdmRMJLA+KjLSusohIdMw4xwBMS0TYB2YyxH5Tk0kp4SEUZd CkIYI6Iy3JP2tpYQzBhHNub4psZAH/9JPA/wA+/jnEktA9C/TsuFOgAMZwoa4UAI LTWU7Rt+Z+xuLMEUpKny2B+iUU5K04sSblIOlWiTNkeF7bt7I689wH+ORCvwLYQ1 D8HA63nbpOXtqQ9uCrFiLl2PpWQefuNiG3gQ9OFY1S0oAiZCxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGPtew9fW3wX37SQITavfw/oVrpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU5NjI2MzctNTk1Ny0z MzYxLWIwZjMtYjFlZDU5NzM3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmNizpmslBbwQPu3jUVYKupOwyf8SiPcVrFDw2yLAQHRzJOuKRnSB/ KfItknzfX2YHxe0zEi85Tb5CMGPLrksihlEVFvV7aKvco67tWROvcQ+VhGCOMdXX /6ZpaxFIlkQReZy73zkBw1BwfhZAjhORZUse9W3ug/k0iN2XhjOthYK+xz9wWuPI 3EK3SXH+0ZWvOjPTDEIWWUlkT5jFEMRvP3Z0SELNjlAmnmf2Xrg8SzF2zbnKiGzU jw1lE04+NeuvjgvuYXosRIJxEEe15fRqBlqmJeVHxgggs+Ix1Hz+/HrJAQWy9VuJ mGjeO1+pW9jHAQz35DZfCphej4BeUjjt -----END CERTIFICATE-----Generated at Mon Oct 20 08:20:38 2025 by rpki-client