$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa File: dea0163b-a1dc-39da-b708-1302f54a1bf0.roa (raw, json) Hash identifier: sIFt2PdKC2rJcZ/o7vRpPzl0tSufhHIBRChiuxmqZ/s= Subject key identifier: 15:C0:30:9C:16:7F:CD:86:AE:4C:37:3E:6E:AC:43:3F:66:C6:74:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAF41727FFAEF17B3F7C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396576 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:af:41:72:7f:fa:ef:17:b3:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=894b07ef-50fb-40a6-992a-d8a33bde2daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:07:b7:76:ae:77:db:ed:d1:5c:65:1f:d7: 96:d6:36:92:a3:5d:f8:34:0c:fd:40:e2:13:cd:36: 0b:64:c7:f5:66:bf:df:23:20:40:15:12:f8:a4:b7: 9e:ba:17:62:2b:fd:c2:73:19:a6:8f:08:9e:37:b9: 9c:66:ab:f3:ff:a3:1d:da:6c:02:ed:7e:59:fd:e9: 7d:61:c8:7c:dd:e0:84:c8:4e:0c:88:aa:44:d3:f7: c6:91:d9:dd:e4:bd:79:76:15:93:8e:07:16:f9:9d: a0:28:ec:50:05:6b:fe:57:6e:a0:72:93:56:f0:2c: d2:eb:10:b5:69:4d:d2:0f:4b:a0:b6:10:61:63:5c: 1c:67:97:72:f5:1e:6c:8f:1b:51:df:4d:f4:3c:f1: 3a:3b:f3:39:c2:28:ec:e4:66:a4:ea:4e:29:d5:e2: a6:e7:33:c3:98:8d:43:3d:52:36:2f:70:b2:57:07: e4:03:58:b4:39:73:88:63:f1:f8:d0:d7:a4:9b:63: 65:fe:84:ca:3f:49:33:ea:ee:00:ac:11:a2:30:d2: f5:92:f4:60:26:59:8e:f1:cc:da:bf:7f:92:df:d1: c9:35:a3:64:58:65:54:4f:f5:b7:58:72:0f:74:a4: e4:b8:0f:00:5e:09:a5:3e:f5:29:20:22:59:51:7e: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:30:9C:16:7F:CD:86:AE:4C:37:3E:6E:AC:43:3F:66:C6:74:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:63:1d:d7:ae:6f:cc:51:f1:70:5b:73:f1:e0:b8:ed:28:7d: 6e:49:61:f9:7a:44:0c:63:22:2e:02:d7:ae:1a:1e:51:e7:0f: e4:40:7a:cf:e8:4d:5c:1e:a5:b0:13:0e:9d:a0:9d:61:0d:3d: e2:ad:10:f9:2d:46:3d:a9:55:74:1a:58:2b:6b:c2:85:28:c2: 22:09:e1:9b:80:03:61:27:aa:21:e2:2f:5e:2e:16:06:70:1c: c7:10:5c:f4:32:2a:71:3b:52:7f:9f:25:38:cf:17:97:87:5b: 46:52:91:54:c5:2f:13:4e:66:24:d0:80:23:a9:20:db:7c:fe: 34:5a:45:9a:5b:cb:af:0c:9d:61:75:79:ec:7c:fb:5e:5a:37: 3d:68:61:02:72:4b:c1:77:65:fc:ef:cf:5b:c0:79:6b:84:e1: 07:8e:a9:5c:5b:10:dd:51:4d:b4:58:5a:85:bf:07:ad:ac:31: 04:3e:97:bd:fb:70:57:d1:60:7f:33:ac:20:6f:f0:06:df:e8: 9e:83:af:c8:75:a3:b3:7b:8c:22:c7:57:62:d7:0e:f2:ba:4c: b8:52:6f:6a:0c:5e:c5:ec:1a:90:73:d8:a8:03:a1:fb:6c:df: 5f:e0:db:42:5f:a1:f7:cd:3e:91:60:8a:c6:42:cb:d9:08:14: 8e:be:f2:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK9Bcn/67xez98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODk0YjA3ZWYtNTBmYi00MGE2LTk5MmEtZDhhMzNiZGUyZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJsHt3aud9vt0VxlH9eW1jaSo134NAz9QOIT zTYLZMf1Zr/fIyBAFRL4pLeeuhdiK/3CcxmmjwieN7mcZqvz/6Md2mwC7X5Z/el9 Ych83eCEyE4MiKpE0/fGkdnd5L15dhWTjgcW+Z2gKOxQBWv+V26gcpNW8CzS6xC1 aU3SD0ugthBhY1wcZ5dy9R5sjxtR3030PPE6O/M5wijs5Gak6k4p1eKm5zPDmI1D PVI2L3CyVwfkA1i0OXOIY/H40Nekm2Nl/oTKP0kz6u4ArBGiMNL1kvRgJlmO8cza v3+S39HJNaNkWGVUT/W3WHIPdKTkuA8AXgmlPvUpICJZUX68SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXAMJwWf82Grkw3Pm6sQz9mxnRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVhMDE2M2ItYTFkYy0z OWRhLWI3MDgtMTMwMmY1NGExYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1jHdeub8xR8XBbc/HguO0ofW5JYfl6RAxjIi4C164aHlHnD+RAes/o TVwepbATDp2gnWENPeKtEPktRj2pVXQaWCtrwoUowiIJ4ZuAA2EnqiHiL14uFgZw HMcQXPQyKnE7Un+fJTjPF5eHW0ZSkVTFLxNOZiTQgCOpINt8/jRaRZpby68MnWF1 eex8+15aNz1oYQJyS8F3Zfzvz1vAeWuE4QeOqVxbEN1RTbRYWoW/B62sMQQ+l737 cFfRYH8zrCBv8Abf6J6Dr8h1o7N7jCLHV2LXDvK6TLhSb2oMXsXsGpBz2KgDofts 31/g20JfoffNPpFgisZCy9kIFI6+8ns= -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:41 2025 by rpki-client