$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa File: e08fe6be-b7cf-3298-b47d-d5cae020135e.roa (raw, json) Hash identifier: ElocGcM5BZTC3XcWgGL9UYxDYcysEdmDjXlbu5+FlZw= Subject key identifier: FA:B4:B5:EF:0D:4B:F3:1A:D7:D9:3B:E8:BB:CC:0A:50:16:06:B1:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73337E97B316ECE2BCEEC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396576 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:37:e9:7b:31:6e:ce:2b:ce:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d63057e0-eea8-48f1-9145-0c955de8b9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:59:45:e1:73:84:e0:45:6a:1a:76:81:3b: c9:78:dc:9a:dc:a9:53:06:52:6c:c6:f2:b3:0a:c2: fb:2b:b8:dd:b5:eb:1b:c0:b3:e4:27:50:53:72:74: 4c:71:10:66:91:5f:11:1e:2e:92:ee:b4:c7:84:48: db:dc:9e:a3:46:b7:67:4f:4b:9c:65:0e:14:51:0f: 6b:24:6d:22:90:9d:4c:08:bc:b7:f5:cf:75:db:01: 62:e9:f7:29:36:b2:4e:08:22:ec:0b:88:0d:20:2d: 57:d0:b9:63:8e:95:ee:08:ff:71:7d:fd:c7:7d:89: fc:11:f5:49:db:a8:ca:0e:6e:28:4a:b3:77:2c:ef: 23:da:69:6a:2a:3a:95:24:a0:bb:05:96:b5:6d:b8: b6:23:83:75:84:9d:e0:f1:6b:56:c5:68:18:34:50: 0a:73:10:d6:3b:d3:be:fa:87:56:24:1d:1f:d4:35: 2b:c0:fd:a2:45:45:83:06:f1:ec:f8:61:3b:b0:92: d4:ec:a7:3e:63:1b:62:04:4f:02:05:16:58:9b:77: 00:00:7d:be:b7:3b:26:d2:b9:5e:91:9a:bc:01:f9: 0e:ad:2b:3b:04:f5:62:86:e6:92:f7:e7:08:6f:6b: 23:69:66:e4:0b:25:11:8d:ca:ec:bd:37:34:2a:45: f7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:B5:EF:0D:4B:F3:1A:D7:D9:3B:E8:BB:CC:0A:50:16:06:B1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e08fe6be-b7cf-3298-b47d-d5cae020135e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:c1:29:9c:71:36:9e:2f:fc:b0:ae:05:5d:bc:ac:ba:aa: eb:ed:ad:2b:a7:40:6c:dd:07:3f:ef:03:9a:bd:15:e4:71:d5: cc:a9:57:51:4d:a0:a7:be:0b:1f:c9:8f:c7:0e:9e:f0:3a:6e: 0d:b9:bd:47:d6:81:94:da:57:b4:77:cb:dc:22:33:66:a7:66: 21:e2:9a:09:ca:f5:ab:1c:a3:df:ba:94:7b:71:90:c3:c2:e8: fc:94:e9:68:11:ae:69:f4:0e:f2:01:27:55:a6:8f:73:7a:37: cb:4f:20:aa:82:23:8b:46:0f:91:e1:de:af:7e:31:a2:e4:37: 31:36:ad:9e:17:c8:e4:32:15:72:a0:26:9b:54:46:cb:48:15: ad:c9:e3:7d:a4:fc:79:4a:42:81:10:b4:83:aa:d8:69:8c:2a: 98:d3:80:65:7d:2e:26:90:26:c2:1c:8e:59:83:7c:87:cd:5e: f8:64:7b:91:03:3c:0b:2f:c3:93:0d:e0:e0:52:03:80:2d:98: f1:8b:72:a3:19:30:83:4f:86:09:2c:c7:ed:c1:11:e5:41:69: 6a:f3:83:f3:e2:f5:b2:cb:1b:36:42:6e:56:1b:33:d4:9c:f4: e8:d0:25:50:0b:35:52:95:7e:42:c9:e9:cb:48:2c:4d:9e:7f: fb:61:a2:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zM36Xsxbs4rzuwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDYzMDU3ZTAtZWVhOC00OGYxLTkxNDUtMGM5NTVkZThiOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT1ZReFzhOBFahp2gTvJeNya3KlTBlJsxvKz CsL7K7jdtesbwLPkJ1BTcnRMcRBmkV8RHi6S7rTHhEjb3J6jRrdnT0ucZQ4UUQ9r JG0ikJ1MCLy39c912wFi6fcpNrJOCCLsC4gNIC1X0LljjpXuCP9xff3HfYn8EfVJ 26jKDm4oSrN3LO8j2mlqKjqVJKC7BZa1bbi2I4N1hJ3g8WtWxWgYNFAKcxDWO9O+ +odWJB0f1DUrwP2iRUWDBvHs+GE7sJLU7Kc+YxtiBE8CBRZYm3cAAH2+tzsm0rle kZq8AfkOrSs7BPVihuaS9+cIb2sjaWbkCyURjcrsvTc0KkX3pwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPq0te8NS/Ma19k76LvMClAWBrHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTA4ZmU2YmUtYjdjZi0z Mjk4LWI0N2QtZDVjYWUwMjAxMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAd9cEpnHE2ni/8sK4FXbysuqrr7a0rp0Bs3Qc/7wOavRXkcdXMqVdR TaCnvgsfyY/HDp7wOm4Nub1H1oGU2le0d8vcIjNmp2Yh4poJyvWrHKPfupR7cZDD wuj8lOloEa5p9A7yASdVpo9zejfLTyCqgiOLRg+R4d6vfjGi5DcxNq2eF8jkMhVy oCabVEbLSBWtyeN9pPx5SkKBELSDqthpjCqY04BlfS4mkCbCHI5Zg3yHzV74ZHuR AzwLL8OTDeDgUgOALZjxi3KjGTCDT4YJLMftwRHlQWlq84Pz4vWyyxs2Qm5WGzPU nPTo0CVQCzVSlX5CyenLSCxNnn/7YaLy -----END CERTIFICATE-----Generated at Mon Oct 20 10:24:17 2025 by rpki-client