$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa File: e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa (raw, json) Hash identifier: lzGkiANCantsNdmOvXqaUgW5Or3gCDsWWJExVy9Z9cU= Subject key identifier: 00:C6:A3:A4:94:9E:17:D7:08:A1:21:A3:EA:BA:EA:25:AF:CB:86:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB22A4FB5014504BA5740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20431 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:2a:4f:b5:01:45:04:ba:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=da7639e9-6798-4f3c-92f5-6bcb6068fcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:9c:37:31:24:ba:1f:5f:8d:ef:6d:b2:ca: c4:8f:1b:14:3e:e5:ef:76:f7:1d:69:0e:74:f0:c2: f1:57:20:e4:eb:db:e5:4d:98:cf:3a:8f:6d:d4:ca: 5e:22:df:36:33:3c:eb:ec:94:c6:67:d7:c3:2e:4c: f7:15:e9:d5:cd:72:42:2b:d2:a0:59:b4:18:da:ab: 34:13:8d:d1:33:fe:ba:e0:2f:1c:a0:c4:42:37:2c: 9e:08:16:70:63:c3:7d:d8:04:c8:e9:af:3d:c0:92: c5:df:1e:4f:19:df:e2:86:a9:e9:18:ec:07:79:21: cb:6d:aa:df:c6:1a:27:e5:de:f7:75:61:eb:66:df: d7:d0:68:c7:be:91:20:26:23:83:06:0e:a9:23:fb: 49:ce:79:75:24:c3:c0:9b:46:d8:93:ae:04:a9:5f: 82:ae:97:af:4e:d4:be:16:d1:21:5f:eb:95:ec:3c: 7d:a6:6a:0c:f9:46:8d:d0:09:d0:31:48:d5:46:15: 5f:3c:de:03:c8:34:68:81:61:60:c3:4a:b1:4e:0f: af:9b:6b:d3:c3:94:a6:93:00:c5:ec:8b:65:a1:53: 02:93:c6:02:11:46:9a:25:3f:85:34:af:ef:5e:bb: cf:bf:c3:97:19:99:eb:f4:f4:f8:24:49:a9:04:2a: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C6:A3:A4:94:9E:17:D7:08:A1:21:A3:EA:BA:EA:25:AF:CB:86:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e1a7d0ab-8e5e-36b5-9842-d0f173f53be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:cc:6f:14:e3:c0:84:29:5c:e3:7c:11:93:2c:56:9f:9c: 94:7d:83:31:a6:0f:44:96:22:39:e6:9c:81:e5:30:20:fe:92: 40:21:fd:7b:e2:0d:49:b7:50:f2:10:b9:33:1d:b4:e3:78:75: a6:a2:61:5c:9d:61:9a:76:f4:f0:56:66:b6:0b:a5:46:ba:fc: 8b:c1:a3:f0:51:15:4f:ac:c5:5b:36:cf:77:70:0e:2f:70:ef: e0:af:2e:1e:97:27:4d:c2:ab:c4:fc:6a:41:d3:63:1e:ad:97: d8:2f:70:a7:10:b0:27:8d:49:85:21:f0:0f:bf:43:73:03:75: 79:a0:b4:71:ec:e0:8e:f7:59:07:cf:3c:0a:15:a1:b1:ed:26: 57:f1:ed:c4:fc:cc:64:b1:ab:f6:74:51:bf:ea:52:07:7f:59: d7:63:4f:42:ef:c0:b9:91:b9:36:63:61:fe:e6:ea:28:f3:11: 2e:18:0a:43:78:68:3d:92:65:08:25:19:15:a3:4c:4c:af:49: 1f:0c:44:18:57:5b:d7:a4:67:50:c2:14:9a:ef:fd:12:6a:09: 51:b6:43:94:eb:8b:0c:18:de:48:20:e6:e2:37:10:f5:be:a1: fb:3f:af:ce:39:fc:8f:76:a5:9f:46:d8:89:19:66:94:fe:4e: fe:90:3c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLIqT7UBRQS6V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGE3NjM5ZTktNjc5OC00ZjNjLTkyZjUtNmJjYjYwNjhmY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKOcNzEkuh9fje9tssrEjxsUPuXvdvcdaQ50 8MLxVyDk69vlTZjPOo9t1MpeIt82Mzzr7JTGZ9fDLkz3FenVzXJCK9KgWbQY2qs0 E43RM/664C8coMRCNyyeCBZwY8N92ATI6a89wJLF3x5PGd/ihqnpGOwHeSHLbarf xhon5d73dWHrZt/X0GjHvpEgJiODBg6pI/tJznl1JMPAm0bYk64EqV+CrpevTtS+ FtEhX+uV7Dx9pmoM+UaN0AnQMUjVRhVfPN4DyDRogWFgw0qxTg+vm2vTw5SmkwDF 7ItloVMCk8YCEUaaJT+FNK/vXrvPv8OXGZnr9PT4JEmpBCqZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADGo6SUnhfXCKEho+q66iWvy4blMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTFhN2QwYWItOGU1ZS0z NmI1LTk4NDItZDBmMTczZjUzYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUzG8U48CEKVzjfBGTLFafnJR9gzGmD0SWIjnmnIHlMCD+kkAh/Xvi DUm3UPIQuTMdtON4daaiYVydYZp29PBWZrYLpUa6/IvBo/BRFU+sxVs2z3dwDi9w 7+CvLh6XJ03Cq8T8akHTYx6tl9gvcKcQsCeNSYUh8A+/Q3MDdXmgtHHs4I73WQfP PAoVobHtJlfx7cT8zGSxq/Z0Ub/qUgd/WddjT0LvwLmRuTZjYf7m6ijzES4YCkN4 aD2SZQglGRWjTEyvSR8MRBhXW9ekZ1DCFJrv/RJqCVG2Q5TriwwY3kgg5uI3EPW+ ofs/r845/I92pZ9G2IkZZpT+Tv6QPIg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:07:20 2025 by rpki-client