$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9c0e1c3-2345-32b4-8de7-67d778ec11e6.roa File: e9c0e1c3-2345-32b4-8de7-67d778ec11e6.roa (raw, json) Hash identifier: N7TTsqprwZGA9/ljp6ztK+rtyoglvcrQy15qwOi/Rx8= Subject key identifier: F8:17:60:F1:F0:4F:A7:2C:08:A8:31:AE:4C:CA:58:A4:A1:E6:D1:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E32976D50EDDC41F010 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9c0e1c3-2345-32b4-8de7-67d778ec11e6.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396552 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:32:97:6d:50:ed:dc:41:f0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=8157f006-1fe8-4d61-80ee-420893345c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:0f:d6:20:69:cb:bf:e7:8d:05:16:bb:ce: 67:0f:c3:9b:0a:52:8b:29:25:86:3e:ef:a8:b5:f9: 92:6f:bf:b7:ae:e9:65:2e:c8:20:cd:97:f8:d4:11: ce:95:cf:41:cb:55:c4:54:c9:33:44:80:36:ca:8f: 06:16:ab:21:af:93:8b:d6:45:25:2f:eb:8b:e8:cf: eb:1e:64:73:3e:59:2e:c9:94:d9:01:ac:25:83:93: 87:9f:f5:68:65:17:7d:82:0e:9c:8d:91:7e:d9:63: af:3f:dd:6c:4d:69:65:a2:45:d9:39:0b:be:6f:81: f1:46:fa:28:29:f8:1b:26:fc:63:00:a8:ca:bd:5a: a8:0b:c1:55:d3:fb:bb:09:f3:b3:48:83:ea:23:cd: 0c:b2:51:6b:b9:a9:14:f8:de:e3:ad:8e:18:67:98: 8b:33:0a:75:46:0a:a5:f0:0d:6d:8d:e2:90:de:01: 70:98:3e:55:b9:ca:5b:39:92:5b:c7:ad:ce:a3:3d: 89:42:64:d7:25:af:ad:b3:52:a1:44:1e:e7:67:dc: 51:c7:22:b3:7f:fc:69:70:17:ba:0b:dc:1e:85:03: af:c0:0a:ae:b9:0f:ae:da:c1:97:f4:d0:11:9d:d3: 40:68:db:e1:01:14:5e:a8:59:64:61:e1:e4:1a:e6: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:17:60:F1:F0:4F:A7:2C:08:A8:31:AE:4C:CA:58:A4:A1:E6:D1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9c0e1c3-2345-32b4-8de7-67d778ec11e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:75:8c:71:c5:44:9c:eb:12:af:64:de:3f:02:a0:b9:17:87: 3d:66:d4:ea:93:a5:ab:9c:df:ed:d7:40:5e:d6:73:e4:29:be: e3:55:b5:d1:4f:de:b9:da:3e:22:dd:b8:52:c3:62:16:b9:f2: 01:48:d6:05:60:aa:30:22:17:d8:67:1b:6c:f6:f0:0f:38:15: c5:c0:56:ff:1f:7f:61:5c:2c:a0:79:6e:20:a0:d7:ca:39:c6: c0:92:ad:1c:62:36:71:2b:ef:d7:50:60:05:61:91:2e:34:92: 82:bc:9e:db:2b:bd:00:ad:75:56:d0:13:c7:c3:fd:e6:3b:11: ee:a4:07:f6:c4:2f:03:a5:c3:ff:88:23:4c:41:8c:a5:54:dd: dc:bf:e8:66:b3:5b:c4:46:98:85:fc:d9:68:63:54:9d:09:77: 39:26:e2:04:80:e4:2e:9f:a5:84:41:54:35:94:3b:3d:fc:0a: 31:45:37:95:b3:95:4e:7e:c2:71:0c:49:08:2f:21:b4:71:cf: 55:5b:8d:87:88:82:20:55:8a:cf:19:e0:11:4f:00:3d:53:68: be:0a:17:98:01:80:b7:7a:9d:07:06:4a:f4:ff:3e:f9:11:e3: 7c:3b:5d:e8:a7:dd:0c:f4:41:02:24:d7:36:37:cb:92:18:41: 67:f1:d2:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y4yl21Q7dxB8BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODE1N2YwMDYtMWZlOC00ZDYxLTgwZWUtNDIwODkzMzQ1YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaAP1iBpy7/njQUWu85nD8ObClKLKSWGPu+o tfmSb7+3rullLsggzZf41BHOlc9By1XEVMkzRIA2yo8GFqshr5OL1kUlL+uL6M/r HmRzPlkuyZTZAawlg5OHn/VoZRd9gg6cjZF+2WOvP91sTWllokXZOQu+b4HxRvoo KfgbJvxjAKjKvVqoC8FV0/u7CfOzSIPqI80MslFruakU+N7jrY4YZ5iLMwp1Rgql 8A1tjeKQ3gFwmD5VucpbOZJbx63Ooz2JQmTXJa+ts1KhRB7nZ9xRxyKzf/xpcBe6 C9wehQOvwAquuQ+u2sGX9NARndNAaNvhARReqFlkYeHkGua0qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPgXYPHwT6csCKgxrkzKWKSh5tGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTljMGUxYzMtMjM0NS0z MmI0LThkZTctNjdkNzc4ZWMxMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfdYxxxUSc6xKvZN4/AqC5F4c9ZtTqk6WrnN/t10Be1nPkKb7jVbXR T9652j4i3bhSw2IWufIBSNYFYKowIhfYZxts9vAPOBXFwFb/H39hXCygeW4goNfK OcbAkq0cYjZxK+/XUGAFYZEuNJKCvJ7bK70ArXVW0BPHw/3mOxHupAf2xC8DpcP/ iCNMQYylVN3cv+hms1vERpiF/NloY1SdCXc5JuIEgOQun6WEQVQ1lDs9/AoxRTeV s5VOfsJxDEkILyG0cc9VW42HiIIgVYrPGeARTwA9U2i+CheYAYC3ep0HBkr0/z75 EeN8O13op90M9EECJNc2N8uSGEFn8dJg -----END CERTIFICATE-----Generated at Mon Oct 20 20:57:20 2025 by rpki-client