$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa File: e9d29a66-129c-3106-a027-48db35daf422.roa (raw, json) Hash identifier: cLzWAgR/RlC7LgG7FgdqYVGV9bj9reJgEGduoDD0fS4= Subject key identifier: 61:19:B8:E4:C2:79:9F:12:3D:DA:E7:8B:78:BA:3B:0B:10:44:05:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAEB965DE826A30EA7740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396597 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ae:b9:65:de:82:6a:30:ea:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=adea3b20-4dcb-4818-895d-7aa8b55fcf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8b:94:d1:cb:bb:16:20:60:51:94:9c:c9:a8: 8a:d0:0a:56:be:1a:14:68:b3:ff:f2:75:58:b6:48: f8:c1:d5:d7:42:11:38:bc:84:5c:ea:3c:8d:7d:94: 12:a6:0b:78:5d:93:10:b2:ee:c4:2a:ad:ac:a4:fc: 3d:c9:52:f9:1d:04:28:79:5e:59:9a:20:07:b6:79: 1e:48:99:df:ce:89:b8:25:41:9e:ce:a4:14:cc:79: 95:a8:d8:c5:2d:8a:e2:23:de:42:8e:69:f4:a1:9d: a9:a3:d9:0d:05:8d:5a:40:98:28:8c:58:d0:45:e6: c6:36:5a:a2:c5:de:be:c0:7a:0e:7f:e2:cd:f0:91: e3:1d:5d:f6:c8:fc:15:44:90:be:84:28:65:ef:14: 65:be:81:9d:e1:af:d6:99:0b:d1:18:f7:f8:16:41: 75:31:f1:88:22:9f:e4:75:ad:46:b6:c3:70:99:43: fc:13:ff:89:81:53:eb:47:e3:9d:10:fb:25:eb:df: d4:08:6a:06:52:66:a7:8b:ad:66:de:44:05:f5:5f: cc:c4:e8:a6:0b:0d:25:99:3b:fc:d7:41:07:40:92: 65:a7:f2:e6:75:51:ff:cd:32:19:97:5a:e5:b5:c5: 44:82:7c:b6:c9:e5:69:19:0a:00:65:d6:dc:34:66: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:19:B8:E4:C2:79:9F:12:3D:DA:E7:8B:78:BA:3B:0B:10:44:05:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e9d29a66-129c-3106-a027-48db35daf422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b6:64:4e:7f:96:44:75:6e:f4:45:12:9a:02:42:60:5b:23: 90:45:96:3d:a2:78:c6:8e:fb:64:e8:a3:09:84:17:cb:98:1d: c0:dc:0c:80:00:dd:81:71:13:09:27:9b:f8:c4:36:b8:98:f2: 20:8c:f6:f4:3b:0a:0d:4c:47:18:d8:e4:9b:31:89:35:7b:90: 60:5c:66:5b:0e:5c:04:7b:e2:f9:5f:ef:48:bf:c7:4a:ce:74: 39:9b:ae:16:54:5b:dc:9f:f3:b5:ec:dd:74:58:ea:b6:37:1b: 4e:af:5e:50:58:38:30:42:7f:e3:8b:5d:ce:45:b7:05:3f:9e: bc:3e:90:e7:bd:11:89:e3:b8:35:e7:da:95:a7:d6:8f:22:27: 77:6d:b4:08:20:d9:96:cf:82:01:f7:dc:46:59:2a:07:f7:df: 4f:16:43:cd:25:fb:04:e1:be:fa:91:4a:0c:5c:b0:88:dc:fb: 47:ef:95:fe:a7:5a:f7:c0:42:7f:97:1d:f4:7b:9a:23:c0:f8: 38:bc:96:c8:3e:bb:8e:86:98:15:43:d5:62:f8:a5:9d:de:1c: 64:01:31:3e:d4:69:d2:24:e2:ae:ea:3c:df:67:7a:67:3f:65: 2b:47:ca:23:c0:e8:1c:71:93:24:9b:8c:4d:9c:45:36:99:8d: 28:95:e9:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK65Zd6CajDqd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWRlYTNiMjAtNGRjYi00ODE4LTg5NWQtN2FhOGI1NWZjZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmouU0cu7FiBgUZScyaiK0ApWvhoUaLP/8nVY tkj4wdXXQhE4vIRc6jyNfZQSpgt4XZMQsu7EKq2spPw9yVL5HQQoeV5ZmiAHtnke SJnfzom4JUGezqQUzHmVqNjFLYriI95Cjmn0oZ2po9kNBY1aQJgojFjQRebGNlqi xd6+wHoOf+LN8JHjHV32yPwVRJC+hChl7xRlvoGd4a/WmQvRGPf4FkF1MfGIIp/k da1GtsNwmUP8E/+JgVPrR+OdEPsl69/UCGoGUmani61m3kQF9V/MxOimCw0lmTv8 10EHQJJlp/LmdVH/zTIZl1rltcVEgny2yeVpGQoAZdbcNGYxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEZuOTCeZ8SPdrni3i6OwsQRAWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTlkMjlhNjYtMTI5Yy0z MTA2LWEwMjctNDhkYjM1ZGFmNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS2ZE5/lkR1bvRFEpoCQmBbI5BFlj2ieMaO+2ToowmEF8uYHcDcDIAA 3YFxEwknm/jENriY8iCM9vQ7Cg1MRxjY5JsxiTV7kGBcZlsOXAR74vlf70i/x0rO dDmbrhZUW9yf87Xs3XRY6rY3G06vXlBYODBCf+OLXc5FtwU/nrw+kOe9EYnjuDXn 2pWn1o8iJ3dttAgg2ZbPggH33EZZKgf3308WQ80l+wThvvqRSgxcsIjc+0fvlf6n WvfAQn+XHfR7miPA+Di8lsg+u46GmBVD1WL4pZ3eHGQBMT7UadIk4q7qPN9nemc/ ZStHyiPA6BxxkySbjE2cRTaZjSiV6ZY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:12 2025 by rpki-client