$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa File: f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa (raw, json) Hash identifier: BZki/0bt7+PUKYqxkhYDYy2Cu2A4j61dpGmqSMs4wrE= Subject key identifier: 95:0C:4F:B0:64:36:13:0C:85:F0:27:E0:35:76:A1:49:8C:E2:32:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E738A4D269C511BEEA4300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396609 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:38:a4:d2:69:c5:11:be:ea:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ec0e947b-6507-4992-b453-fe4918e58c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:04:ce:ec:72:02:fd:25:05:ee:66:49:d9: 7e:25:b5:7f:12:ee:51:21:74:fc:d0:e5:8b:cc:ff: a0:96:e1:d4:c6:21:65:e7:31:1f:0d:7b:11:44:49: ba:4a:d2:07:86:0e:0b:41:0c:a4:58:da:86:2d:c7: 4b:da:a2:31:4b:a7:45:f3:7f:2e:12:ce:2d:22:fa: 9a:33:f0:99:80:6a:04:23:8b:6a:99:fe:14:58:ce: 08:39:f3:40:77:5c:aa:9e:0c:6f:a9:2e:13:22:a1: c9:80:97:3f:9d:a0:2a:a9:5b:63:77:50:e4:e5:bc: 98:42:0e:16:ce:d1:79:59:68:7f:36:1d:46:a5:f0: 2f:e6:03:4c:0a:b8:1c:ad:a3:f0:f8:be:8d:93:85: 45:1c:a8:0f:fa:c5:de:7f:e9:a9:de:29:04:14:8f: 82:fa:d6:07:2a:35:86:3d:c6:37:2b:e4:a5:be:2f: 15:f8:69:1d:12:9c:8e:af:53:91:5c:d2:5a:eb:48: 36:aa:05:24:b2:bc:c4:da:1a:ab:c3:99:1d:bf:94: 19:ff:e2:61:f2:c8:d0:c4:96:be:ab:7e:b0:9f:bd: e6:88:d5:0d:b5:a8:4a:e3:a0:6d:4b:48:e5:5e:b2: e2:9f:10:d8:b9:73:f4:b8:02:5f:5d:5c:5f:d4:09: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0C:4F:B0:64:36:13:0C:85:F0:27:E0:35:76:A1:49:8C:E2:32:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f79e7ef1-73b1-34f1-9454-4a0c3034dd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b2:7d:c2:e8:10:85:15:b6:c4:43:34:40:f7:03:1a:06:59: 75:fd:b3:82:1f:c3:66:73:51:58:91:b0:a0:bf:16:37:e4:a5: a0:89:45:69:88:9a:75:a5:a7:bf:49:61:d8:4b:ec:32:ae:42: 81:08:2d:fc:19:54:fc:ca:67:d6:82:4c:5e:a4:02:9e:73:9a: cc:90:50:26:71:85:17:cb:e1:1a:54:b6:b1:45:ec:1f:4e:87: ba:03:24:8d:78:ea:8a:45:25:d7:26:9e:56:2b:1e:3d:2c:40: 5d:0c:8b:26:80:d7:a5:47:61:aa:8f:f5:29:5b:9d:05:e6:d9: 31:0b:22:c9:4d:c5:06:08:a3:0d:bf:2f:a0:68:12:e2:4b:0f: 53:ca:b5:37:be:d1:96:04:fb:37:c0:69:bb:22:6b:ab:1b:82: f5:64:13:9d:be:89:d2:39:60:af:cc:19:ca:c8:6e:ae:05:1b: de:1b:16:b9:ca:af:b3:26:de:49:ed:a8:78:7a:d3:90:f3:e0: 07:ce:76:61:6b:9f:bf:97:b4:0a:f6:0e:a8:bc:2e:56:4c:61: 00:98:1b:bb:81:88:b9:41:df:d2:5a:03:7f:2d:32:24:17:d2: 73:38:85:01:ef:b4:bd:18:a0:7f:7d:50:ad:e3:6a:03:c4:45: b6:02:45:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zik0mnFEb7qQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWMwZTk0N2ItNjUwNy00OTkyLWI0NTMtZmU0OTE4ZTU4YzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ8EzuxyAv0lBe5mSdl+JbV/Eu5RIXT80OWL zP+gluHUxiFl5zEfDXsRREm6StIHhg4LQQykWNqGLcdL2qIxS6dF838uEs4tIvqa M/CZgGoEI4tqmf4UWM4IOfNAd1yqngxvqS4TIqHJgJc/naAqqVtjd1Dk5byYQg4W ztF5WWh/Nh1GpfAv5gNMCrgcraPw+L6Nk4VFHKgP+sXef+mp3ikEFI+C+tYHKjWG PcY3K+Slvi8V+GkdEpyOr1ORXNJa60g2qgUksrzE2hqrw5kdv5QZ/+Jh8sjQxJa+ q36wn73miNUNtahK46BtS0jlXrLinxDYuXP0uAJfXVxf1AnomwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJUMT7BkNhMMhfAn4DV2oUmM4jJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjc5ZTdlZjEtNzNiMS0z NGYxLTk0NTQtNGEwYzMwMzRkZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDsn3C6BCFFbbEQzRA9wMaBll1/bOCH8Nmc1FYkbCgvxY35KWgiUVp iJp1pae/SWHYS+wyrkKBCC38GVT8ymfWgkxepAKec5rMkFAmcYUXy+EaVLaxRewf Toe6AySNeOqKRSXXJp5WKx49LEBdDIsmgNelR2Gqj/UpW50F5tkxCyLJTcUGCKMN vy+gaBLiSw9TyrU3vtGWBPs3wGm7ImurG4L1ZBOdvonSOWCvzBnKyG6uBRveGxa5 yq+zJt5J7ah4etOQ8+AHznZha5+/l7QK9g6ovC5WTGEAmBu7gYi5Qd/SWgN/LTIk F9JzOIUB77S9GKB/fVCt42oDxEW2AkXR -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:05 2025 by rpki-client