$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa File: f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa (raw, json) Hash identifier: /o1iM+eiJgMkYwXdRd0z8lYHDN3vKPdK669W8JhI26o= Subject key identifier: D7:04:9E:5C:F4:3D:BE:C4:85:E8:2D:B9:FC:EF:86:F0:B7:15:D3:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAE2B5CEC045F18691700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396572 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ae:2b:5c:ec:04:5f:18:69:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=a8919328-ae40-4e57-9a9c-d67f91f572f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:a4:a9:b1:8c:ba:98:73:96:8b:5f:6c:e6: 5b:b7:04:f4:07:c9:a8:38:83:e3:1a:e1:d7:69:6e: 42:96:aa:7d:11:87:bc:12:7f:f5:e5:90:c6:0e:1c: 6a:0b:73:2b:dd:ee:62:41:b5:a8:de:9d:a2:e9:3a: 10:d4:24:fe:54:ae:dc:23:d1:76:ec:5f:4a:44:c5: c9:9f:b5:35:91:35:60:62:e7:3e:83:47:f2:84:87: 22:6b:8f:d5:eb:c6:d8:30:a7:b1:08:30:64:a4:55: 1e:f0:d8:f2:3d:f4:95:0b:f6:61:e9:bc:42:9f:99: ac:af:d0:8a:0a:c1:00:d2:cb:f7:2d:f5:00:c2:0b: 9f:ee:ff:16:41:80:28:75:9d:0d:57:b1:07:ea:df: 9a:75:01:3c:43:ad:d2:a2:b8:47:ab:68:65:c7:41: d6:cd:09:5f:31:62:2f:0b:79:6a:fc:ca:71:45:1e: e6:05:34:e3:44:af:85:80:2b:79:89:1f:a2:aa:72: c4:8a:d8:5c:51:c2:10:b6:d6:9e:ac:47:8f:fe:49: 00:4b:6b:2f:da:93:1a:58:9d:04:f6:69:c5:6e:78: c1:97:08:8c:d1:24:cd:d6:6d:52:40:15:ed:82:0d: 8c:31:a1:c7:c0:23:34:21:dc:29:d1:e7:e8:15:30: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:9E:5C:F4:3D:BE:C4:85:E8:2D:B9:FC:EF:86:F0:B7:15:D3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7e514f0-bc85-39e3-9e73-11ebba7a6491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1c:7a:61:79:e3:b2:ec:42:19:0a:89:8b:d9:25:ce:64:52: 9e:c9:3c:10:55:8a:8d:16:91:55:3b:99:3d:9b:fb:fa:f4:94: fb:b1:84:ac:2c:81:f2:03:96:6c:58:ae:b8:ba:fe:45:3f:7e: 4e:29:2c:88:05:21:99:20:a9:bf:29:a9:27:15:c3:7b:4f:8c: 7a:84:50:e5:8e:fa:b7:7a:f2:27:cb:e9:5f:e5:36:86:42:6f: 7b:49:79:bd:9e:be:12:de:3e:42:69:06:e6:c0:f0:75:49:df: 14:bb:b4:b7:dd:31:f4:12:33:35:7a:e6:be:09:54:d9:02:ef: 4e:a8:80:f0:1b:60:5b:df:c5:cb:55:9d:9d:11:68:c1:21:84: b9:2d:7c:bb:b8:5a:91:2a:80:5d:e9:a5:82:5d:9f:93:ce:ce: 16:f0:02:75:51:e5:36:8e:75:da:d2:f6:2c:5b:d2:50:ac:b8: 30:d0:06:b8:50:b6:06:09:70:c7:b9:06:6b:67:03:3d:90:aa: 0f:b2:37:71:4f:98:d1:aa:bf:3f:ed:94:62:b8:90:9b:7e:36: 1f:15:4c:50:fd:98:33:f9:79:41:3b:bb:3f:29:fd:58:88:64: 8b:ee:64:e7:9e:10:96:1e:0f:8e:7c:39:11:77:22:26:76:23: e5:8a:4b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK4rXOwEXxhpFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTg5MTkzMjgtYWU0MC00ZTU3LTlhOWMtZDY3ZjkxZjU3MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOCkqbGMuphzlotfbOZbtwT0B8moOIPjGuHX aW5Clqp9EYe8En/15ZDGDhxqC3Mr3e5iQbWo3p2i6ToQ1CT+VK7cI9F27F9KRMXJ n7U1kTVgYuc+g0fyhIcia4/V68bYMKexCDBkpFUe8NjyPfSVC/Zh6bxCn5msr9CK CsEA0sv3LfUAwguf7v8WQYAodZ0NV7EH6t+adQE8Q63SorhHq2hlx0HWzQlfMWIv C3lq/MpxRR7mBTTjRK+FgCt5iR+iqnLEithcUcIQttaerEeP/kkAS2sv2pMaWJ0E 9mnFbnjBlwiM0STN1m1SQBXtgg2MMaHHwCM0Idwp0efoFTBLLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcEnlz0Pb7EhegtufzvhvC3FdNqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdlNTE0ZjAtYmM4NS0z OWUzLTllNzMtMTFlYmJhN2E2NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIscemF547LsQhkKiYvZJc5kUp7JPBBVio0WkVU7mT2b+/r0lPuxhKws gfIDlmxYrri6/kU/fk4pLIgFIZkgqb8pqScVw3tPjHqEUOWO+rd68ifL6V/lNoZC b3tJeb2evhLePkJpBubA8HVJ3xS7tLfdMfQSMzV65r4JVNkC706ogPAbYFvfxctV nZ0RaMEhhLktfLu4WpEqgF3ppYJdn5POzhbwAnVR5TaOddrS9ixb0lCsuDDQBrhQ tgYJcMe5BmtnAz2Qqg+yN3FPmNGqvz/tlGK4kJt+Nh8VTFD9mDP5eUE7uz8p/ViI ZIvuZOeeEJYeD458ORF3IiZ2I+WKS8o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:26:04 2025 by rpki-client