$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02c5492f-22fb-369e-a2d7-9b967c0d999e.roa File: 02c5492f-22fb-369e-a2d7-9b967c0d999e.roa (raw, json) Hash identifier: 0awDPQDdoInWXqi4Pmz+9wukM/asArEcws/1UsrBAQE= Subject key identifier: 3D:7C:3C:88:95:F8:DA:53:2E:2B:3A:69:E0:AE:D5:1B:AC:66:3E:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB074515EAAF9FE430900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02c5492f-22fb-369e-a2d7-9b967c0d999e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396610 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:74:51:5e:aa:f9:fe:43:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=75127a8a-e4b6-4124-b7cd-a281ee292ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:62:c5:e2:0a:f2:20:d5:93:19:cf:5a:6a:bc: 66:1a:17:9d:aa:b9:49:78:ed:39:fb:52:ed:06:93: 53:f4:34:4f:e7:47:4a:46:f7:e9:1a:f5:64:cc:37: 09:cc:7a:d3:80:99:cb:b4:da:e3:d2:88:9e:3a:01: 38:49:94:ee:c0:4e:ae:49:e4:85:16:df:35:5d:2d: 2f:d1:f4:d3:59:83:d5:6a:9b:4c:dc:64:88:54:17: f2:38:7b:d8:e4:ab:3c:ea:2a:fb:c3:c5:cb:36:6f: 42:3f:de:58:c3:aa:d8:ac:ea:af:17:ef:0d:29:71: 4a:09:1e:65:0e:8d:12:e6:81:cc:8d:ae:c8:ca:8a: f7:fb:df:6a:77:56:5d:a0:2f:ec:eb:71:3a:42:ba: 18:d1:d0:31:47:6d:28:f8:2f:f2:96:68:20:74:ef: 14:41:f5:85:34:8a:e2:93:8d:c6:d7:7c:78:2b:19: 31:dc:03:79:d9:e0:7b:ef:a7:5a:bf:d8:1d:1c:b8: 02:cb:79:ea:7b:fb:e9:fa:d8:ef:44:25:6e:42:89: 6f:51:28:79:d2:a7:ae:0a:fe:a8:ec:2a:2b:57:4d: 51:75:0d:d2:da:6c:f0:93:d1:b9:50:10:98:e5:d7: f9:50:73:2a:41:01:7a:0c:01:cd:6b:fc:b2:44:9e: cb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7C:3C:88:95:F8:DA:53:2E:2B:3A:69:E0:AE:D5:1B:AC:66:3E:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02c5492f-22fb-369e-a2d7-9b967c0d999e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b2:ff:36:f3:32:50:6a:46:51:ff:fa:05:2e:92:58:f9:c7: 43:13:7a:c0:9c:21:3e:ed:84:53:04:1a:8a:bd:9d:2c:8d:cd: e3:48:04:9c:5c:c7:62:b8:9d:3b:16:ae:ae:03:1c:c2:cd:7f: a1:26:8b:5b:c3:62:54:f4:82:36:f2:85:87:95:c6:56:47:9a: 5d:88:d1:cd:e6:c8:c4:7d:ac:3b:cd:f5:d5:1f:c2:78:ad:ee: 12:b0:82:57:75:03:87:90:ae:9b:91:33:85:c7:e5:74:13:c4: 2a:c8:35:c9:a7:c1:f1:40:19:ae:77:36:e3:e8:8f:06:f1:5a: 17:9e:ab:57:f5:ad:8f:cc:c3:98:03:41:57:ad:75:aa:f8:59: 73:ff:f7:f6:cf:83:b3:51:b8:ab:bd:c8:2e:4c:bf:51:4e:9c: 63:c7:60:fa:63:03:08:4b:4d:5a:fc:44:1d:0a:2a:e8:12:8e: 71:11:89:fa:08:48:9c:cf:c6:67:12:fc:62:0e:4b:e4:5a:d4: 98:5a:30:9a:e8:db:fb:8a:f5:50:92:cb:e8:aa:48:d5:07:24: 0e:ab:c1:d0:89:7f:be:3d:bb:f0:4b:e0:3f:28:01:46:a4:9a: b5:f6:87:9b:91:45:7f:4e:96:6e:57:9b:17:01:3f:a8:5c:03: 84:94:15:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLB0UV6q+f5DCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzUxMjdhOGEtZTRiNi00MTI0LWI3Y2QtYTI4MWVlMjkyZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2LF4gryINWTGc9aarxmGhedqrlJeO05+1Lt BpNT9DRP50dKRvfpGvVkzDcJzHrTgJnLtNrj0oieOgE4SZTuwE6uSeSFFt81XS0v 0fTTWYPVaptM3GSIVBfyOHvY5Ks86ir7w8XLNm9CP95Yw6rYrOqvF+8NKXFKCR5l Do0S5oHMja7Iyor3+99qd1ZdoC/s63E6QroY0dAxR20o+C/ylmggdO8UQfWFNIri k43G13x4Kxkx3AN52eB776dav9gdHLgCy3nqe/vp+tjvRCVuQolvUSh50qeuCv6o 7CorV01RdQ3S2mzwk9G5UBCY5df5UHMqQQF6DAHNa/yyRJ7LCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD18PIiV+NpTLis6aeCu1RusZj6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDJjNTQ5MmYtMjJmYi0z NjllLWEyZDctOWI5NjdjMGQ5OTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCy/zbzMlBqRlH/+gUuklj5x0MTesCcIT7thFMEGoq9nSyNzeNIBJxc x2K4nTsWrq4DHMLNf6Emi1vDYlT0gjbyhYeVxlZHml2I0c3myMR9rDvN9dUfwnit 7hKwgld1A4eQrpuRM4XH5XQTxCrINcmnwfFAGa53NuPojwbxWheeq1f1rY/Mw5gD QVetdar4WXP/9/bPg7NRuKu9yC5Mv1FOnGPHYPpjAwhLTVr8RB0KKugSjnERifoI SJzPxmcS/GIOS+Ra1JhaMJro2/uK9VCSy+iqSNUHJA6rwdCJf749u/BL4D8oAUak mrX2h5uRRX9Olm5XmxcBP6hcA4SUFWM= -----END CERTIFICATE-----Generated at Wed Oct 29 11:46:45 2025 by rpki-client