$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa File: 09447d8b-5279-3ff9-bc90-e46a1f94d759.roa (raw, json) Hash identifier: yXhWIpPF5K+LGzOoht6o/QP7WSlnI84VSrndF6JHLZs= Subject key identifier: 4C:A4:31:CE:F2:CD:A1:E0:69:FD:3E:AF:57:43:2C:DD:BB:24:13:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3C1F621CA1111280DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396611 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:c1:f6:21:ca:11:11:28:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0931d0ee-4dad-45da-a5bc-0471abb8e20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:4f:f8:3d:d1:42:e4:eb:56:fd:5a:5f:4b: 0e:b2:86:54:de:87:bb:07:c1:95:ad:f8:e4:56:e8: 59:1d:e8:71:a7:04:89:1f:fc:d4:a9:ea:38:5c:b0: e8:4d:75:e6:26:b1:f3:7e:dd:4a:54:25:50:37:bf: 4c:97:d2:70:fe:55:7c:e6:7b:aa:71:59:8f:7d:d1: ff:3c:b2:2f:6f:5a:82:ab:83:55:1e:3c:05:69:59: c4:4e:55:ac:d6:9c:c5:16:d2:45:b6:01:5e:ab:c6: da:07:e4:d0:91:62:8a:fa:32:de:15:7c:73:b8:aa: 3a:20:8b:24:63:d8:db:5c:d6:92:9f:69:82:b2:4e: d0:28:8e:3a:0c:fd:46:e1:6f:12:69:ea:da:a5:19: ad:31:1c:8c:69:73:c4:92:02:8a:70:76:f6:b6:dc: 7e:cc:71:2c:5a:cb:13:b3:85:13:34:95:e7:18:a3: ec:8b:b8:3f:0c:e0:c7:67:4b:ea:4c:36:c2:81:18: 4c:14:2c:dd:ed:c9:31:82:bb:23:b3:f9:de:21:68: 95:92:93:91:99:eb:5b:c7:4a:9d:87:10:38:c1:66: 1c:14:2d:b5:d8:81:fb:1e:16:a9:a9:44:b9:e0:c1: db:e1:16:ce:7d:cc:9a:a6:17:bd:db:86:44:4a:4d: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A4:31:CE:F2:CD:A1:E0:69:FD:3E:AF:57:43:2C:DD:BB:24:13:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:21:0e:de:78:4d:16:0b:6d:fd:39:ed:45:38:5e:51:d5: 2a:5f:46:f0:35:b4:4b:a0:3e:f2:e5:f9:82:93:0e:a8:cb:02: 37:00:04:39:96:88:30:41:14:c0:7b:34:8f:97:02:fe:30:be: 0d:4b:12:2d:4a:d5:03:f4:2b:a9:ee:f6:d3:12:4d:f9:e4:73: 70:da:1b:a7:b2:01:dd:7a:6c:0e:06:4a:03:53:68:b0:0b:3c: 41:1a:f2:c6:6f:27:b7:88:ab:58:a2:68:d8:71:b4:8f:f3:b2: ab:cc:a2:ef:d1:a2:7e:ff:f4:06:88:b7:bb:db:2e:ef:79:22: 63:f4:95:dd:36:63:04:ff:f6:a7:11:87:79:d4:9e:1b:83:24: 17:3f:dc:05:0a:2a:fd:24:f5:42:20:9f:e8:2c:49:df:ff:f8: 46:01:5d:dc:96:b0:21:41:52:71:0b:c4:22:57:cf:f9:54:06: d2:be:ec:14:07:a9:e7:54:ce:46:83:37:f5:83:af:0c:7b:6c: 1f:06:7b:ab:c4:eb:b4:53:7b:39:ac:b9:3c:6b:a9:d1:d4:a5: 3f:58:cc:2a:66:94:29:20:0d:03:ce:da:a3:fa:50:34:bd:4b: 86:25:c7:27:fe:6c:c0:8e:3b:a8:bd:bf:96:27:10:ef:43:ae: cf:e2:a3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLPB9iHKEREoDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDkzMWQwZWUtNGRhZC00NWRhLWE1YmMtMDQ3MWFiYjhlMjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvVP+D3RQuTrVv1aX0sOsoZU3oe7B8GVrfjk VuhZHehxpwSJH/zUqeo4XLDoTXXmJrHzft1KVCVQN79Ml9Jw/lV85nuqcVmPfdH/ PLIvb1qCq4NVHjwFaVnETlWs1pzFFtJFtgFeq8baB+TQkWKK+jLeFXxzuKo6IIsk Y9jbXNaSn2mCsk7QKI46DP1G4W8SaerapRmtMRyMaXPEkgKKcHb2ttx+zHEsWssT s4UTNJXnGKPsi7g/DODHZ0vqTDbCgRhMFCzd7ckxgrsjs/neIWiVkpORmetbx0qd hxA4wWYcFC212IH7HhapqUS54MHb4RbOfcyaphe924ZESk1yDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEykMc7yzaHgaf0+r1dDLN27JBNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk0NDdkOGItNTI3OS0z ZmY5LWJjOTAtZTQ2YTFmOTRkNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCAIQ7eeE0WC239Oe1FOF5R1SpfRvA1tEugPvLl+YKTDqjLAjcABDmW iDBBFMB7NI+XAv4wvg1LEi1K1QP0K6nu9tMSTfnkc3DaG6eyAd16bA4GSgNTaLAL PEEa8sZvJ7eIq1iiaNhxtI/zsqvMou/Ron7/9AaIt7vbLu95ImP0ld02YwT/9qcR h3nUnhuDJBc/3AUKKv0k9UIgn+gsSd//+EYBXdyWsCFBUnELxCJXz/lUBtK+7BQH qedUzkaDN/WDrwx7bB8Ge6vE67RTezmsuTxrqdHUpT9YzCpmlCkgDQPO2qP6UDS9 S4Ylxyf+bMCOO6i9v5YnEO9Drs/io/M= -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:20 2025 by rpki-client