$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa File: 1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa (raw, json) Hash identifier: 9fwLplQ4FxLzRY0yIc0XZZosflOX3fyteDPC5IYWyrY= Subject key identifier: 63:E8:EB:7D:C5:85:F3:F1:C1:E7:68:04:97:41:10:D1:FC:18:0E:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72C029E21A34C66DFBA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396826 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2c:02:9e:21:a3:4c:66:df:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=88c55a97-a154-4a0f-81bb-387320831b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:72:b4:52:f7:12:86:1a:f6:60:a8:56:10: dc:42:1b:79:31:1c:1a:77:42:e9:00:05:5f:20:42: dc:03:11:28:58:aa:0b:a6:56:a4:46:30:05:20:99: 39:1a:72:b6:6c:b5:98:81:cb:4b:2a:3b:10:7c:35: 30:13:17:e9:9b:83:c7:50:64:fc:fd:7f:94:62:e4: d8:0a:ef:1c:e9:7b:19:43:b2:71:77:ac:05:cf:0d: 6c:90:52:22:e8:dc:0b:20:77:a6:bf:fd:77:93:a8: c1:ba:d7:46:a1:40:ac:df:8c:55:bf:23:aa:b1:bf: e6:d6:1c:8b:32:42:ea:d8:07:46:1f:c1:ef:1c:dc: 6c:17:5c:76:bf:a2:7c:a0:80:59:ee:b5:ba:74:8d: 08:67:3d:e4:ec:b9:43:2f:4f:fb:48:d7:b2:05:e1: ca:53:de:0f:e4:40:75:25:ec:c7:63:fb:53:8b:7f: a5:3f:7a:74:96:e0:53:97:ea:df:e0:42:48:7b:d3: f6:3a:3d:c6:c4:25:31:b2:d1:f0:fc:3c:9a:e7:99: bc:4d:4b:16:b3:3f:2f:81:ba:b8:82:51:ac:2f:b5: c3:04:c5:f5:f2:11:67:fc:06:a1:d1:b6:3b:1d:bf: 96:9c:db:a1:95:8b:d9:0f:e6:57:d7:86:1f:7f:a9: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:EB:7D:C5:85:F3:F1:C1:E7:68:04:97:41:10:D1:FC:18:0E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1161a23a-9844-362d-b4eb-6b7f43f3c8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f8:20:eb:5d:54:03:da:08:8c:cc:60:50:11:fc:8d:a1:7b: 32:8f:a4:48:66:d1:2c:3b:3d:7a:a9:5b:da:1c:f2:fa:13:9d: 8e:21:61:da:3f:b5:d8:08:92:10:13:0c:8b:21:35:cb:d6:2a: 39:4a:ec:03:b2:d9:61:0b:6e:91:e9:e2:b2:2b:24:e6:ab:c6: f7:f3:d4:4e:bc:14:ae:a5:7a:6c:d0:b6:bf:f2:c1:5d:0b:e4: d2:8f:a7:36:ef:eb:58:ae:e0:28:48:86:9b:79:32:77:4f:49: 19:fb:b3:13:88:57:a5:12:66:e9:03:90:43:03:b0:64:d5:3f: 59:75:d9:3a:8d:0f:55:c2:d1:5b:78:81:61:71:ac:a4:b7:ea: c0:7f:79:73:c6:09:4b:da:0a:18:08:da:5c:75:74:2c:98:18: 0d:a1:e2:1a:4f:00:24:89:ca:6a:95:3c:b3:1f:fd:19:a5:8f: fa:1f:4b:c3:d8:ea:f3:e3:4a:6b:56:34:96:e6:f8:c3:00:b5: 28:71:46:3d:c6:cb:47:06:ac:b8:fc:9f:e2:78:d4:93:6e:e6: f5:bb:a1:81:13:75:20:a2:61:30:e3:ed:4d:65:64:58:53:fa: f8:49:71:70:d5:7c:ca:23:d7:c2:ee:b5:02:af:ed:d6:b9:7a: 43:a2:9e:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ywCniGjTGbfugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODhjNTVhOTctYTE1NC00YTBmLTgxYmItMzg3MzIwODMxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/BytFL3EoYa9mCoVhDcQht5MRwad0LpAAVf IELcAxEoWKoLplakRjAFIJk5GnK2bLWYgctLKjsQfDUwExfpm4PHUGT8/X+UYuTY Cu8c6XsZQ7Jxd6wFzw1skFIi6NwLIHemv/13k6jButdGoUCs34xVvyOqsb/m1hyL MkLq2AdGH8HvHNxsF1x2v6J8oIBZ7rW6dI0IZz3k7LlDL0/7SNeyBeHKU94P5EB1 JezHY/tTi3+lP3p0luBTl+rf4EJIe9P2Oj3GxCUxstHw/Dya55m8TUsWsz8vgbq4 glGsL7XDBMX18hFn/Aah0bY7Hb+WnNuhlYvZD+ZX14Yff6mppwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGPo633FhfPxwedoBJdBENH8GA5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE2MWEyM2EtOTg0NC0z NjJkLWI0ZWItNmI3ZjQzZjNjOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAM+CDrXVQD2giMzGBQEfyNoXsyj6RIZtEsOz16qVvaHPL6E52OIWHa P7XYCJIQEwyLITXL1io5SuwDstlhC26R6eKyKyTmq8b389ROvBSupXps0La/8sFd C+TSj6c27+tYruAoSIabeTJ3T0kZ+7MTiFelEmbpA5BDA7Bk1T9Zddk6jQ9VwtFb eIFhcaykt+rAf3lzxglL2goYCNpcdXQsmBgNoeIaTwAkicpqlTyzH/0ZpY/6H0vD 2Orz40prVjSW5vjDALUocUY9xstHBqy4/J/ieNSTbub1u6GBE3UgomEw4+1NZWRY U/r4SXFw1XzKI9fC7rUCr+3WuXpDop4v -----END CERTIFICATE-----Generated at Wed Oct 29 11:48:53 2025 by rpki-client