$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa File: 193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa (raw, json) Hash identifier: 7TrigRwC3Fo/RxjQiEEwu1m9HP7WjYxCOINwCFJ3DY0= Subject key identifier: F4:82:4D:0F:7D:B5:1D:3A:A3:28:96:60:CD:2B:DE:41:8B:4B:B8:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E7CE1C0706ECF7EBC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396583 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:7c:e1:c0:70:6e:cf:7e:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=17ab3c8d-95f0-4c7d-9f63-d47abbe16fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:7a:99:1f:81:30:98:cc:10:86:8d:be:1e: 6a:94:bf:bc:f9:e9:7c:13:7e:a3:d1:44:e7:f1:b4: 7b:23:78:e0:be:82:34:e0:ef:91:e9:e8:bd:55:84: 1d:43:83:b4:1a:4c:71:05:10:07:13:e2:a5:80:da: 47:d7:f4:aa:96:64:ab:fc:2f:48:5e:cd:77:57:d6: 36:76:77:e6:b5:bb:7f:1c:22:64:96:5c:13:46:7a: 5e:cf:26:d4:fc:1f:19:9f:e0:36:43:e8:f6:6f:39: f3:75:6a:95:65:60:3e:6c:d2:7c:0c:21:39:24:22: 33:bc:23:88:d5:34:3d:8f:60:2b:95:31:10:a0:c5: 85:26:ea:30:37:3e:43:ac:20:fe:d0:77:5b:09:7c: 19:91:1f:d3:e6:56:c5:7d:dc:44:df:79:70:91:96: 79:ea:44:b7:c0:e4:08:9f:5a:3b:98:61:2b:2f:aa: 35:91:e6:18:61:a7:47:f1:3a:cb:c9:9d:7a:97:18: c0:8e:3b:9e:a1:b4:13:aa:ec:d1:fa:3d:f0:60:6a: 53:9a:f0:c3:86:f9:92:23:8f:7d:9a:bd:67:4f:a0: 33:7e:86:49:7d:38:9b:55:88:5e:b0:c5:d0:13:f9: 89:bd:39:9e:9d:13:f8:70:0a:35:ca:44:36:18:1a: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:82:4D:0F:7D:B5:1D:3A:A3:28:96:60:CD:2B:DE:41:8B:4B:B8:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5f:0b:93:2e:74:65:a7:77:e3:2b:09:d5:14:4c:c0:8c:f1: 73:a3:a1:d0:4b:29:b9:e0:27:1b:ff:ea:eb:13:af:71:1e:88: be:37:f9:4a:df:c4:e8:de:d9:72:68:71:be:08:d3:c0:fd:9c: 33:72:24:2d:7c:08:dc:57:be:ae:60:ba:31:e4:7c:a5:fb:5a: 16:37:6d:b6:ea:39:66:5d:04:35:4d:ed:5d:e5:df:34:7c:8f: 45:5a:ee:ab:3a:e5:cc:0b:bb:ac:3c:71:1b:8d:72:41:c5:39: 80:0c:f2:7b:20:0c:20:1c:c6:44:3b:92:54:74:43:56:de:74: 3a:88:8a:25:16:63:08:6d:b2:93:11:d2:8b:e1:2c:93:fa:70: 66:44:54:7e:a3:4c:89:c0:7d:b1:41:98:f5:27:fa:36:63:8a: 19:48:a1:3a:79:5a:55:e1:2d:86:63:64:47:8d:06:b1:44:b1: 1d:86:06:be:ce:48:42:ae:bc:70:7f:0e:4e:e6:11:e2:80:43: d3:64:cd:08:2b:5f:28:da:36:0b:5c:25:ec:5c:7d:87:21:e8: cb:6f:0c:17:d9:7a:fe:f6:e6:2b:38:2e:b0:40:7f:54:c0:4e: f7:b2:dc:5e:4e:df:94:b3:a9:44:3c:bf:89:bb:ee:45:5e:e4: 47:14:9a:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y584cBwbs9+vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTdhYjNjOGQtOTVmMC00YzdkLTlmNjMtZDQ3YWJiZTE2ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4x6mR+BMJjMEIaNvh5qlL+8+el8E36j0UTn 8bR7I3jgvoI04O+R6ei9VYQdQ4O0GkxxBRAHE+KlgNpH1/SqlmSr/C9IXs13V9Y2 dnfmtbt/HCJkllwTRnpezybU/B8Zn+A2Q+j2bznzdWqVZWA+bNJ8DCE5JCIzvCOI 1TQ9j2ArlTEQoMWFJuowNz5DrCD+0HdbCXwZkR/T5lbFfdxE33lwkZZ56kS3wOQI n1o7mGErL6o1keYYYadH8TrLyZ16lxjAjjueobQTquzR+j3wYGpTmvDDhvmSI499 mr1nT6AzfoZJfTibVYhesMXQE/mJvTmenRP4cAo1ykQ2GBqcOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPSCTQ99tR06oyiWYM0r3kGLS7jTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkzZjlhNzMtODU5Yy0z OGE3LWFkODQtYmY3YjdjZDNhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEXwuTLnRlp3fjKwnVFEzAjPFzo6HQSym54Ccb/+rrE69xHoi+N/lK 38To3tlyaHG+CNPA/ZwzciQtfAjcV76uYLox5Hyl+1oWN2226jlmXQQ1Te1d5d80 fI9FWu6rOuXMC7usPHEbjXJBxTmADPJ7IAwgHMZEO5JUdENW3nQ6iIolFmMIbbKT EdKL4SyT+nBmRFR+o0yJwH2xQZj1J/o2Y4oZSKE6eVpV4S2GY2RHjQaxRLEdhga+ zkhCrrxwfw5O5hHigEPTZM0IK18o2jYLXCXsXH2HIejLbwwX2Xr+9uYrOC6wQH9U wE73stxeTt+Us6lEPL+Ju+5FXuRHFJoN -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:39 2025 by rpki-client