$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa File: 1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa (raw, json) Hash identifier: r04K5e67fpJJq+bdXOZTR3pKub4btchAfTAhe4StHWo= Subject key identifier: 3B:95:06:87:1F:C3:01:D4:82:84:95:BD:B3:4F:1E:12:E0:58:38:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E7338FC3D88B28CC075B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396827 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:8f:c3:d8:8b:28:cc:07:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=b4956663-4f5e-4204-90cc-bb60eaaab9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:7c:16:c2:45:9e:31:a5:ba:f4:8f:c0:74: fc:ad:2c:c7:ec:db:02:5d:a3:b6:82:cf:09:74:49: 7f:ac:96:ef:3d:40:5d:92:15:9e:f4:9b:32:01:7a: 2e:74:b5:a0:f2:00:7c:c6:02:90:ee:b8:64:78:66: a7:fd:10:1a:35:ac:21:4e:68:7f:da:5e:ca:41:7e: 42:2f:19:f7:88:84:46:4a:88:6d:39:e1:9f:8d:ba: 0f:f9:5c:ba:bf:aa:32:4a:0e:0c:5b:56:2d:fc:69: 87:39:5f:32:59:ed:65:1e:56:61:47:87:79:e3:7a: 99:8e:da:32:0e:32:69:81:97:64:a8:02:5a:63:b0: 9c:f6:53:58:bc:76:25:15:61:c7:f7:e0:27:10:94: 19:e1:9e:cf:40:70:b5:a0:bd:76:8d:72:80:f9:a4: cd:50:36:f0:a7:18:04:97:fe:f3:3a:09:42:2d:c8: c4:93:3b:47:9b:b9:14:01:ef:f1:5a:85:8d:5c:8a: a2:a9:ec:d8:1f:9f:77:a7:49:dc:5a:23:57:2a:4b: 0f:a4:f5:06:69:79:22:9c:ff:14:fd:8c:2a:d1:86: 5a:3c:ee:e2:0e:84:de:5b:6f:39:58:75:5f:04:df: 83:63:24:29:4d:9d:d9:e2:40:79:0e:c6:a7:1a:1e: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:95:06:87:1F:C3:01:D4:82:84:95:BD:B3:4F:1E:12:E0:58:38:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b4cb8fd-f347-30e7-97cb-a5869681a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7a:02:6c:f5:22:cf:9c:14:2b:ac:b4:e4:31:21:41:76:82: 56:dc:03:80:dc:e3:9f:83:69:0d:4c:cf:37:db:4d:39:7e:6a: 04:61:42:95:ed:d2:37:2b:af:32:5a:ad:6f:1e:f2:5e:e9:bb: bd:6d:16:33:3a:5e:12:68:1f:d1:6a:07:c9:5e:df:19:8c:c3: 99:56:97:0c:86:d8:2e:b8:66:b3:21:b0:05:68:99:93:9d:1e: a6:46:b8:b3:09:fe:06:b5:5f:7e:fa:8a:6d:91:be:3d:c7:dc: 67:e9:82:b3:a8:9d:0f:df:f4:eb:02:82:f6:15:ed:ec:39:f0: 6d:10:81:e9:6b:ec:5a:06:c7:32:0f:bd:ec:76:9e:23:95:d3: a2:d1:96:85:74:2c:a9:74:b3:07:7e:fc:72:7d:6d:4b:bd:72: 82:6d:1f:dc:c1:22:56:82:02:18:a2:d7:79:33:1d:eb:a7:34: b3:48:99:51:ca:bd:c8:98:0a:8e:00:8e:c9:42:60:23:90:0e: eb:4d:4f:82:cd:14:0c:68:a5:6f:9f:8e:c6:a0:aa:42:16:79: f8:33:6f:50:7b:a1:74:cd:1b:74:87:79:c9:6c:92:41:f1:72: 26:a6:cb:bf:6f:49:a1:db:ff:5e:b6:df:34:c0:c0:a1:67:8f: 56:57:44:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zOPw9iLKMwHWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YjQ5NTY2NjMtNGY1ZS00MjA0LTkwY2MtYmI2MGVhYWFiOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPV8FsJFnjGluvSPwHT8rSzH7NsCXaO2gs8J dEl/rJbvPUBdkhWe9JsyAXoudLWg8gB8xgKQ7rhkeGan/RAaNawhTmh/2l7KQX5C Lxn3iIRGSohtOeGfjboP+Vy6v6oySg4MW1Yt/GmHOV8yWe1lHlZhR4d543qZjtoy DjJpgZdkqAJaY7Cc9lNYvHYlFWHH9+AnEJQZ4Z7PQHC1oL12jXKA+aTNUDbwpxgE l/7zOglCLcjEkztHm7kUAe/xWoWNXIqiqezYH593p0ncWiNXKksPpPUGaXkinP8U /Ywq0YZaPO7iDoTeW285WHVfBN+DYyQpTZ3Z4kB5DsanGh4g5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDuVBocfwwHUgoSVvbNPHhLgWDihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI0Y2I4ZmQtZjM0Ny0z MGU3LTk3Y2ItYTU4Njk2ODFhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+egJs9SLPnBQrrLTkMSFBdoJW3AOA3OOfg2kNTM832005fmoEYUKV 7dI3K68yWq1vHvJe6bu9bRYzOl4SaB/RagfJXt8ZjMOZVpcMhtguuGazIbAFaJmT nR6mRrizCf4GtV9++optkb49x9xn6YKzqJ0P3/TrAoL2Fe3sOfBtEIHpa+xaBscy D73sdp4jldOi0ZaFdCypdLMHfvxyfW1LvXKCbR/cwSJWggIYotd5Mx3rpzSzSJlR yr3ImAqOAI7JQmAjkA7rTU+CzRQMaKVvn47GoKpCFnn4M29Qe6F0zRt0h3nJbJJB 8XImpsu/b0mh2/9ett80wMChZ49WV0SZ -----END CERTIFICATE-----Generated at Wed Oct 29 20:23:49 2025 by rpki-client