$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: I2du9SNRfsAj0cpHpqJUmHED5Wzv5lkiYNFkB8pRl9I= Subject key identifier: 4D:1A:3B:2F:36:A0:4E:01:CE:26:8F:B7:FA:0E:71:2E:6F:1C:7B:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3302AE4B8AAF990B600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:30:2a:e4:b8:aa:f9:90:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=398e650e-6694-4700-a17b-7a52a7780423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:3c:6e:91:dd:10:f0:66:fd:2f:51:59:58: fa:d2:d8:cb:b2:ec:1e:fb:6c:43:2e:ca:d1:48:69: c8:aa:88:bc:e2:40:fc:de:c2:36:8c:35:70:45:bb: 44:cd:e7:ec:73:73:30:1a:15:70:a0:12:6a:9b:a0: ee:2d:50:ba:69:23:1b:62:31:f6:fd:ce:6b:b4:cc: 84:73:76:33:ce:f7:3f:ab:1e:49:52:7f:80:59:2c: 7d:44:db:41:17:61:29:7f:51:c4:57:11:18:53:72: ed:4d:c7:4b:3c:d1:05:b5:d9:76:44:31:5f:46:68: 42:22:77:02:37:50:c9:4d:e1:01:5a:66:91:37:98: ce:19:f8:35:56:6d:42:18:e8:52:d8:84:e6:43:a1: da:f1:01:3c:10:30:50:22:01:13:6c:d2:b4:47:4a: 76:6f:51:e9:4a:10:39:b7:04:a8:db:79:3f:1f:cc: ae:46:c0:c6:1d:cf:ff:a8:2f:f7:a9:9f:b6:da:bf: cd:df:71:5a:39:58:61:5f:cb:4a:c5:aa:af:6a:08: f5:10:e9:d8:45:61:19:5b:52:a5:d9:e3:d6:cf:f4: c6:ae:5f:05:d1:93:64:62:7f:31:fe:72:28:c5:0c: bb:79:58:b4:b7:aa:d0:41:99:3d:f0:d0:79:ab:7e: c9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1A:3B:2F:36:A0:4E:01:CE:26:8F:B7:FA:0E:71:2E:6F:1C:7B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bd:b7:75:ed:8d:44:01:9f:ab:d3:2a:f5:40:0f:ca:96:0d: d8:ac:8c:ab:5d:ff:d1:56:b1:cc:8c:d8:8a:0d:32:0e:ed:9f: c5:3d:56:89:0a:9c:0c:5e:92:7e:50:3c:3f:11:42:a2:2b:dd: 31:bd:0b:2a:a8:b2:e1:58:72:a3:15:ea:ba:58:aa:f0:7f:e2: a3:28:69:92:32:5b:54:d2:0d:11:a2:97:91:c3:81:10:2a:fa: 27:e2:12:08:1c:60:e5:a4:53:20:a0:de:b5:f2:a2:6b:f3:a8: a8:a2:26:82:2e:3a:95:1f:7d:7f:9e:d8:46:37:3f:47:36:42: a5:97:e6:12:02:58:81:37:08:f6:70:a8:01:1e:af:c0:11:8f: f7:40:3d:0f:35:ce:0f:28:d4:17:cc:3a:39:15:8b:88:09:b0: df:3c:3a:33:8d:c2:0c:b6:73:54:e9:c0:74:13:22:41:81:1d: 42:75:33:08:82:98:0b:70:08:77:c9:48:7e:9d:f8:dd:ba:a5: cf:30:60:60:a6:c8:e1:d5:14:59:bf:ff:29:d5:1c:d3:da:00: 0d:af:3c:6e:e5:56:18:62:fa:84:44:02:72:ea:54:78:dd:c9: 82:14:bf:14:00:c1:a5:1e:9d:6c:8d:10:82:99:de:22:37:e1: 99:4a:6d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLMwKuS4qvmQtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Mzk4ZTY1MGUtNjY5NC00NzAwLWExN2ItN2E1MmE3NzgwNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn48bpHdEPBm/S9RWVj60tjLsuwe+2xDLsrR SGnIqoi84kD83sI2jDVwRbtEzefsc3MwGhVwoBJqm6DuLVC6aSMbYjH2/c5rtMyE c3Yzzvc/qx5JUn+AWSx9RNtBF2Epf1HEVxEYU3LtTcdLPNEFtdl2RDFfRmhCIncC N1DJTeEBWmaRN5jOGfg1Vm1CGOhS2ITmQ6Ha8QE8EDBQIgETbNK0R0p2b1HpShA5 twSo23k/H8yuRsDGHc//qC/3qZ+22r/N33FaOVhhX8tKxaqvagj1EOnYRWEZW1Kl 2ePWz/TGrl8F0ZNkYn8x/nIoxQy7eVi0t6rQQZk98NB5q37J2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0aOy82oE4BziaPt/oOcS5vHHtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+9t3XtjUQBn6vTKvVAD8qWDdisjKtd/9FWscyM2IoNMg7tn8U9VokK nAxekn5QPD8RQqIr3TG9CyqosuFYcqMV6rpYqvB/4qMoaZIyW1TSDRGil5HDgRAq +ifiEggcYOWkUyCg3rXyomvzqKiiJoIuOpUffX+e2EY3P0c2QqWX5hICWIE3CPZw qAEer8ARj/dAPQ81zg8o1BfMOjkVi4gJsN88OjONwgy2c1TpwHQTIkGBHUJ1MwiC mAtwCHfJSH6d+N26pc8wYGCmyOHVFFm//ynVHNPaAA2vPG7lVhhi+oREAnLqVHjd yYIUvxQAwaUenWyNEIKZ3iI34ZlKbck= -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:32 2025 by rpki-client