$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa File: 30c6aa14-6cf3-3108-8a08-15b180361154.roa (raw, json) Hash identifier: 7PNFJS5EJFyzGDqhJNIZyCuAQjY3VHSfZnUuHoxU9Ic= Subject key identifier: D6:38:A8:FC:E7:64:4E:4D:E2:D1:08:A2:46:EB:55:8E:EE:99:2A:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E735DD90DCA6C404AAECC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397210 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:35:dd:90:dc:a6:c4:04:aa:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=abfdf71c-d094-4608-b9d0-8cb5a69155c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:3f:60:5c:dd:4b:d9:c0:45:53:25:82:45: d2:4c:d1:80:8d:fa:03:09:83:8b:2e:58:e7:fc:ea: 0c:99:a2:2d:ce:a4:07:b2:f6:a8:27:1e:a4:8a:98: f9:10:86:6d:c7:85:58:97:9c:50:37:38:5c:83:e4: ec:a6:ac:e0:30:bb:d8:71:6d:27:3b:0d:b5:8c:63: a4:59:00:49:e5:56:c1:81:89:7a:bc:c1:bc:a7:ef: ca:48:bd:1e:68:1d:3e:3a:4b:74:17:9b:f8:03:97: 94:03:89:b4:b8:15:b7:ec:5e:ba:82:f3:c1:1b:dc: 6d:e3:96:7f:b2:55:f0:84:9c:13:1a:1c:a5:5b:72: 66:c7:89:7e:75:05:69:20:31:29:f0:fe:66:bb:c0: 35:78:c7:56:46:d8:5d:17:3a:75:68:9c:72:2c:05: a5:1b:4c:e5:39:11:44:48:d4:5e:40:24:cf:5c:a3: 63:96:03:60:c3:1f:03:99:73:a4:84:92:b7:26:d7: 1c:fe:52:24:84:54:c8:7e:05:34:7d:df:93:e7:2a: 2f:1b:49:dc:48:75:5c:03:3a:95:64:2c:03:89:ba: 07:1a:ea:37:b2:ba:54:42:29:67:3d:e9:0f:51:13: 9f:72:2d:62:ff:6b:36:40:6a:e0:f9:b3:34:05:8e: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:38:A8:FC:E7:64:4E:4D:E2:D1:08:A2:46:EB:55:8E:EE:99:2A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:47:78:6b:4f:fb:35:3b:db:fb:cc:bf:d2:a5:1a:9d:78:d8: fe:0c:54:67:9e:3c:55:3e:59:e4:dc:2f:01:2b:e5:34:37:d3: 55:e6:ff:4a:6b:be:3a:c4:c8:9c:40:26:2f:1c:51:4f:4f:61: 72:5e:13:52:90:94:96:2b:14:06:ab:c6:5c:c0:57:93:c5:7e: 70:cc:24:c2:fb:e2:af:b4:7d:10:60:dd:09:31:ce:39:b8:16: 1e:01:ab:4f:9c:d8:3e:f8:7c:c6:83:37:fd:f5:77:5b:05:11: ac:62:ef:92:35:81:f6:59:f3:d4:6b:33:36:a0:55:af:df:a4: bf:01:e1:43:c5:51:a2:01:92:49:5f:cc:7d:d3:4f:5b:02:a5: 4c:84:28:42:9b:30:b2:06:a2:27:d5:05:75:50:56:78:44:83: f0:86:b1:3e:00:87:74:ae:e8:17:cf:1f:cb:c4:46:f9:32:62: 16:1d:e7:80:d4:95:f3:d7:fd:f2:65:56:71:23:39:61:49:9f: 10:9c:56:6d:01:cf:18:4b:05:21:d0:82:6a:14:95:e2:a1:2e: 24:2b:4b:2f:ca:af:12:d2:ac:64:74:08:82:88:e8:30:ac:25: 02:97:e4:3b:e5:af:e4:cf:c2:07:a3:16:80:e4:d9:df:e6:3f: 78:10:94:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zXdkNymxASq7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWJmZGY3MWMtZDA5NC00NjA4LWI5ZDAtOGNiNWE2OTE1NWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBc/YFzdS9nARVMlgkXSTNGAjfoDCYOLLljn /OoMmaItzqQHsvaoJx6kipj5EIZtx4VYl5xQNzhcg+TspqzgMLvYcW0nOw21jGOk WQBJ5VbBgYl6vMG8p+/KSL0eaB0+Okt0F5v4A5eUA4m0uBW37F66gvPBG9xt45Z/ slXwhJwTGhylW3Jmx4l+dQVpIDEp8P5mu8A1eMdWRthdFzp1aJxyLAWlG0zlORFE SNReQCTPXKNjlgNgwx8DmXOkhJK3Jtcc/lIkhFTIfgU0fd+T5yovG0ncSHVcAzqV ZCwDiboHGuo3srpUQilnPekPUROfci1i/2s2QGrg+bM0BY4ZkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNY4qPznZE5N4tEIokbrVY7umSowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjNmFhMTQtNmNmMy0z MTA4LThhMDgtMTViMTgwMzYxMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeR3hrT/s1O9v7zL/SpRqdeNj+DFRnnjxVPlnk3C8BK+U0N9NV5v9K a746xMicQCYvHFFPT2FyXhNSkJSWKxQGq8ZcwFeTxX5wzCTC++KvtH0QYN0JMc45 uBYeAatPnNg++HzGgzf99XdbBRGsYu+SNYH2WfPUazM2oFWv36S/AeFDxVGiAZJJ X8x9009bAqVMhChCmzCyBqIn1QV1UFZ4RIPwhrE+AId0rugXzx/LxEb5MmIWHeeA 1JXz1/3yZVZxIzlhSZ8QnFZtAc8YSwUh0IJqFJXioS4kK0svyq8S0qxkdAiCiOgw rCUCl+Q75a/kz8IHoxaA5Nnf5j94EJTQ -----END CERTIFICATE-----Generated at Wed Oct 29 11:58:18 2025 by rpki-client