$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa File: 32c53d16-72c4-33dc-9880-0c5e25f17660.roa (raw, json) Hash identifier: LUo439wUSk3FxkN1pdylmZ6GtKm+QuhxypHDw9hbgdo= Subject key identifier: 21:87:F6:CE:BC:49:DB:1B:66:25:A7:84:14:31:A7:D0:97:70:46:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB0CD2D9D235618EE9570 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397212 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:cd:2d:9d:23:56:18:ee:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d3e37c95-c48b-4ae6-8cae-f1e42037e14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:77:85:26:34:c1:ab:dc:81:cf:c7:f0:71: e8:b1:03:2e:de:da:f9:e3:bb:31:09:a6:e2:c9:94: f4:f0:7f:a6:5b:bf:3f:ed:34:e8:30:6f:f7:2f:c2: 72:d0:ab:6f:09:1f:6d:b9:61:de:b6:92:9b:dd:46: e8:e9:1e:35:18:77:16:a4:fb:77:d5:ca:76:0e:a0: 98:54:28:87:a8:b9:ca:ce:0c:86:2a:9f:ca:81:69: 85:05:89:4b:2e:16:42:1a:21:76:5c:26:5a:95:b0: 2d:38:42:95:44:97:ba:d0:bd:06:4a:dc:0e:76:bd: e5:5f:91:6a:b6:57:6c:93:f5:56:98:50:13:ef:01: 5e:af:7b:d5:67:cf:bb:09:d5:ce:84:27:65:ec:29: 7e:d5:e3:78:26:c7:79:d9:6c:80:43:7e:d6:7d:42: 80:c9:b8:ae:6b:3a:88:58:bb:e2:5e:a6:96:5e:17: fb:c6:09:62:48:05:14:eb:fd:cb:29:a6:50:aa:49: f2:00:3f:0d:36:d4:3e:e8:9a:b0:b7:8d:69:3c:29: 2e:6d:8c:01:57:80:b5:31:f3:93:ba:80:e6:6c:53: 56:a5:90:ad:95:16:2e:a8:42:64:54:33:67:0d:c0: a5:36:4a:a6:24:24:b0:45:17:f5:a2:2e:94:56:5f: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:F6:CE:BC:49:DB:1B:66:25:A7:84:14:31:A7:D0:97:70:46:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:50:fe:6c:48:40:4b:6a:1d:cf:e0:42:83:15:b4:7a:00:6d: f7:e5:fd:69:80:fd:da:dc:97:b6:25:17:98:7a:e4:59:a6:12: ac:89:a1:68:be:57:a2:72:f8:7d:dc:66:46:49:0f:a3:51:23: d5:e4:cf:13:37:40:d4:60:94:83:b3:09:7a:69:75:91:e2:c1: e7:1e:6a:33:6b:2d:b3:14:f0:16:36:67:af:4d:4c:fa:ac:b9: 7d:f9:ba:b4:b4:9c:dc:5f:90:02:8f:12:0d:fb:63:51:16:81: 18:5c:b1:20:1e:a8:44:6a:b9:5d:51:73:c8:c4:e4:0d:5d:81: 47:3f:fc:38:aa:fa:f0:15:0e:5f:5f:9a:77:81:68:89:68:39: 94:a8:e8:ea:e7:b2:25:60:e2:35:94:b7:31:38:c3:89:9b:35: d5:85:76:b8:e9:33:42:db:b5:1d:09:23:99:c0:79:58:3d:67: e3:ed:54:a0:d8:14:e1:86:3e:24:3b:ce:a0:a2:4b:88:66:4a: c3:09:b3:bf:3c:a1:f3:c7:56:a3:77:eb:d6:84:a6:d9:0f:c0: d6:fc:27:49:7d:9e:da:69:b6:b7:8c:fd:8a:3c:ac:94:76:00: 70:e5:17:8a:d6:85:81:c1:47:82:7a:87:f1:62:da:d9:2f:84: b3:3f:38:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLDNLZ0jVhjulXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDNlMzdjOTUtYzQ4Yi00YWU2LThjYWUtZjFlNDIwMzdlMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ93hSY0wavcgc/H8HHosQMu3tr547sxCabi yZT08H+mW78/7TToMG/3L8Jy0KtvCR9tuWHetpKb3Ubo6R41GHcWpPt31cp2DqCY VCiHqLnKzgyGKp/KgWmFBYlLLhZCGiF2XCZalbAtOEKVRJe60L0GStwOdr3lX5Fq tldsk/VWmFAT7wFer3vVZ8+7CdXOhCdl7Cl+1eN4Jsd52WyAQ37WfUKAybiuazqI WLviXqaWXhf7xgliSAUU6/3LKaZQqknyAD8NNtQ+6Jqwt41pPCkubYwBV4C1MfOT uoDmbFNWpZCtlRYuqEJkVDNnDcClNkqmJCSwRRf1oi6UVl+ZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGH9s68SdsbZiWnhBQxp9CXcEapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJjNTNkMTYtNzJjNC0z M2RjLTk4ODAtMGM1ZTI1ZjE3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpQ/mxIQEtqHc/gQoMVtHoAbffl/WmA/drcl7YlF5h65FmmEqyJoWi+ V6Jy+H3cZkZJD6NRI9XkzxM3QNRglIOzCXppdZHiweceajNrLbMU8BY2Z69NTPqs uX35urS0nNxfkAKPEg37Y1EWgRhcsSAeqERquV1Rc8jE5A1dgUc//Diq+vAVDl9f mneBaIloOZSo6OrnsiVg4jWUtzE4w4mbNdWFdrjpM0LbtR0JI5nAeVg9Z+PtVKDY FOGGPiQ7zqCiS4hmSsMJs788ofPHVqN369aEptkPwNb8J0l9ntpptreM/Yo8rJR2 AHDlF4rWhYHBR4J6h/Fi2tkvhLM/OEw= -----END CERTIFICATE-----Generated at Wed Oct 29 11:55:30 2025 by rpki-client