$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa File: 3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa (raw, json) Hash identifier: Q/0XOLElUGPxahcfOxJIK1YUJSrtxxkkfrpsHjeUunw= Subject key identifier: 64:D1:73:1C:9F:20:79:40:D1:81:3B:9D:FF:2E:AC:34:DF:B2:BF:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB3D9475AC27783DEB140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 40717 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:d9:47:5a:c2:77:83:de:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7e22eec6-80fb-4efb-a623-6e122d3df3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:79:ee:d3:d5:7a:54:bf:b6:e3:4a:a1:6a: 23:49:a3:2a:9d:14:f9:01:b8:60:c2:87:39:7d:3b: 19:c8:28:7d:f8:63:22:de:61:a9:b6:86:6d:b7:de: 48:9b:37:ad:87:a4:05:13:0c:df:87:ea:97:5e:c6: 13:83:7a:0f:91:4e:bb:40:66:ca:41:40:38:81:e6: f6:fa:c6:7b:e3:de:29:02:c0:40:fe:f5:18:6e:3d: ef:28:8e:71:6c:49:f5:af:46:39:bc:d7:82:b1:a5: 0e:02:3d:ec:45:ba:e6:0d:6c:25:b4:4c:c9:2c:10: 7d:3f:82:07:5d:bb:32:37:41:4a:2f:32:91:d0:c2: 17:39:aa:a7:52:27:ad:da:db:1e:22:91:d9:ff:83: 1e:7d:fd:54:67:8a:bc:5b:0e:7d:11:70:d8:fe:62: 29:09:b5:5a:b9:45:64:47:0b:b1:e7:a8:b2:60:2d: 12:72:b6:cd:f2:ef:d1:e4:a5:b3:27:ef:1f:03:08: 3e:ef:26:0b:99:80:4e:3d:c9:8f:52:92:61:cd:b1: 29:33:46:ed:7f:af:1c:71:62:fb:5e:15:2c:ba:d6: 8e:5a:fe:35:e3:74:11:3e:2a:93:43:ea:90:7b:41: 74:b7:08:18:f6:60:0c:62:29:77:fd:47:ea:5f:47: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D1:73:1C:9F:20:79:40:D1:81:3B:9D:FF:2E:AC:34:DF:B2:BF:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a00cad8-0267-39b4-af6d-fb3cd1a94106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:03:8a:08:54:26:78:f8:83:68:ce:65:85:d7:9b:9f:d7: 8a:f9:51:a7:5f:26:85:75:5d:87:3c:72:f2:1e:3e:8e:82:69: 82:d5:a3:91:18:31:7b:d5:c2:49:d4:73:a7:3e:31:ef:35:59: 72:fd:36:92:6d:dd:c9:a0:73:48:70:40:31:f6:31:07:42:26: 24:e3:aa:90:7b:c2:ab:29:ac:4e:fc:18:1e:30:02:53:49:7b: c9:08:34:eb:d8:f5:7f:38:35:31:99:1e:a1:32:c0:06:6d:85: 96:8c:13:38:13:ab:da:47:30:ed:23:13:9f:9e:50:22:12:58: 50:a3:e0:c4:73:7e:b9:b2:ae:c9:44:ff:3f:9b:6c:c0:15:af: e4:28:b9:74:f9:ab:01:97:0d:96:c2:65:8e:ec:55:bc:f8:8a: a5:56:ee:91:4d:4d:40:7a:68:96:ac:36:34:d9:72:c6:a9:87: 06:27:d4:9d:51:e7:9b:66:79:85:e1:1e:ad:52:0b:a1:b7:36: 18:57:c5:86:d2:d1:55:e6:33:84:49:0d:59:03:8d:64:8d:64: a4:69:5d:1b:42:6a:42:9e:2d:d2:93:09:3b:be:e8:b7:10:69: 53:8c:3f:b2:82:03:03:0e:1c:d3:98:c5:ca:1e:be:84:9f:3a: a7:b9:da:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLPZR1rCd4PesUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2UyMmVlYzYtODBmYi00ZWZiLWE2MjMtNmUxMjJkM2RmM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0h57tPVelS/tuNKoWojSaMqnRT5Abhgwoc5 fTsZyCh9+GMi3mGptoZtt95Imzeth6QFEwzfh+qXXsYTg3oPkU67QGbKQUA4geb2 +sZ7494pAsBA/vUYbj3vKI5xbEn1r0Y5vNeCsaUOAj3sRbrmDWwltEzJLBB9P4IH XbsyN0FKLzKR0MIXOaqnUiet2tseIpHZ/4Meff1UZ4q8Ww59EXDY/mIpCbVauUVk Rwux56iyYC0ScrbN8u/R5KWzJ+8fAwg+7yYLmYBOPcmPUpJhzbEpM0btf68ccWL7 XhUsutaOWv4143QRPiqTQ+qQe0F0twgY9mAMYil3/UfqX0fkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTRcxyfIHlA0YE7nf8urDTfsr/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2EwMGNhZDgtMDI2Ny0z OWI0LWFmNmQtZmIzY2QxYTk0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpwA4oIVCZ4+INozmWF15uf14r5UadfJoV1XYc8cvIePo6CaYLVo5EY MXvVwknUc6c+Me81WXL9NpJt3cmgc0hwQDH2MQdCJiTjqpB7wqsprE78GB4wAlNJ e8kINOvY9X84NTGZHqEywAZthZaMEzgTq9pHMO0jE5+eUCISWFCj4MRzfrmyrslE /z+bbMAVr+QouXT5qwGXDZbCZY7sVbz4iqVW7pFNTUB6aJasNjTZcsaphwYn1J1R 55tmeYXhHq1SC6G3NhhXxYbS0VXmM4RJDVkDjWSNZKRpXRtCakKeLdKTCTu+6LcQ aVOMP7KCAwMOHNOYxcoevoSfOqe52rk= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:58 2025 by rpki-client