$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fbc390e-0b4b-3819-a418-2fe70cbafeec.roa File: 3fbc390e-0b4b-3819-a418-2fe70cbafeec.roa (raw, json) Hash identifier: ycwtYRrjbkix4SdNBivpRfxILOIw/dd544HaOtIb4UI= Subject key identifier: 52:F2:1A:FE:36:61:6F:C8:1B:24:9D:B2:B9:23:3F:A8:4A:EA:37:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB1894CD07A5E2C775CE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fbc390e-0b4b-3819-a418-2fe70cbafeec.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396574 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:89:4c:d0:7a:5e:2c:77:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0f0f91b8-b6e1-42c6-b9ad-cd0510fcc6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:9c:36:f6:d0:44:a9:b6:59:00:e7:a8:00: ce:73:6b:e1:c8:dd:fe:14:3e:ce:30:b9:ee:c7:30: 97:12:c4:4e:71:04:b5:e7:07:8a:82:ec:18:de:a2: 9f:c8:14:53:13:55:1c:a9:d8:1a:a4:bd:ca:41:84: 00:1d:5d:34:0b:6e:c2:97:53:9d:41:85:ca:5b:ea: eb:1d:c4:54:7a:88:ba:92:72:a1:42:1a:4b:5b:c7: 12:15:66:87:bc:11:2a:d2:d0:0f:3a:f2:20:20:82: af:97:ad:ba:e7:6a:a0:01:54:5e:82:f1:18:e9:f0: 4b:f9:bc:44:d1:db:6e:64:2f:ed:9d:49:35:f4:13: 3b:d1:05:5e:37:3f:cf:0e:78:b3:b4:2c:31:f9:f8: e8:27:76:99:2a:f9:13:03:0a:70:74:24:b8:2a:49: 9c:9f:a5:32:f2:2b:5d:e1:cc:de:0d:98:cc:3f:6a: 2f:52:7e:ef:fe:a2:14:3c:25:a8:ac:24:c9:59:de: e2:8d:5a:71:ce:42:93:db:eb:e7:07:7b:72:d8:be: e8:f6:23:e2:82:c2:91:8b:e6:fe:8b:9e:41:e1:d1: 35:c4:54:a7:57:04:39:bc:8d:c5:ce:0a:f9:ea:d9: b5:5f:5e:c5:9a:b4:12:32:ff:3a:b2:1e:af:b1:78: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:1A:FE:36:61:6F:C8:1B:24:9D:B2:B9:23:3F:A8:4A:EA:37:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3fbc390e-0b4b-3819-a418-2fe70cbafeec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:25:28:6a:d7:25:5c:9d:06:9d:6f:55:a7:b7:d5:e0:aa:b8: e2:37:e8:99:78:33:68:21:28:04:a2:6f:ca:23:70:b2:b7:e0: c6:78:a8:c4:a5:87:16:11:2f:5f:7e:6c:86:fe:af:03:2a:ba: c9:78:ce:4d:7d:73:eb:b5:6b:a4:0c:99:d8:b6:c6:c4:10:2f: b8:c5:2e:f4:e5:cb:f5:84:b3:d6:7e:d9:92:45:e0:d4:b8:a7: 2e:e8:55:ba:2b:1b:69:83:fd:bc:b4:fb:fb:7c:3b:f6:b4:36: 22:42:d6:53:ad:51:d8:b6:81:ca:d8:9c:15:c0:19:c0:75:df: a8:0f:14:99:10:13:2f:b3:79:b3:c1:af:d3:8f:f9:1e:63:fe: 77:cc:75:b3:ad:35:b9:99:2a:b2:be:9d:63:89:80:94:3f:11: 24:8c:31:d5:45:c4:0e:35:2b:66:28:06:01:d8:26:b0:d5:82: 1e:25:a5:39:e5:7c:2e:20:cd:6b:23:9a:85:77:1f:ff:3a:ff: b5:54:8a:de:33:28:7f:cc:07:29:25:a9:f4:1f:12:95:d2:49: 6d:30:a3:f4:b4:89:9f:59:af:10:5b:2f:ff:e2:3d:38:f2:21: 72:5a:a2:ed:f6:ee:bd:ad:27:9a:12:ad:cb:2f:5c:3f:97:24: 72:9b:64:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLGJTNB6Xix3XOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGYwZjkxYjgtYjZlMS00MmM2LWI5YWQtY2QwNTEwZmNjNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8GcNvbQRKm2WQDnqADOc2vhyN3+FD7OMLnu xzCXEsROcQS15weKguwY3qKfyBRTE1UcqdgapL3KQYQAHV00C27Cl1OdQYXKW+rr HcRUeoi6knKhQhpLW8cSFWaHvBEq0tAPOvIgIIKvl62652qgAVRegvEY6fBL+bxE 0dtuZC/tnUk19BM70QVeNz/PDniztCwx+fjoJ3aZKvkTAwpwdCS4Kkmcn6Uy8itd 4czeDZjMP2ovUn7v/qIUPCWorCTJWd7ijVpxzkKT2+vnB3ty2L7o9iPigsKRi+b+ i55B4dE1xFSnVwQ5vI3Fzgr56tm1X17FmrQSMv86sh6vsXiQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLyGv42YW/IGySdsrkjP6hK6jfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2ZiYzM5MGUtMGI0Yi0z ODE5LWE0MTgtMmZlNzBjYmFmZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACglKGrXJVydBp1vVae31eCquOI36Jl4M2ghKASib8ojcLK34MZ4qMSl hxYRL19+bIb+rwMqusl4zk19c+u1a6QMmdi2xsQQL7jFLvTly/WEs9Z+2ZJF4NS4 py7oVborG2mD/by0+/t8O/a0NiJC1lOtUdi2gcrYnBXAGcB136gPFJkQEy+zebPB r9OP+R5j/nfMdbOtNbmZKrK+nWOJgJQ/ESSMMdVFxA41K2YoBgHYJrDVgh4lpTnl fC4gzWsjmoV3H/86/7VUit4zKH/MByklqfQfEpXSSW0wo/S0iZ9ZrxBbL//iPTjy IXJaou327r2tJ5oSrcsvXD+XJHKbZFg= -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:09 2025 by rpki-client