$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa File: 43a7c405-ee0a-3c23-850e-06437fe7b730.roa (raw, json) Hash identifier: KSOPwg542wTEaPW4FDHc4xdgfHIHKx10PJ3oZHbumM8= Subject key identifier: 38:0C:5C:87:16:0E:4E:FE:C1:FA:80:A2:56:83:41:0E:4A:FD:C4:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E732662BC52B62F6278280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396555 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:66:2b:c5:2b:62:f6:27:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=84f71a0b-a4eb-4064-97cf-a8aa817bf5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:72:17:91:98:17:2e:15:9f:7b:15:75:53: 08:33:d8:a3:ce:32:10:e3:ae:86:ae:a8:ab:9a:0f: 1b:82:4a:8d:b9:f6:42:51:b3:50:dc:e9:30:26:99: b6:76:42:6c:75:c7:c6:2b:62:46:db:1e:dd:25:8b: 36:0d:f1:58:2e:10:ef:6c:22:be:f1:2d:0a:27:47: 4f:11:7d:04:d9:c7:01:8d:4e:da:de:10:97:e7:61: a7:1d:34:e8:eb:53:b6:09:e0:27:46:b5:b8:45:8a: d8:7e:ee:24:62:1d:ff:16:27:aa:8a:98:b9:5b:87: bc:6c:d7:33:27:46:65:3d:d4:51:e6:dc:e9:f7:ca: 0f:1d:87:2d:2e:be:e0:53:20:a4:87:7e:51:16:3d: a2:68:64:18:2c:10:c0:92:ae:81:9b:53:d4:f6:11: ea:96:bc:c4:5a:19:ee:21:38:26:c9:cc:dd:ed:13: cb:26:12:ed:64:87:05:8a:02:4d:b0:5e:c2:3a:33: b6:d0:51:12:20:ff:6b:06:be:e5:b1:1f:3b:5c:e2: d7:03:6f:2a:e5:90:96:72:73:5f:93:9a:a9:e6:c6: 7c:9f:37:ed:6a:b9:a1:76:b7:d3:ea:52:fa:40:4a: 93:ec:81:fa:b9:70:7c:88:16:71:26:8a:5b:72:fd: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0C:5C:87:16:0E:4E:FE:C1:FA:80:A2:56:83:41:0E:4A:FD:C4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6d:ba:c0:d3:bc:bd:98:12:49:79:5d:b3:72:62:11:de:06: 58:e2:2b:eb:d2:bd:b2:bb:c9:7b:cf:00:c5:92:ed:82:79:a9: 7c:14:b1:10:bb:b0:3c:ea:07:19:6f:b6:fa:3d:f0:de:61:30: 9f:1b:e5:32:2d:5f:3d:ee:fa:c3:80:cf:b1:bf:0f:93:8b:e4: 1a:f8:af:75:dc:26:8b:6e:c0:a5:56:c9:da:16:d5:bb:ee:41: c9:d3:f6:61:ef:03:7c:1a:dc:38:11:ae:24:9d:4e:ea:a1:a1: 0e:24:18:8f:72:39:e3:47:bf:c5:c1:d2:ff:e6:0a:50:e5:12: 85:fb:bc:f4:7b:ac:1a:97:d0:45:77:8b:c8:b0:17:f0:5c:c7: 79:37:5b:6f:77:a2:fe:f8:02:b3:cd:94:bc:e7:39:ff:16:bf: bb:7d:a4:b1:da:16:ec:0b:ff:02:2e:b6:8c:92:7d:9c:c6:f3: b2:e6:56:0c:af:cf:b5:9f:28:64:3c:3d:3f:cf:00:f4:ae:8a: 98:00:33:bd:ca:65:97:cc:16:cd:b6:46:8e:70:61:18:30:dc: 9e:31:46:e3:ee:f7:ae:06:b3:42:ad:1a:89:37:c8:6e:92:81: fa:35:29:a8:23:a4:bf:e1:3c:77:1c:bb:c0:fd:09:0c:aa:b4: f0:db:7b:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zJmK8UrYvYngoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODRmNzFhMGItYTRlYi00MDY0LTk3Y2YtYThhYTgxN2JmNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjchyF5GYFy4Vn3sVdVMIM9ijzjIQ466Grqir mg8bgkqNufZCUbNQ3OkwJpm2dkJsdcfGK2JG2x7dJYs2DfFYLhDvbCK+8S0KJ0dP EX0E2ccBjU7a3hCX52GnHTTo61O2CeAnRrW4RYrYfu4kYh3/Fieqipi5W4e8bNcz J0ZlPdRR5tzp98oPHYctLr7gUyCkh35RFj2iaGQYLBDAkq6Bm1PU9hHqlrzEWhnu ITgmyczd7RPLJhLtZIcFigJNsF7COjO20FESIP9rBr7lsR87XOLXA28q5ZCWcnNf k5qp5sZ8nzftarmhdrfT6lL6QEqT7IH6uXB8iBZxJopbcv2wKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDgMXIcWDk7+wfqAolaDQQ5K/cSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNhN2M0MDUtZWUwYS0z YzIzLTg1MGUtMDY0MzdmZTdiNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARbbrA07y9mBJJeV2zcmIR3gZY4ivr0r2yu8l7zwDFku2Ceal8FLEQ u7A86gcZb7b6PfDeYTCfG+UyLV897vrDgM+xvw+Ti+Qa+K913CaLbsClVsnaFtW7 7kHJ0/Zh7wN8Gtw4Ea4knU7qoaEOJBiPcjnjR7/FwdL/5gpQ5RKF+7z0e6wal9BF d4vIsBfwXMd5N1tvd6L++AKzzZS85zn/Fr+7faSx2hbsC/8CLraMkn2cxvOy5lYM r8+1nyhkPD0/zwD0roqYADO9ymWXzBbNtkaOcGEYMNyeMUbj7veuBrNCrRqJN8hu koH6NSmoI6S/4Tx3HLvA/QkMqrTw23tD -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:15 2025 by rpki-client