$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa File: 4a010b08-bb23-3e72-9dae-7202b24c1df9.roa (raw, json) Hash identifier: k8oPHakby/eWCm9ZCGJrffRb2ARDL9atQ03ol2kqT3I= Subject key identifier: 8F:F5:5D:67:F6:E5:8B:43:DF:A2:4A:3F:C6:C8:DA:49:CD:13:A9:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB305528B4D00EB5674C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396613 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b3:05:52:8b:4d:00:eb:56:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=e01f07a8-258b-402f-85cf-aaab661dfe20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:25:7d:b1:b1:15:94:fe:d3:1c:90:b1:b2:11: 93:61:74:95:3b:bc:47:90:d6:d5:a4:85:4f:cb:2a: a1:0f:49:39:7a:32:ec:ea:6d:e6:82:1f:ba:8a:0e: 4d:69:62:d5:3d:49:1e:1c:59:1d:8a:75:d4:f0:82: 9b:3f:22:18:e5:8f:03:70:69:6f:65:9b:76:ff:3f: 55:ee:a8:14:3b:22:43:e1:25:cf:a5:98:fc:f7:8e: 16:4e:49:8b:b9:5b:17:e3:19:28:02:94:8b:0f:47: f0:3f:7c:a8:13:7d:6e:0e:8c:40:2b:cd:f5:7a:7e: 2b:eb:3f:33:86:d8:a0:87:c1:95:a4:d7:44:e6:b7: c0:0b:b6:2b:b6:6a:e4:bd:db:a3:b9:8d:4b:3e:10: be:40:a5:e4:3a:0a:db:b1:72:77:38:b1:8a:2a:40: 32:79:b8:df:bc:bb:6d:0e:60:76:77:ec:41:b5:30: 38:3a:06:e6:c9:ff:d1:57:7c:96:1f:0c:24:39:51: 92:cb:dd:67:05:b0:57:0c:71:f9:43:a7:9f:92:22: 47:67:78:f0:34:08:74:9b:23:81:71:38:96:1f:81: a1:9c:d4:ce:77:a1:23:55:5a:e7:29:cf:50:2d:e7: 56:bd:e6:06:b9:3c:5c:e1:bc:e3:57:cb:e8:dc:c2: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:5D:67:F6:E5:8B:43:DF:A2:4A:3F:C6:C8:DA:49:CD:13:A9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:81:01:01:57:3b:81:d8:8d:79:e7:ac:f9:5b:1b:e2:47:3a: b7:eb:38:95:d3:16:50:d4:02:9e:95:5a:e3:fb:8c:9f:15:16: 1a:0a:90:d6:a7:4f:d4:93:52:bc:1e:11:a0:99:2a:16:d6:75: 00:10:56:c3:95:26:62:b5:3f:46:df:43:60:fc:ee:52:f8:ff: 13:46:8f:4a:9f:a5:ca:6d:6f:86:ef:12:86:a9:2f:99:76:d0: ba:9c:8d:5c:12:5d:c3:22:c6:89:ca:42:09:7c:14:f9:f8:42: 53:38:9c:8f:8e:2b:48:6f:7b:e0:ec:af:46:cc:29:91:7e:f7: f0:b0:1a:a0:25:41:ec:5d:2e:ac:aa:13:bf:8c:9c:04:01:84: 08:34:62:d3:4b:fe:54:b3:29:f1:c4:de:f5:9d:ff:ba:31:c7: a8:2c:44:3b:92:ec:e5:18:b0:65:39:56:a1:ae:1c:0c:e2:33: 59:49:bf:46:09:0f:10:64:2e:9a:98:3b:0c:76:b0:d6:a1:ec: f9:e3:18:7f:e7:6d:3c:f0:57:b7:6e:0f:71:88:9f:b1:88:ee: aa:b4:0f:8b:7f:1d:93:c6:66:c8:40:d4:c9:27:50:83:cd:c0: 78:f3:d0:c1:66:ff:ee:f4:00:d0:50:1b:0d:6c:23:cd:59:7c: b7:a4:03:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLMFUotNAOtWdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTAxZjA3YTgtMjU4Yi00MDJmLTg1Y2YtYWFhYjY2MWRmZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSV9sbEVlP7THJCxshGTYXSVO7xHkNbVpIVP yyqhD0k5ejLs6m3mgh+6ig5NaWLVPUkeHFkdinXU8IKbPyIY5Y8DcGlvZZt2/z9V 7qgUOyJD4SXPpZj8944WTkmLuVsX4xkoApSLD0fwP3yoE31uDoxAK831en4r6z8z htigh8GVpNdE5rfAC7YrtmrkvdujuY1LPhC+QKXkOgrbsXJ3OLGKKkAyebjfvLtt DmB2d+xBtTA4Ogbmyf/RV3yWHwwkOVGSy91nBbBXDHH5Q6efkiJHZ3jwNAh0myOB cTiWH4GhnNTOd6EjVVrnKc9QLedWveYGuTxc4bzjV8vo3ML5awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/1XWf25YtD36JKP8bI2knNE6llMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGEwMTBiMDgtYmIyMy0z ZTcyLTlkYWUtNzIwMmIyNGMxZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+BAQFXO4HYjXnnrPlbG+JHOrfrOJXTFlDUAp6VWuP7jJ8VFhoKkNan T9STUrweEaCZKhbWdQAQVsOVJmK1P0bfQ2D87lL4/xNGj0qfpcptb4bvEoapL5l2 0LqcjVwSXcMixonKQgl8FPn4QlM4nI+OK0hve+Dsr0bMKZF+9/CwGqAlQexdLqyq E7+MnAQBhAg0YtNL/lSzKfHE3vWd/7oxx6gsRDuS7OUYsGU5VqGuHAziM1lJv0YJ DxBkLpqYOwx2sNah7PnjGH/nbTzwV7duD3GIn7GI7qq0D4t/HZPGZshA1MknUIPN wHjz0MFm/+70ANBQGw1sI81ZfLekA18= -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:15 2025 by rpki-client