$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa File: 4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa (raw, json) Hash identifier: OqEOHehaol3OysoYO8dvtH7sJ4b9gJ6MRFA0hw6i0fo= Subject key identifier: F8:E5:0A:72:72:7F:50:F3:0B:19:BE:B5:95:98:5E:AD:C9:85:C5:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E730AE85BCDC44A1E10280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36631 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:ae:85:bc:dc:44:a1:e1:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=1c7b73f2-1b5e-4f23-835d-1693868f152b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:14:a1:a0:ce:3d:fb:08:d1:9e:0c:ff:4b: 84:41:cb:84:18:38:3d:f6:5f:0a:f0:a9:26:16:27: f1:c1:56:e9:a1:36:ba:0b:f9:21:6a:ba:43:3d:c9: 77:b9:3e:f3:7b:c1:af:66:ab:89:75:a1:d8:f9:6b: 36:bc:4f:1d:7c:e8:82:b6:f3:8b:0c:07:58:92:36: 71:2d:c5:8d:60:47:04:79:e7:c5:7f:d5:9f:80:c9: 9f:91:fa:a2:ac:44:81:dd:6d:65:39:48:1f:fa:2d: cc:27:b8:78:fa:89:2c:0e:47:55:c3:81:77:72:e9: 0f:d7:25:ea:08:1c:c2:40:3d:b3:ef:7e:a8:bd:c7: 40:ed:d8:7d:df:8d:ad:02:cb:e8:5e:e0:75:d5:0b: 4c:fa:ee:59:22:c5:4b:1d:ec:f2:df:3a:7c:98:96: 52:58:bf:cb:61:be:b6:24:9d:1a:ff:18:f1:ee:0d: 30:60:8c:11:a1:65:3d:e7:b0:0a:79:d7:da:42:ee: 30:02:94:f7:38:a3:50:55:30:e3:c7:b0:94:a2:60: 9a:0f:d7:1d:bd:84:de:fe:4e:6a:cd:80:ed:a3:2f: 40:55:e1:c7:a8:55:e0:43:5c:84:4d:49:62:e7:94: 83:05:3b:7c:c5:6d:14:19:5f:af:30:bf:54:0f:05: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E5:0A:72:72:7F:50:F3:0B:19:BE:B5:95:98:5E:AD:C9:85:C5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:31:57:31:49:0c:5f:80:d2:9b:de:c2:d3:8a:85:45:6b:00: c8:60:35:e1:85:41:1c:57:2a:0d:a2:24:13:aa:4f:fb:db:78: cb:0e:ee:98:39:94:3b:85:25:e9:10:d4:7b:a6:48:5a:8f:81: 8e:aa:f0:78:22:68:56:1a:c9:12:5a:41:41:c2:06:5a:fb:53: f5:ec:56:d8:4b:c5:e0:91:ba:79:22:c3:93:f1:2a:93:27:c7: 21:2d:65:1b:97:e1:93:99:c0:91:02:45:05:ab:cd:bf:6c:35: 1b:ba:46:35:e6:69:0a:d0:99:b9:f8:43:ef:49:2d:93:fb:48: e8:e6:16:ee:28:a2:1f:be:7a:8f:cf:00:0b:7c:d8:2e:56:5b: aa:59:5c:e6:d0:46:9e:13:12:b4:a6:a1:cb:09:d3:ed:bb:8c: 27:68:64:43:66:40:72:89:5d:60:74:b9:09:5e:90:74:ba:8c: 20:79:b3:b6:05:24:ba:59:5d:ca:6e:86:30:d4:be:de:af:de: a5:09:c0:15:af:bd:2f:46:13:7a:b7:53:13:c0:8c:f8:4a:dd: 0b:7e:39:94:cc:81:3c:a4:98:0d:61:81:7b:0f:32:4f:79:12: 27:14:87:6e:db:c6:87:2a:71:f8:46:f2:1a:7c:7e:dd:4b:dd: 03:46:9a:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zCuhbzcRKHhAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MWM3YjczZjItMWI1ZS00ZjIzLTgzNWQtMTY5Mzg2OGYxNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorEUoaDOPfsI0Z4M/0uEQcuEGDg99l8K8Kkm FifxwVbpoTa6C/kharpDPcl3uT7ze8GvZquJdaHY+Ws2vE8dfOiCtvOLDAdYkjZx LcWNYEcEeefFf9WfgMmfkfqirESB3W1lOUgf+i3MJ7h4+oksDkdVw4F3cukP1yXq CBzCQD2z736ovcdA7dh9342tAsvoXuB11QtM+u5ZIsVLHezy3zp8mJZSWL/LYb62 JJ0a/xjx7g0wYIwRoWU957AKedfaQu4wApT3OKNQVTDjx7CUomCaD9cdvYTe/k5q zYDtoy9AVeHHqFXgQ1yETUli55SDBTt8xW0UGV+vML9UDwWlywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPjlCnJyf1DzCxm+tZWYXq3JhcXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmYTZlZDgtYmM4Mi0z ZWE1LWJmYzYtN2IyZjg2MDMzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWMVcxSQxfgNKb3sLTioVFawDIYDXhhUEcVyoNoiQTqk/723jLDu6Y OZQ7hSXpENR7pkhaj4GOqvB4ImhWGskSWkFBwgZa+1P17FbYS8Xgkbp5IsOT8SqT J8chLWUbl+GTmcCRAkUFq82/bDUbukY15mkK0Jm5+EPvSS2T+0jo5hbuKKIfvnqP zwALfNguVluqWVzm0EaeExK0pqHLCdPtu4wnaGRDZkByiV1gdLkJXpB0uowgebO2 BSS6WV3KboYw1L7er96lCcAVr70vRhN6t1MTwIz4St0LfjmUzIE8pJgNYYF7DzJP eRInFIdu28aHKnH4RvIafH7dS90DRpqT -----END CERTIFICATE-----Generated at Wed Oct 29 20:26:12 2025 by rpki-client