$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa File: 5ca52584-7b11-32cc-94d7-eac837c5a2af.roa (raw, json) Hash identifier: xXWRh0bPfi7/YNRn20NTlJXTqAE5bQLarfBTv5w/HHw= Subject key identifier: 68:78:E0:A0:EA:F0:0D:39:D3:EE:3B:52:47:69:1C:D9:9B:EB:65:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB0204BD5E37BCEEC3080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396604 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b0:20:4b:d5:e3:7b:ce:ec:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=49028676-78bb-43da-900b-1a6cf78f51f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e0:18:1a:81:67:c0:44:65:9b:ca:fd:ac:2f: 0a:51:91:fd:7e:00:c9:c4:9f:46:40:b6:bd:4b:4b: fc:f3:15:5e:60:4d:53:50:1e:8f:62:5d:5f:9a:2c: 17:ec:2b:fa:5b:73:4b:c6:b3:b9:ac:4b:c5:a5:1d: 66:93:c5:0c:05:cd:0b:58:11:b0:34:7f:ba:8c:a5: c3:e9:f3:df:7b:66:c5:8f:70:67:ff:f3:a8:a2:5d: ff:35:b4:88:f6:a6:4e:7f:37:bf:7f:03:c2:8e:26: c4:db:d7:51:c9:c4:2f:81:5d:90:4e:24:35:f9:b6: 37:8b:5b:c7:56:1c:36:12:00:7a:b8:6f:2f:3f:ab: af:67:81:30:8f:87:23:38:a8:9b:ec:b7:6f:cb:38: 1d:2d:0e:c0:51:2a:db:f7:62:e2:d2:de:d7:5d:97: 32:3a:4f:1e:16:a7:3b:2c:c5:da:a1:76:c9:8c:cf: 93:15:63:bf:31:97:71:66:e6:cd:e4:f9:57:fe:3b: b2:c7:b6:9a:44:b7:97:a1:17:42:8c:f1:7b:f9:f5: 38:c2:9e:d0:da:c7:06:74:ef:54:ff:13:fe:d8:5f: 2a:7c:c9:47:c0:a2:73:ac:b3:55:7f:f2:e5:49:e1: 5e:55:33:a0:06:ac:13:ab:12:b7:70:ba:49:12:3a: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:E0:A0:EA:F0:0D:39:D3:EE:3B:52:47:69:1C:D9:9B:EB:65:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:21:89:0c:98:ec:cd:61:21:ff:3e:d7:98:43:3b:3f:fe:8b: 51:94:ca:69:ea:02:c4:7f:ba:c9:c6:7b:6b:7e:79:09:10:11: 80:88:e2:ba:f4:f3:fd:5a:70:c4:1f:90:a8:ff:2e:92:51:89: 71:42:fa:e9:07:8c:f8:31:c6:d9:cb:f8:1f:b7:fc:f8:a6:2f: 78:42:64:64:f4:62:51:06:f9:11:59:a3:39:e4:d1:ac:7a:5e: 16:76:ac:14:d0:e0:b5:85:4d:a0:b8:41:b2:7a:57:3a:cd:12: 63:72:1a:69:0f:07:38:d6:4a:eb:90:a3:f3:67:fa:a1:ee:56: d5:ee:2a:e8:e4:27:83:fe:dc:34:61:64:98:94:a6:9f:e2:53: c6:89:da:70:84:da:fe:5b:dd:cc:bb:f2:b9:29:71:7f:37:02: 3d:39:39:6b:81:8d:81:32:49:da:3e:59:d7:6c:65:d9:23:84: e8:bb:90:fe:93:4f:dc:65:66:2a:ee:8b:fd:35:32:ac:fd:68: 1b:45:89:76:5b:f2:e2:04:e4:23:99:c1:c2:15:27:20:37:a9: 53:0e:be:cf:67:53:88:39:69:47:f1:0e:98:93:fb:c5:d6:44: d6:de:7a:6c:d5:34:d2:1f:ff:50:85:ba:c1:b8:dc:20:ea:fb: 3f:19:65:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLAgS9Xje87sMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NDkwMjg2NzYtNzhiYi00M2RhLTkwMGItMWE2Y2Y3OGY1MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eAYGoFnwERlm8r9rC8KUZH9fgDJxJ9GQLa9 S0v88xVeYE1TUB6PYl1fmiwX7Cv6W3NLxrO5rEvFpR1mk8UMBc0LWBGwNH+6jKXD 6fPfe2bFj3Bn//Oool3/NbSI9qZOfze/fwPCjibE29dRycQvgV2QTiQ1+bY3i1vH Vhw2EgB6uG8vP6uvZ4Ewj4cjOKib7LdvyzgdLQ7AUSrb92Li0t7XXZcyOk8eFqc7 LMXaoXbJjM+TFWO/MZdxZubN5PlX/juyx7aaRLeXoRdCjPF7+fU4wp7Q2scGdO9U /xP+2F8qfMlHwKJzrLNVf/LlSeFeVTOgBqwTqxK3cLpJEjpvCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh44KDq8A050+47UkdpHNmb62U+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWNhNTI1ODQtN2IxMS0z MmNjLTk0ZDctZWFjODM3YzVhMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEhiQyY7M1hIf8+15hDOz/+i1GUymnqAsR/usnGe2t+eQkQEYCI4rr0 8/1acMQfkKj/LpJRiXFC+ukHjPgxxtnL+B+3/PimL3hCZGT0YlEG+RFZoznk0ax6 XhZ2rBTQ4LWFTaC4QbJ6VzrNEmNyGmkPBzjWSuuQo/Nn+qHuVtXuKujkJ4P+3DRh ZJiUpp/iU8aJ2nCE2v5b3cy78rkpcX83Aj05OWuBjYEySdo+WddsZdkjhOi7kP6T T9xlZirui/01Mqz9aBtFiXZb8uIE5COZwcIVJyA3qVMOvs9nU4g5aUfxDpiT+8XW RNbeemzVNNIf/1CFusG43CDq+z8ZZTM= -----END CERTIFICATE-----Generated at Wed Oct 29 11:39:39 2025 by rpki-client