$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa File: 60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa (raw, json) Hash identifier: 6r9bl4zC2VTrSIurPiKKLxKEZvAw6bsxRMDXC2n1fCA= Subject key identifier: 79:1E:62:AA:4F:32:56:10:DE:D9:7D:23:EB:AC:C8:DE:A0:A5:43:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB23CBD527AC06F776240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396584 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:3c:bd:52:7a:c0:6f:77:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=15c19c9f-3362-45fc-bd1d-ff1af8c975cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:36:93:38:ac:05:fa:4f:2e:4d:97:af:b7: 66:27:6e:2f:45:54:ba:68:df:23:b9:9e:0f:c2:e6: b9:11:54:42:d5:f8:06:d2:6e:25:02:eb:30:43:4c: bf:98:ac:01:b1:62:f7:f6:61:19:17:de:94:9a:5b: 31:35:3a:f8:0c:78:8c:23:f7:a9:5d:d5:15:2d:dc: aa:16:46:c3:f5:17:36:8c:a3:a0:e8:1b:a2:c1:ef: 6c:b4:88:65:33:a7:e8:b6:8f:b1:b5:6f:24:bb:94: 3f:4e:36:94:a9:9f:24:8b:56:64:3f:b7:cd:94:40: 8b:fb:8b:92:76:66:3e:fe:49:ce:43:d3:03:4b:29: 4f:8a:d2:0d:fe:4a:2f:2d:6d:d9:26:30:55:89:76: 97:f8:9a:3d:77:50:a9:5c:8b:37:4e:cf:2b:25:88: 7a:52:2b:b9:a2:32:e3:0e:54:2a:b3:d4:06:56:1a: df:27:6e:a6:12:18:b0:44:e4:9a:f6:a8:5b:78:12: 2b:8b:5b:0c:e0:03:34:39:d8:56:a7:b6:24:fb:c7: db:4a:5d:b2:fe:24:20:6c:eb:05:dd:2e:73:c4:1b: 5d:67:fd:9e:df:ac:bb:ea:e3:17:a7:d4:a1:49:1f: d0:24:d9:69:1e:cd:05:a0:35:de:54:de:d2:ca:77: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:62:AA:4F:32:56:10:DE:D9:7D:23:EB:AC:C8:DE:A0:A5:43:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:75:1a:1d:58:96:ea:79:5e:bc:19:82:d4:bc:8c:e5:96:44: a8:aa:dc:5a:b1:13:cf:23:48:a2:8f:d6:79:8a:26:5f:c9:a5: fb:3a:e6:21:b8:4c:ac:09:c0:bd:f5:13:20:3a:4c:a0:fc:d0: b8:60:f6:8f:b3:42:0c:d8:89:bd:3a:d6:df:ef:d5:69:f0:0a: d2:38:6f:5b:b5:8a:f6:ce:89:5e:c1:96:db:4d:cd:e3:3c:d1: 29:ee:48:7d:a9:67:e8:94:ba:89:96:04:0d:12:9b:b7:c0:d3: 0f:0e:55:15:53:96:09:5d:d3:28:09:01:db:c2:ba:ae:4b:ba: ef:73:0e:ef:92:a8:b7:65:8e:de:e5:d8:37:a6:fb:53:0e:11: d5:37:1d:52:c7:4f:c8:51:b4:8c:19:54:85:86:a2:81:d7:61: 3d:4d:e5:fc:27:74:a8:6d:28:c4:23:f2:2b:98:b5:d4:b1:bf: 74:a2:91:be:e3:4f:8b:c4:07:f3:be:ac:47:a0:5b:a3:39:e2: b7:b2:94:3b:96:21:33:d7:06:52:e2:29:7f:94:c7:f5:9f:64: 4b:db:e2:0b:c6:cd:93:ba:7e:c4:24:ac:94:ff:bf:26:ae:26: f8:20:98:cc:69:07:5b:b1:11:d2:ca:ea:6d:06:92:a4:9f:d8: 76:4e:76:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLI8vVJ6wG93YkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTVjMTljOWYtMzM2Mi00NWZjLWJkMWQtZmYxYWY4Yzk3NWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkI2kzisBfpPLk2Xr7dmJ24vRVS6aN8juZ4P wua5EVRC1fgG0m4lAuswQ0y/mKwBsWL39mEZF96UmlsxNTr4DHiMI/epXdUVLdyq FkbD9Rc2jKOg6Buiwe9stIhlM6foto+xtW8ku5Q/TjaUqZ8ki1ZkP7fNlECL+4uS dmY+/knOQ9MDSylPitIN/kovLW3ZJjBViXaX+Jo9d1CpXIs3Ts8rJYh6Uiu5ojLj DlQqs9QGVhrfJ26mEhiwROSa9qhbeBIri1sM4AM0OdhWp7Yk+8fbSl2y/iQgbOsF 3S5zxBtdZ/2e36y76uMXp9ShSR/QJNlpHs0FoDXeVN7SyndmfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkeYqpPMlYQ3tl9I+usyN6gpUMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBlYTliNDYtZjRlMC0z ZjhjLWE3MzAtZTVhOWQyNzlhNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp1Gh1Ylup5XrwZgtS8jOWWRKiq3FqxE88jSKKP1nmKJl/Jpfs65iG4 TKwJwL31EyA6TKD80Lhg9o+zQgzYib061t/v1WnwCtI4b1u1ivbOiV7BlttNzeM8 0SnuSH2pZ+iUuomWBA0Sm7fA0w8OVRVTlgld0ygJAdvCuq5Luu9zDu+SqLdljt7l 2Dem+1MOEdU3HVLHT8hRtIwZVIWGooHXYT1N5fwndKhtKMQj8iuYtdSxv3Sikb7j T4vEB/O+rEegW6M54reylDuWITPXBlLiKX+Ux/WfZEvb4gvGzZO6fsQkrJT/vyau JvggmMxpB1uxEdLK6m0GkqSf2HZOdlA= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:25 2025 by rpki-client