$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa File: 6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa (raw, json) Hash identifier: DM2Bme52rVV6t1TAS4sdBRoMDrrRCV+tXDavYuLOOxY= Subject key identifier: 8F:0B:96:79:E1:90:B6:6A:EF:BD:C5:82:46:49:CA:F5:30:82:89:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB1E4E71F139BE263B738 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396540 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b1:e4:e7:1f:13:9b:e2:63:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=73de9ed4-d5f1-4a26-a797-90f5f0869804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:0c:fc:57:f8:28:a8:2a:e3:9f:c6:42:76: 1a:cd:e3:4d:e2:7f:39:25:e0:65:ac:01:c8:76:03: 67:42:8f:27:0c:ab:3c:de:5b:ae:73:32:e5:34:0e: ab:92:48:3f:dc:38:22:63:d5:7d:7c:eb:c6:e4:4a: 10:ee:2c:4d:b2:6f:e5:5a:47:69:19:c8:93:ca:ac: 82:e3:26:55:61:6c:ba:80:88:8e:6d:4f:a4:5f:d5: b2:76:d1:94:ba:10:c4:38:7e:11:e0:1b:6d:a8:aa: 9f:2d:bd:12:a8:8a:e1:8e:1d:da:c1:08:1b:4c:7e: 31:60:fb:ea:f6:6d:f9:84:49:8a:17:5e:a9:ef:5a: 97:76:80:93:7d:2d:10:2d:bf:27:af:74:aa:50:5a: 35:93:59:dd:2e:de:bc:67:1c:bf:ba:5b:2d:66:c9: c3:69:0d:04:e6:fe:17:6f:40:d5:c6:64:99:8f:e4: 94:dd:92:84:9b:77:94:ed:4c:c3:a5:ad:c8:93:da: e3:b3:47:7c:eb:cf:44:38:4b:7b:15:07:aa:5b:5d: 6b:78:36:70:27:67:0f:af:df:88:34:c8:8f:57:d0: 4d:31:d4:a0:5b:01:d6:bd:ad:ed:c3:1b:fa:f6:bf: 72:ea:25:d9:6f:43:94:52:df:63:b0:58:0f:fe:cf: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:96:79:E1:90:B6:6A:EF:BD:C5:82:46:49:CA:F5:30:82:89:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a1fc581-22a3-3f4e-9993-e72c9229f0e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:aa:2f:82:b4:fe:77:02:9b:fc:f5:b0:dc:90:a7:73:44:b4: 90:c0:e6:a8:cd:d2:b7:97:6b:34:cb:7a:08:f8:98:7c:73:17: 64:c2:6b:d7:00:0d:f7:cc:2e:2c:72:b9:fb:0b:dc:e1:03:c5: 54:7d:b8:51:52:d0:0b:9f:64:7e:f8:21:62:4d:d4:a1:6a:66: 2f:e7:90:63:41:cd:02:4f:5b:12:ae:58:b8:eb:ed:fb:98:bf: d9:03:18:34:78:cf:4e:6b:a9:a3:2b:78:84:00:59:e7:f5:53: 77:95:7d:1d:78:81:f3:cd:f0:d9:83:aa:e2:1a:0c:ba:73:34: 88:58:5b:ff:71:3a:c4:41:88:d8:95:e6:66:2c:45:e5:88:8b: 16:59:61:17:6c:aa:ad:75:c6:0b:a0:e6:59:bc:d9:4c:ae:57: c3:9f:5e:53:8d:e9:38:8e:9f:26:96:e9:46:21:12:41:a0:2c: 40:96:ae:1b:6c:1f:94:93:f6:15:bb:54:44:d7:3b:ba:d1:8e: 81:1e:ed:51:36:18:d9:d9:5b:0f:5d:5b:e0:ab:60:22:b4:58: 98:d1:3a:d4:40:b0:c3:8e:ea:73:c1:ec:a2:70:7c:66:65:6a: e3:13:da:ce:4d:2e:41:64:7b:ae:ef:a8:c4:39:64:75:25:bb: d3:ed:5b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLHk5x8Tm+JjtzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzNkZTllZDQtZDVmMS00YTI2LWE3OTctOTBmNWYwODY5ODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4gM/Ff4KKgq45/GQnYazeNN4n85JeBlrAHI dgNnQo8nDKs83luuczLlNA6rkkg/3DgiY9V9fOvG5EoQ7ixNsm/lWkdpGciTyqyC 4yZVYWy6gIiObU+kX9WydtGUuhDEOH4R4BttqKqfLb0SqIrhjh3awQgbTH4xYPvq 9m35hEmKF16p71qXdoCTfS0QLb8nr3SqUFo1k1ndLt68Zxy/ulstZsnDaQ0E5v4X b0DVxmSZj+SU3ZKEm3eU7UzDpa3Ik9rjs0d8689EOEt7FQeqW11reDZwJ2cPr9+I NMiPV9BNMdSgWwHWva3twxv69r9y6iXZb0OUUt9jsFgP/s/LUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8LlnnhkLZq773FgkZJyvUwgonFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmExZmM1ODEtMjJhMy0z ZjRlLTk5OTMtZTcyYzkyMjlmMGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2qL4K0/ncCm/z1sNyQp3NEtJDA5qjN0reXazTLegj4mHxzF2TCa9cA DffMLixyufsL3OEDxVR9uFFS0AufZH74IWJN1KFqZi/nkGNBzQJPWxKuWLjr7fuY v9kDGDR4z05rqaMreIQAWef1U3eVfR14gfPN8NmDquIaDLpzNIhYW/9xOsRBiNiV 5mYsReWIixZZYRdsqq11xgug5lm82UyuV8OfXlON6TiOnyaW6UYhEkGgLECWrhts H5ST9hW7VETXO7rRjoEe7VE2GNnZWw9dW+CrYCK0WJjROtRAsMOO6nPB7KJwfGZl auMT2s5NLkFke67vqMQ5ZHUlu9PtW+0= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:29 2025 by rpki-client