$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/737b188c-e6b5-3ae7-b443-ec59725a32c6.roa File: 737b188c-e6b5-3ae7-b443-ec59725a32c6.roa (raw, json) Hash identifier: fD9TiliESkASdZYB+ecIKFgrndUTnCRvwoMvBz0F/wY= Subject key identifier: 08:12:0F:3F:94:AB:A3:C7:60:F8:6F:A0:72:9C:B6:80:BC:EB:1E:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB47E1547BAE6D5155A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/737b188c-e6b5-3ae7-b443-ec59725a32c6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396583 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b4:7e:15:47:ba:e6:d5:15:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4dbdc02c-4f52-4311-a408-14d69f32ab74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:04:c1:92:32:d1:8f:f1:e7:8d:a4:36:b0: e7:5a:aa:06:60:f3:fa:23:48:6b:2c:40:6b:c1:d3: 76:0b:71:7d:f4:04:0f:eb:b1:d1:9a:3a:13:f1:4b: 1f:ff:d2:b8:39:31:78:23:a2:a6:37:84:98:c5:9b: da:b5:30:25:82:dd:19:4e:12:be:e2:ae:94:25:bb: 11:52:ea:62:06:fc:6a:72:65:ad:de:6c:ce:29:19: 77:3d:2a:f6:e5:2d:0a:23:60:c8:ee:c7:05:dc:29: c0:45:40:4d:88:46:07:d1:f4:8e:8c:96:dc:67:f0: 00:85:62:ac:64:aa:1b:fd:7f:36:de:ad:d4:6a:39: ba:0d:d0:2a:fd:b2:33:21:84:32:82:3f:75:08:59: 8f:31:82:21:bd:8a:c0:d0:d2:78:78:f5:60:bf:4e: fa:83:2d:f5:4f:2b:df:00:69:99:c5:09:b5:a5:a4: 4c:12:98:01:06:0e:6f:5d:a6:27:35:27:71:d4:04: e5:e0:ad:d9:6b:8f:4a:25:fd:f4:b5:c2:88:bd:dc: 58:f9:ee:de:60:71:60:3a:15:03:1d:9e:95:77:45: e4:5b:cd:2c:f7:f0:75:84:18:ca:80:a4:3a:57:75: 6f:44:8a:40:a8:60:e8:f7:83:38:97:ef:6e:42:15: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:0F:3F:94:AB:A3:C7:60:F8:6F:A0:72:9C:B6:80:BC:EB:1E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/737b188c-e6b5-3ae7-b443-ec59725a32c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3d:00:06:42:c0:d9:51:5d:ce:df:55:af:31:ef:95:4e:a4: 8f:65:66:c8:cf:ef:5c:1d:6e:d6:f3:aa:9b:77:3b:33:4c:ef: d1:0e:01:df:bd:47:91:38:47:12:ea:46:3f:30:39:30:74:61: c4:68:c3:b6:70:87:02:1e:53:04:44:66:94:4c:01:c0:e2:70: 7e:1f:5d:22:47:e1:cc:4b:1c:12:40:d0:f7:d2:a7:a7:54:41: eb:3f:82:d5:c2:4d:1b:3a:00:92:14:b4:b5:bb:81:7a:5d:22: 51:3d:37:bb:05:69:38:09:66:4f:45:46:13:7a:b3:51:0a:21: f4:02:1c:cf:2d:7d:e1:8e:5b:13:c1:69:b5:af:82:e6:ca:10: 7b:13:e5:eb:c8:c5:fc:75:0d:94:1c:c9:cd:d9:15:a4:0d:b6: b6:6d:14:a5:af:ff:a6:87:9e:70:28:27:47:b6:01:d4:aa:29: 7e:1d:a1:52:1a:3b:42:48:89:4a:5f:8f:ed:63:1f:df:c2:c5: 42:6b:89:43:ef:c1:25:f3:36:45:b7:45:d3:f8:c1:ed:89:a3: 87:58:23:71:67:d2:d3:fd:17:a3:8f:1d:48:4d:b4:85:b5:0d: 4c:a0:0c:48:1f:4b:6f:7d:6b:f5:34:71:95:b7:fb:65:e5:21: 3f:59:32:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLR+FUe65tUVWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGRiZGMwMmMtNGY1Mi00MzExLWE0MDgtMTRkNjlmMzJhYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLAEwZIy0Y/x542kNrDnWqoGYPP6I0hrLEBr wdN2C3F99AQP67HRmjoT8Usf/9K4OTF4I6KmN4SYxZvatTAlgt0ZThK+4q6UJbsR UupiBvxqcmWt3mzOKRl3PSr25S0KI2DI7scF3CnARUBNiEYH0fSOjJbcZ/AAhWKs ZKob/X823q3Uajm6DdAq/bIzIYQygj91CFmPMYIhvYrA0NJ4ePVgv076gy31Tyvf AGmZxQm1paRMEpgBBg5vXaYnNSdx1ATl4K3Za49KJf30tcKIvdxY+e7eYHFgOhUD HZ6Vd0XkW80s9/B1hBjKgKQ6V3VvRIpAqGDo94M4l+9uQhWWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgSDz+Uq6PHYPhvoHKctoC86x4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM3YjE4OGMtZTZiNS0z YWU3LWI0NDMtZWM1OTcyNWEzMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB09AAZCwNlRXc7fVa8x75VOpI9lZsjP71wdbtbzqpt3OzNM79EOAd+9 R5E4RxLqRj8wOTB0YcRow7ZwhwIeUwREZpRMAcDicH4fXSJH4cxLHBJA0PfSp6dU Qes/gtXCTRs6AJIUtLW7gXpdIlE9N7sFaTgJZk9FRhN6s1EKIfQCHM8tfeGOWxPB abWvgubKEHsT5evIxfx1DZQcyc3ZFaQNtrZtFKWv/6aHnnAoJ0e2AdSqKX4doVIa O0JIiUpfj+1jH9/CxUJriUPvwSXzNkW3RdP4we2Jo4dYI3Fn0tP9F6OPHUhNtIW1 DUygDEgfS299a/U0cZW3+2XlIT9ZMqo= -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:33 2025 by rpki-client