$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79f340b8-750d-3e0a-8e1d-7de38e986de0.roa File: 79f340b8-750d-3e0a-8e1d-7de38e986de0.roa (raw, json) Hash identifier: vU2L0u0Crrs7u0LwYHSqqM/dmH5Xza61oMw0IneUWas= Subject key identifier: 97:2E:86:07:49:D7:A6:F6:C5:AD:ED:6B:F7:8A:55:93:80:57:E6:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73590944636442BD78EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79f340b8-750d-3e0a-8e1d-7de38e986de0.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396608 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:35:90:94:46:36:44:2b:d7:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4bb4708b-365f-4a44-904c-6d0890646d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ec:1b:d6:40:a4:d6:8b:1a:4a:82:49:df:64: a4:c5:07:ab:b5:8f:d8:a8:03:fa:47:86:42:e7:84: 52:19:39:96:2f:98:c1:d9:db:9c:03:a9:8b:60:3c: a3:65:c3:90:79:16:70:76:49:ff:b2:2b:81:ee:1e: 72:e5:2f:a9:09:1e:91:f8:a0:cc:cb:5c:20:21:b5: 8b:54:6f:0d:20:9e:92:c2:97:4e:c5:bb:61:70:77: 9c:57:e1:da:f8:47:e9:3a:56:37:aa:09:61:ae:65: ac:d5:a3:d7:1a:85:5b:20:99:19:75:cc:5b:07:fb: d3:91:5b:d9:96:e5:0d:0a:6f:f1:5c:ff:e7:03:e8: 88:7e:88:89:60:5f:40:22:7c:d8:55:ff:ea:62:29: be:74:6d:a3:5a:d4:6a:05:a1:15:60:be:15:d9:29: 6b:19:af:c7:53:60:ca:ec:3f:47:ef:9e:68:b6:ee: 92:e4:87:a8:b1:ef:69:63:73:9f:3c:7f:ff:cb:24: 46:7f:26:de:56:59:6b:b6:e2:a7:31:cf:86:84:c0: 18:11:19:84:5e:b5:fa:68:12:cf:11:5d:cd:0c:8c: fe:45:4f:7f:91:e9:dd:60:0b:2a:75:84:b8:70:37: 5f:4e:87:16:11:16:3a:09:16:ed:23:d6:07:83:23: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2E:86:07:49:D7:A6:F6:C5:AD:ED:6B:F7:8A:55:93:80:57:E6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/79f340b8-750d-3e0a-8e1d-7de38e986de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:0b:21:9e:b4:ce:2a:2e:1f:66:df:88:b6:91:2e:05:02:d6: f2:5e:07:ff:73:a0:16:82:4d:13:b3:2d:a1:59:cc:da:75:b6: 99:0c:cd:1f:50:f7:f2:1f:1f:5f:ee:2f:89:b2:9c:28:67:79: 30:39:53:82:76:d1:21:cf:1a:36:8c:67:9a:1b:b0:ef:06:46: 6f:3f:9a:96:e6:3a:d0:a5:04:5b:67:78:f8:9e:7b:f9:4a:c8: 50:95:00:fb:40:d9:0a:55:bc:51:64:fe:df:7e:19:e3:3c:e6: 21:c2:ca:49:32:c8:63:5a:2b:24:5a:70:e9:f4:4e:40:4d:71: 35:0f:68:a6:ef:1e:f7:0f:a2:10:2b:da:5a:9a:ce:bf:8e:bf: 34:39:ab:29:e4:a0:3b:b8:78:d3:e0:ac:a1:97:a9:b8:9d:90: d2:51:92:3d:ce:88:a7:40:51:1a:4d:67:a8:34:6a:5f:bb:9b: ea:2a:29:63:7a:f5:34:8a:fc:de:01:02:09:a7:17:cb:f9:78: 57:cd:ad:15:79:5b:6a:7d:33:9b:c3:fb:f3:49:39:c8:07:b0: 7b:38:75:57:29:10:4a:11:19:b8:05:b4:6e:d7:aa:78:6b:d0: dd:e4:34:a1:a1:2e:8b:64:e0:40:02:1d:25:86:c2:7d:79:83: c7:b9:85:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zWQlEY2RCvXjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGJiNDcwOGItMzY1Zi00YTQ0LTkwNGMtNmQwODkwNjQ2ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOwb1kCk1osaSoJJ32SkxQertY/YqAP6R4ZC 54RSGTmWL5jB2ducA6mLYDyjZcOQeRZwdkn/siuB7h5y5S+pCR6R+KDMy1wgIbWL VG8NIJ6SwpdOxbthcHecV+Ha+EfpOlY3qglhrmWs1aPXGoVbIJkZdcxbB/vTkVvZ luUNCm/xXP/nA+iIfoiJYF9AInzYVf/qYim+dG2jWtRqBaEVYL4V2SlrGa/HU2DK 7D9H755otu6S5Ieose9pY3OfPH//yyRGfybeVllrtuKnMc+GhMAYERmEXrX6aBLP EV3NDIz+RU9/kendYAsqdYS4cDdfTocWERY6CRbtI9YHgyMZnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJcuhgdJ16b2xa3ta/eKVZOAV+aMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzlmMzQwYjgtNzUwZC0z ZTBhLThlMWQtN2RlMzhlOTg2ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxCyGetM4qLh9m34i2kS4FAtbyXgf/c6AWgk0Tsy2hWczadbaZDM0f UPfyHx9f7i+JspwoZ3kwOVOCdtEhzxo2jGeaG7DvBkZvP5qW5jrQpQRbZ3j4nnv5 SshQlQD7QNkKVbxRZP7ffhnjPOYhwspJMshjWiskWnDp9E5ATXE1D2im7x73D6IQ K9pams6/jr80Oasp5KA7uHjT4Kyhl6m4nZDSUZI9zoinQFEaTWeoNGpfu5vqKilj evU0ivzeAQIJpxfL+XhXza0VeVtqfTObw/vzSTnIB7B7OHVXKRBKERm4BbRu16p4 a9Dd5DShoS6LZOBAAh0lhsJ9eYPHuYW4 -----END CERTIFICATE-----Generated at Wed Oct 29 20:43:06 2025 by rpki-client