$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa File: 8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa (raw, json) Hash identifier: 8QpU1uoPp4Uy7Z5PsaTwPxnJAbwpgWW8YNyRXaTy+8A= Subject key identifier: BC:15:76:10:B2:58:58:D7:18:34:9B:33:3C:98:4B:F6:49:AA:01:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73212A7ED80737D1A8240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396575 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:32:12:a7:ed:80:73:7d:1a:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4e1ffe9f-635d-4a68-83cc-2b832c026ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:76:a7:f7:7c:18:d5:b0:20:a2:36:80:e4:52: b8:52:fe:8b:a8:2a:38:0a:73:38:7b:4e:92:18:d9: 68:15:d5:4c:a1:f2:8c:41:e2:c6:9a:70:9c:49:77: 37:e8:2e:aa:33:03:a9:10:c9:8d:61:db:88:20:9a: 24:08:29:1f:6c:0d:76:3b:d3:25:0e:21:42:1e:cb: 7a:e4:8c:ff:b8:c4:74:6b:79:f8:c0:02:36:f6:bc: 17:ce:87:70:e8:3d:4e:35:66:3c:62:e4:c2:37:ef: 5c:cd:f9:9e:90:cc:f9:4d:d7:f8:0d:e3:a5:08:20: 76:dc:37:59:53:36:1c:fe:69:0a:94:00:6e:19:d0: 7f:94:48:6a:92:95:36:f3:e4:04:2e:7f:5c:74:dc: 6b:13:dd:ec:58:f1:8b:bc:9d:d7:be:64:50:1c:3f: b8:11:9f:97:3b:61:31:ee:5e:4d:97:5b:f6:0d:35: 89:ac:76:53:be:ba:5b:ef:f1:c3:aa:b3:35:5d:85: 04:d6:d0:c5:60:c0:a5:e5:dc:59:84:62:a4:8d:ec: 84:ff:87:04:f6:e1:c8:cf:8c:76:9b:3a:a5:09:1f: ab:b7:4a:5e:09:78:cf:ff:5e:0c:2c:70:d4:55:30: 88:35:bc:2a:aa:2f:2e:43:8d:76:9a:e0:87:ce:08: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:15:76:10:B2:58:58:D7:18:34:9B:33:3C:98:4B:F6:49:AA:01:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8d:fc:1f:30:aa:43:80:15:d2:3e:67:d3:ac:45:1f:94:a8: 48:b1:de:9b:38:a8:1f:41:dd:06:bc:7a:f6:f5:00:0b:62:a2: ce:34:52:5e:d6:e3:a9:fe:92:c0:4d:50:e5:79:85:d3:49:cc: 3c:48:ba:b4:85:b1:6f:0d:2d:7a:3d:19:5b:97:63:e6:7f:8b: 55:df:4d:4e:03:e5:30:56:76:99:d6:c2:b0:7e:a9:60:95:c9: 43:1b:d5:0d:1d:10:6a:75:4a:ab:90:6b:f5:22:59:6f:7e:d4: d6:a0:a0:ac:20:d0:82:ab:fa:14:1e:d9:ac:9f:d5:97:8b:08: 2e:47:d9:4b:24:09:c7:5f:6a:4a:e3:36:c3:e8:fd:4b:e0:71: bc:95:08:d5:59:9d:37:5b:8a:15:4d:89:b5:9f:1c:1c:90:cb: 32:7b:74:b2:6e:45:86:ce:ec:92:40:42:97:77:1a:a4:cb:c9: d9:1b:5a:4d:24:70:f1:44:75:28:a6:4a:47:c0:66:7c:e2:00: 85:df:18:16:e7:51:0e:9a:47:9d:c6:05:99:99:c8:ad:72:e5: cd:ae:61:ac:7a:f3:3b:5e:30:21:56:23:3d:e2:8f:49:d7:a2: e1:35:76:72:97:18:f5:33:b2:e4:c8:ff:96:48:75:51:40:4b: 44:73:de:4b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zISp+2Ac30agkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGUxZmZlOWYtNjM1ZC00YTY4LTgzY2MtMmI4MzJjMDI2ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63an93wY1bAgojaA5FK4Uv6LqCo4CnM4e06S GNloFdVMofKMQeLGmnCcSXc36C6qMwOpEMmNYduIIJokCCkfbA12O9MlDiFCHst6 5Iz/uMR0a3n4wAI29rwXzodw6D1ONWY8YuTCN+9czfmekMz5Tdf4DeOlCCB23DdZ UzYc/mkKlABuGdB/lEhqkpU28+QELn9cdNxrE93sWPGLvJ3XvmRQHD+4EZ+XO2Ex 7l5Nl1v2DTWJrHZTvrpb7/HDqrM1XYUE1tDFYMCl5dxZhGKkjeyE/4cE9uHIz4x2 mzqlCR+rt0peCXjP/14MLHDUVTCINbwqqi8uQ412muCHzgj/hwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLwVdhCyWFjXGDSbMzyYS/ZJqgG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGExZWFkMTEtMWNmNi0z ZTlkLWJiZjAtOGQ2MDg1ZmVjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHjfwfMKpDgBXSPmfTrEUflKhIsd6bOKgfQd0GvHr29QALYqLONFJe 1uOp/pLATVDleYXTScw8SLq0hbFvDS16PRlbl2Pmf4tV301OA+UwVnaZ1sKwfqlg lclDG9UNHRBqdUqrkGv1IllvftTWoKCsINCCq/oUHtmsn9WXiwguR9lLJAnHX2pK 4zbD6P1L4HG8lQjVWZ03W4oVTYm1nxwckMsye3SybkWGzuySQEKXdxqky8nZG1pN JHDxRHUopkpHwGZ84gCF3xgW51EOmkedxgWZmcitcuXNrmGsevM7XjAhViM94o9J 16LhNXZylxj1M7LkyP+WSHVRQEtEc95L -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:14 2025 by rpki-client