$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa File: 8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa (raw, json) Hash identifier: iSwKHXsgFRYF6WpRpHyGM6LhNWsRgiyQj19lzuEN0VQ= Subject key identifier: 91:37:94:09:1F:50:A5:F9:D8:D6:17:20:82:87:A4:DB:9D:D5:9A:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72FF268D415F0FC439400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396604 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2f:f2:68:d4:15:f0:fc:43:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=dcab831c-f779-4538-9708-d9fe139dcbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:8c:97:31:42:78:9b:eb:47:70:33:a5:d5: 64:49:d5:fd:2e:41:9b:ba:6b:a1:77:45:d1:c2:2b: 00:e7:22:75:b3:34:8b:79:9a:f1:6d:92:73:16:02: 8b:6d:5a:47:8d:21:eb:0b:8a:c1:31:07:db:c8:8d: 86:cb:57:60:70:99:16:83:4a:36:e8:8d:72:b7:ee: 07:6e:a4:90:e5:33:be:d6:ef:8a:39:ed:a1:10:17: 33:cb:6b:eb:fc:fb:d4:ae:b6:b6:32:4c:9b:2a:d7: bd:32:a5:d3:cd:10:fb:6b:b5:ff:dc:bc:1f:69:b9: 51:c4:dc:c5:0c:85:e5:11:50:5e:90:f2:35:f6:28: 1e:ff:d0:a8:e4:26:af:bd:2e:67:b5:b7:1f:01:d0: ff:92:7c:97:9a:af:52:1e:13:80:24:3e:82:e5:4b: 28:b4:23:4c:3a:6a:51:8c:c8:55:78:94:e5:6e:f8: 02:9a:b8:9f:b5:e4:55:4c:5c:0b:f1:35:c8:4c:a4: ea:eb:ba:f8:eb:c3:79:db:a3:76:9c:47:be:4a:ea: 8e:6b:08:b4:4f:a3:74:47:20:11:0b:47:e5:a0:80: e1:5d:e2:5f:dc:ad:c7:4c:58:59:89:e1:24:97:6c: 34:05:02:b7:be:7a:ef:e1:08:6f:b6:b9:ce:f9:80: a8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:94:09:1F:50:A5:F9:D8:D6:17:20:82:87:A4:DB:9D:D5:9A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c7d7982-e0ff-3ea1-8f8d-4ed279a4e192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d0:7b:08:24:ef:6f:d3:fe:af:62:80:ee:50:1d:23:95:7c: 7c:e9:43:08:7e:0c:2c:87:73:62:2f:7f:69:ce:d5:ba:c7:04: 10:b0:58:37:70:76:7b:09:96:c4:cc:3c:0b:77:0a:72:f8:c3: 2d:ca:14:34:f7:32:57:26:f0:0a:2c:72:dc:eb:9e:78:92:8b: 42:1b:fa:d0:67:5c:10:3f:08:75:4b:fb:9b:b6:5f:be:25:60: fd:87:44:87:3a:87:e9:f9:8c:85:d0:9c:e2:ef:2f:76:2f:5d: 7e:64:79:72:30:8a:7e:1d:8a:4d:ea:e3:c7:0d:f1:f4:83:cf: 30:27:dc:df:9b:ed:14:47:4f:ca:cc:07:c5:32:de:a4:e1:ab: 02:fc:bb:f7:d9:ca:8c:c8:4e:3b:7d:38:26:0f:2e:73:7d:aa: 3d:19:84:3c:da:09:81:66:44:b8:02:8d:15:83:2d:09:de:89: 3d:9b:c5:44:b7:1a:74:7c:66:af:9a:65:a9:5d:4e:fb:83:2d: 3d:64:67:06:c2:cf:86:db:30:74:d6:1d:f9:24:79:2a:a7:c1: 34:44:b6:cf:5c:d2:7a:3e:a7:07:f5:70:53:40:59:db:ca:11: 58:1e:b1:ed:35:59:bd:d8:8f:f6:15:a0:67:fb:e0:9a:fa:82: 43:1a:d8:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y/yaNQV8PxDlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGNhYjgzMWMtZjc3OS00NTM4LTk3MDgtZDlmZTEzOWRjYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv92MlzFCeJvrR3AzpdVkSdX9LkGbumuhd0XR wisA5yJ1szSLeZrxbZJzFgKLbVpHjSHrC4rBMQfbyI2Gy1dgcJkWg0o26I1yt+4H bqSQ5TO+1u+KOe2hEBczy2vr/PvUrra2MkybKte9MqXTzRD7a7X/3LwfablRxNzF DIXlEVBekPI19ige/9Co5CavvS5ntbcfAdD/knyXmq9SHhOAJD6C5UsotCNMOmpR jMhVeJTlbvgCmrifteRVTFwL8TXITKTq67r468N526N2nEe+SuqOawi0T6N0RyAR C0floIDhXeJf3K3HTFhZieEkl2w0BQK3vnrv4QhvtrnO+YCoNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJE3lAkfUKX52NYXIIKHpNud1ZoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM3ZDc5ODItZTBmZi0z ZWExLThmOGQtNGVkMjc5YTRlMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc0HsIJO9v0/6vYoDuUB0jlXx86UMIfgwsh3NiL39pztW6xwQQsFg3 cHZ7CZbEzDwLdwpy+MMtyhQ09zJXJvAKLHLc6554kotCG/rQZ1wQPwh1S/ubtl++ JWD9h0SHOofp+YyF0Jzi7y92L11+ZHlyMIp+HYpN6uPHDfH0g88wJ9zfm+0UR0/K zAfFMt6k4asC/Lv32cqMyE47fTgmDy5zfao9GYQ82gmBZkS4Ao0Vgy0J3ok9m8VE txp0fGavmmWpXU77gy09ZGcGws+G2zB01h35JHkqp8E0RLbPXNJ6PqcH9XBTQFnb yhFYHrHtNVm92I/2FaBn++Ca+oJDGtg+ -----END CERTIFICATE-----Generated at Wed Oct 29 11:39:00 2025 by rpki-client