$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa File: 9d19bf96-c01d-3102-8066-d9ae826a6e76.roa (raw, json) Hash identifier: lU8ZpqtK+bFWIl/2GBR+mhKz5tYjXBEkpTQhGXDq884= Subject key identifier: 01:EE:DD:A8:E5:80:F7:5F:9A:48:49:7F:5F:B7:40:E8:0A:FF:75:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E73992406E9BBE5B80AF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396600 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:39:92:40:6e:9b:be:5b:80:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=10075dc1-138a-485b-afde-bf23bc9ed2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:ff:71:bd:7a:50:df:38:0b:2b:c4:38:a5: 81:af:6c:20:3c:bd:22:a4:3b:1b:53:3b:99:91:88: d4:cb:26:8f:de:8f:e3:73:bc:c5:f7:87:fe:5a:91: b5:f9:2c:f7:91:c5:3a:e7:70:37:72:e1:d3:e5:a3: dc:a9:99:ea:7c:6d:1f:64:00:45:00:7c:20:2c:29: b0:31:0a:67:2f:56:8a:81:7b:81:65:c7:a1:cb:42: b7:d0:ca:8b:3f:88:74:2c:86:6a:ab:bd:7d:57:c0: 95:29:46:28:d2:a3:b1:dd:a2:d4:26:19:82:b5:cd: 7a:3c:77:be:e5:ef:c1:ed:7a:ef:b5:f3:a9:72:d6: 96:29:0e:90:09:63:f8:f6:f5:b9:74:dd:65:97:8b: bc:72:7e:ed:36:15:40:48:54:49:b6:79:52:09:0e: 8b:3c:88:04:e3:b6:ea:02:0c:89:3f:fc:13:48:b0: ed:39:7c:de:78:24:fa:c5:d8:1d:e0:b7:7a:e8:c4: bb:7c:bf:7e:00:67:68:54:50:cc:bf:83:d8:d7:1c: a7:9e:7e:d4:ca:32:b2:83:60:88:9c:3b:ff:d9:b2: 08:b1:9a:31:3e:27:6d:46:c5:c9:15:7c:a7:8a:79: 3d:b0:d7:f1:4f:c2:8c:1f:d1:b6:11:a7:e6:c9:d5: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:DD:A8:E5:80:F7:5F:9A:48:49:7F:5F:B7:40:E8:0A:FF:75:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fb:d0:64:43:d4:50:4d:c1:14:29:68:f2:18:59:fd:1b:2c: 13:c1:ee:cf:b8:ae:6c:c8:5e:cc:c4:07:f4:ef:b9:b4:18:ad: aa:3f:6a:a2:f0:93:c6:c2:8b:13:7c:39:2c:12:99:d3:18:ab: 3e:a3:54:5a:41:d7:aa:9a:71:f9:23:20:ba:b6:58:76:d9:89: 60:fa:ca:aa:10:4f:2c:38:ed:32:ee:86:2a:49:ed:0f:4f:b0: 6c:36:ec:a9:18:37:0a:bd:b0:48:ae:d8:c9:7c:55:35:ce:ef: 83:0a:b0:91:f4:f3:2f:54:6c:8f:1e:95:41:04:0b:5c:00:ee: 01:9a:25:ba:45:51:ac:23:d8:dc:0b:c0:ec:4d:b8:f2:ef:9f: 88:26:aa:68:4d:57:26:fe:42:62:f6:a0:cf:aa:00:ae:00:bb: 76:fd:da:fa:24:aa:eb:9d:a4:5d:d8:e4:c6:99:65:96:77:c6: d5:72:30:8e:9b:57:d3:49:a6:e3:42:e9:ad:09:91:f2:40:0e: 70:b4:d5:5c:8b:22:a4:d5:9d:bf:de:a3:fc:0c:69:7e:6f:cd: fb:99:28:75:7e:1d:41:fd:c2:32:4f:de:2f:08:29:89:fc:fa: 15:98:90:a6:5a:c3:c4:ba:d7:f9:90:ae:f0:30:57:91:23:70: 21:c9:51:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zmSQG6bvluArwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MTAwNzVkYzEtMTM4YS00ODViLWFmZGUtYmYyM2JjOWVkMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gX/cb16UN84CyvEOKWBr2wgPL0ipDsbUzuZ kYjUyyaP3o/jc7zF94f+WpG1+Sz3kcU653A3cuHT5aPcqZnqfG0fZABFAHwgLCmw MQpnL1aKgXuBZcehy0K30MqLP4h0LIZqq719V8CVKUYo0qOx3aLUJhmCtc16PHe+ 5e/B7XrvtfOpctaWKQ6QCWP49vW5dN1ll4u8cn7tNhVASFRJtnlSCQ6LPIgE47bq AgyJP/wTSLDtOXzeeCT6xdgd4Ld66MS7fL9+AGdoVFDMv4PY1xynnn7UyjKyg2CI nDv/2bIIsZoxPidtRsXJFXynink9sNfxT8KMH9G2EafmydVBpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAHu3ajlgPdfmkhJf1+3QOgK/3WHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQxOWJmOTYtYzAxZC0z MTAyLTgwNjYtZDlhZTgyNmE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB++9BkQ9RQTcEUKWjyGFn9GywTwe7PuK5syF7MxAf077m0GK2qP2qi 8JPGwosTfDksEpnTGKs+o1RaQdeqmnH5IyC6tlh22Ylg+sqqEE8sOO0y7oYqSe0P T7BsNuypGDcKvbBIrtjJfFU1zu+DCrCR9PMvVGyPHpVBBAtcAO4BmiW6RVGsI9jc C8DsTbjy75+IJqpoTVcm/kJi9qDPqgCuALt2/dr6JKrrnaRd2OTGmWWWd8bVcjCO m1fTSabjQumtCZHyQA5wtNVciyKk1Z2/3qP8DGl+b837mSh1fh1B/cIyT94vCCmJ /PoVmJCmWsPEutf5kK7wMFeRI3AhyVHG -----END CERTIFICATE-----Generated at Wed Oct 29 20:43:01 2025 by rpki-client