$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa File: a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa (raw, json) Hash identifier: MNQZ7Rzb5nJeVJC7cKW8WaOS266LgvVLo1sH7arrYcs= Subject key identifier: CB:3D:F4:2E:BD:E5:FF:0B:F2:CF:83:C2:58:17:55:44:11:66:3B:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB40BAD476E48F8CE07A8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397201 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b4:0b:ad:47:6e:48:f8:ce:07:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ca08e7fa-acd4-45cc-bf6e-0f40cdfe3e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:1a:7f:1e:83:1f:a6:bb:86:1a:dc:a2:08: 3b:99:ed:33:3c:75:17:b3:8d:5c:5c:98:b6:a7:32: 09:11:2c:44:64:de:4f:96:a0:ba:6a:5c:2e:2d:14: 38:08:b6:ff:3b:d5:79:b1:75:05:81:6f:4c:f8:8e: f1:da:62:1b:d4:a8:ec:94:5e:d1:28:8c:c2:01:5c: 15:8b:01:9f:ed:03:49:2f:fd:81:8d:e0:06:39:00: 9e:05:ef:5f:bf:af:2f:de:9f:bc:fc:51:29:67:8c: 99:26:ce:a5:1e:c2:b0:fc:8d:c7:89:d8:a0:9d:dd: 39:ab:5f:86:a5:ae:a2:78:42:18:20:f4:a1:b7:cb: a7:23:d1:61:61:ad:1d:83:22:0e:61:17:ff:97:44: cd:94:37:8f:99:34:c8:e2:6b:91:3d:a7:fc:07:f9: a6:c9:50:de:c9:71:00:e7:91:a6:16:a6:3a:5a:2e: cb:39:a4:ac:a0:47:b7:ac:41:92:c8:e3:5a:dd:9e: 79:90:22:74:20:cd:a2:2d:0f:f8:3d:b3:47:c0:41: e9:18:4b:85:87:d0:92:b2:ee:53:c1:91:48:f0:b6: 6f:37:fe:da:bc:29:f1:0d:f4:d3:40:72:a0:b7:ea: bb:d0:c4:51:f4:a1:93:95:65:ec:7e:5f:24:1c:5e: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:F4:2E:BD:E5:FF:0B:F2:CF:83:C2:58:17:55:44:11:66:3B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:54:e2:b3:c8:d5:59:0e:99:d1:27:8c:ef:ea:74:de:33:d1: 61:30:92:ff:24:1e:8f:da:d3:37:e6:60:96:a0:30:ff:16:97: 2c:4f:da:82:91:ab:9c:a3:bf:3f:79:4c:5a:27:c8:91:01:89: 84:9a:6e:a6:59:e5:fe:e6:e8:f6:3b:54:bc:09:5e:40:c6:ed: f7:41:01:4d:a7:29:e2:9a:f4:50:cf:44:e0:69:b7:aa:2e:d7: 99:0a:20:10:47:82:0a:50:ee:5b:c2:cf:08:9f:2d:59:c3:13: 51:38:bf:81:48:9a:d4:06:c8:75:68:1c:fb:5e:24:cb:e7:53: ab:a9:38:40:c1:3a:d5:91:45:a2:ea:94:a0:13:1e:45:70:2c: 81:fe:65:23:ad:a4:ac:3b:68:52:de:ca:e2:a1:44:5a:92:c4: 60:f0:1b:55:50:db:be:bb:13:48:28:32:22:6e:e1:bc:2f:52: ba:c9:24:d4:13:62:4e:94:f5:00:ce:71:92:2b:2d:76:7b:b1: 8f:7b:16:13:64:84:32:ce:ee:42:a1:4c:fe:99:f5:fd:72:24: 6d:8f:d7:84:37:cc:b5:00:46:22:8c:e5:4f:98:06:05:0b:05: 56:f4:52:c2:ec:19:c3:a3:66:d7:a1:75:87:d2:02:97:e1:36: 90:c8:65:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLQLrUduSPjOB6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2EwOGU3ZmEtYWNkNC00NWNjLWJmNmUtMGY0MGNkZmUzZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8afx6DH6a7hhrcogg7me0zPHUXs41cXJi2 pzIJESxEZN5PlqC6alwuLRQ4CLb/O9V5sXUFgW9M+I7x2mIb1KjslF7RKIzCAVwV iwGf7QNJL/2BjeAGOQCeBe9fv68v3p+8/FEpZ4yZJs6lHsKw/I3Hidignd05q1+G pa6ieEIYIPSht8unI9FhYa0dgyIOYRf/l0TNlDePmTTI4muRPaf8B/mmyVDeyXEA 55GmFqY6Wi7LOaSsoEe3rEGSyONa3Z55kCJ0IM2iLQ/4PbNHwEHpGEuFh9CSsu5T wZFI8LZvN/7avCnxDfTTQHKgt+q70MRR9KGTlWXsfl8kHF46UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs99C695f8L8s+DwlgXVUQRZjv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwMTljZTAtNmVlOS0z YTAxLWJmYmEtOWJmNDA4NmY4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINU4rPI1VkOmdEnjO/qdN4z0WEwkv8kHo/a0zfmYJagMP8WlyxP2oKR q5yjvz95TFonyJEBiYSabqZZ5f7m6PY7VLwJXkDG7fdBAU2nKeKa9FDPROBpt6ou 15kKIBBHggpQ7lvCzwifLVnDE1E4v4FImtQGyHVoHPteJMvnU6upOEDBOtWRRaLq lKATHkVwLIH+ZSOtpKw7aFLeyuKhRFqSxGDwG1VQ2767E0goMiJu4bwvUrrJJNQT Yk6U9QDOcZIrLXZ7sY97FhNkhDLO7kKhTP6Z9f1yJG2P14Q3zLUARiKM5U+YBgUL BVb0UsLsGcOjZtehdYfSApfhNpDIZYs= -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:03 2025 by rpki-client