$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa File: a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa (raw, json) Hash identifier: Hf+qP7ZH8VrJhcoSvZbc9mBKOREyXYlra7gvgqT18tU= Subject key identifier: 53:46:2C:6F:F4:03:E1:20:55:50:9A:8B:81:B8:C8:F7:89:81:B3:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72F9EEA063E0F0CA5B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396587 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2f:9e:ea:06:3e:0f:0c:a5:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ee09ac3a-cfe9-4e06-810f-2d7c2f64c1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:59:45:27:49:75:92:ec:5d:ce:68:3d:88:96: bf:03:3c:73:b2:27:1d:bd:60:54:20:38:3c:ec:d3: 94:70:73:c8:a5:e4:a7:c3:87:36:56:ef:74:aa:40: d9:b0:4e:96:31:93:33:ae:8e:1c:05:c7:a9:8a:af: 5d:b5:fb:9d:d9:52:02:da:2d:82:ff:84:91:1b:7e: 91:91:2f:6c:be:82:a5:b1:6b:0a:89:0f:9a:c5:0f: 67:1b:3c:57:cb:1b:40:ba:8e:06:40:49:ca:46:ea: da:4b:12:a0:4a:2e:a7:73:44:21:db:18:5b:79:ac: a2:94:65:8b:0e:c5:80:5c:ff:4a:54:68:89:4e:59: fb:a4:86:be:b9:c0:69:bf:34:a7:e3:c0:9d:32:33: 56:c3:a9:7e:c3:9a:c7:48:4e:ea:62:56:e8:c3:a4: e0:0e:51:de:e2:c1:1d:0d:ae:50:43:e9:d0:05:b5: ba:8a:d4:7f:c8:80:1a:cc:45:13:42:4c:11:39:ed: 34:ba:b4:20:ff:05:e5:7d:f1:af:4a:d3:27:04:11: fb:b8:5f:0b:b8:47:dd:0e:6b:d1:ff:b1:a0:90:97: 7e:f4:86:e7:7f:15:d5:f1:52:84:b5:63:81:97:37: 80:f0:ce:ee:36:92:82:c6:1c:f8:de:bc:2c:78:43: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:46:2C:6F:F4:03:E1:20:55:50:9A:8B:81:B8:C8:F7:89:81:B3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:7b:af:54:1d:31:93:94:01:7e:9e:ef:0e:47:76:8e:1e:9b: 91:d9:23:71:9f:6c:bb:d5:94:d0:71:0b:7e:31:43:1b:eb:6d: 26:0c:24:3f:98:2e:0c:cf:bf:f3:23:a3:78:2c:52:0d:f7:54: 05:e7:e7:2a:9b:01:2d:7e:f7:0d:3f:5d:c7:48:5c:60:c6:d1: ad:a7:8b:b8:b8:6a:8a:ae:4f:11:93:c5:06:8b:22:a2:d1:ab: c6:be:10:67:bb:dc:7e:54:46:ed:de:90:6a:b1:5b:cb:c9:83: 42:36:18:b8:41:df:bf:ce:b7:fa:2a:05:2f:cf:ce:16:c9:e3: be:2a:95:69:44:78:ff:c9:11:f6:41:76:ff:21:16:62:74:64: 25:f3:4d:a2:36:59:1a:86:0d:de:8f:02:6c:bc:a2:26:6f:dd: e2:f7:1c:89:1c:a9:d6:91:9d:38:c7:e2:a9:75:de:ea:54:0d: af:52:ab:53:15:08:0a:40:c9:e2:30:f2:8d:ee:9e:58:82:55: 93:15:85:a1:a3:5e:6b:f8:f1:83:bc:cf:ae:93:cc:6b:85:c3: 4b:1d:f3:4d:0d:d3:5b:76:33:9c:53:be:0d:04:61:b3:9d:10: 22:ea:e3:45:1d:d3:2f:08:5a:a7:09:5b:c1:b2:25:d9:4a:80: ec:ba:04:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y+e6gY+DwylsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWUwOWFjM2EtY2ZlOS00ZTA2LTgxMGYtMmQ3YzJmNjRjMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVlFJ0l1kuxdzmg9iJa/AzxzsicdvWBUIDg8 7NOUcHPIpeSnw4c2Vu90qkDZsE6WMZMzro4cBcepiq9dtfud2VIC2i2C/4SRG36R kS9svoKlsWsKiQ+axQ9nGzxXyxtAuo4GQEnKRuraSxKgSi6nc0Qh2xhbeayilGWL DsWAXP9KVGiJTln7pIa+ucBpvzSn48CdMjNWw6l+w5rHSE7qYlbow6TgDlHe4sEd Da5QQ+nQBbW6itR/yIAazEUTQkwROe00urQg/wXlffGvStMnBBH7uF8LuEfdDmvR /7GgkJd+9IbnfxXV8VKEtWOBlzeA8M7uNpKCxhz43rwseEOJxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFNGLG/0A+EgVVCai4G4yPeJgbNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNkMTEzZmMtOWNkNC0z NTdjLThlMDItZTM1MzJhOWQ1NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPe69UHTGTlAF+nu8OR3aOHpuR2SNxn2y71ZTQcQt+MUMb620mDCQ/ mC4Mz7/zI6N4LFIN91QF5+cqmwEtfvcNP13HSFxgxtGtp4u4uGqKrk8Rk8UGiyKi 0avGvhBnu9x+VEbt3pBqsVvLyYNCNhi4Qd+/zrf6KgUvz84WyeO+KpVpRHj/yRH2 QXb/IRZidGQl802iNlkahg3ejwJsvKImb93i9xyJHKnWkZ04x+Kpdd7qVA2vUqtT FQgKQMniMPKN7p5YglWTFYWho15r+PGDvM+uk8xrhcNLHfNNDdNbdjOcU74NBGGz nRAi6uNFHdMvCFqnCVvBsiXZSoDsugSS -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:38 2025 by rpki-client