$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa File: a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa (raw, json) Hash identifier: jcqlLRvhrheX1LJK66c1rbCOC7L9ZvAYqbs9XWmvrkY= Subject key identifier: FD:20:6A:44:D2:7A:00:EE:18:23:3F:78:EF:75:93:B0:16:D4:06:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E733E9BCA51CF0A9E78440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396580 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:33:e9:bc:a5:1c:f0:a9:e7:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=798d5d81-0e7c-4291-8da5-bb16e83b30f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:c5:e5:5c:e8:4f:4d:7b:51:09:5f:0e:74: 00:fe:a6:69:44:9a:ca:60:aa:bd:ed:03:21:7f:37: 1f:d2:64:42:97:1b:fb:1c:aa:4f:b1:1b:50:7c:e0: 00:bf:b7:8c:8e:da:bb:54:94:6e:48:44:76:dd:17: f5:c2:d6:f4:32:fa:f2:92:ad:49:6b:bd:3b:d0:cb: 13:dd:50:c7:14:dc:b1:e6:3a:12:3e:2e:2e:f9:db: c0:35:fe:b6:5d:6b:c0:f1:f5:85:fd:3c:b7:7a:fa: 49:ce:42:0b:1b:d3:77:bf:eb:20:ee:d5:82:80:d8: f7:3a:94:5d:68:55:3b:68:3e:41:07:eb:d2:2d:ef: 56:bb:9a:d5:4c:23:fb:7c:fc:8d:20:8b:7d:4a:36: 75:44:65:9a:d6:3b:78:2e:88:da:52:38:28:53:c5: 9e:5f:28:13:04:86:c8:76:f7:81:e5:b4:17:29:e3: 15:49:d3:cb:2a:3b:8b:50:ae:fc:11:82:17:53:ff: ef:fa:41:22:6b:21:6d:09:30:bf:80:d7:84:68:03: 36:01:82:5c:6e:9f:e6:71:f3:33:6d:0e:3c:04:f9: 4e:74:43:4f:8e:d8:f8:ed:81:57:35:a8:91:d5:4f: 00:2b:2d:26:ab:86:5b:31:40:55:2b:57:6d:db:66: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:20:6A:44:D2:7A:00:EE:18:23:3F:78:EF:75:93:B0:16:D4:06:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e7:51:83:9e:87:c2:53:de:2b:3e:ac:54:0e:57:35:83:24: 90:6e:ba:e2:24:32:3d:af:e8:df:2b:f9:4d:b1:85:b9:30:3f: 44:5b:39:8c:ac:1b:3b:4e:fc:eb:53:44:e3:0e:18:c7:85:63: 8c:87:d1:d7:9e:5e:19:56:28:58:ff:8c:3d:fa:82:9d:15:ef: 5e:df:1b:7d:36:54:cb:5b:9e:a6:06:f2:c8:00:67:b2:e5:90: d6:32:66:48:9a:98:30:16:20:a9:8f:b8:15:ac:ab:2c:e6:8c: 33:65:d1:63:43:04:6d:af:a9:68:4b:31:fa:3b:85:84:79:62: 04:ed:a1:cc:62:02:56:8f:dd:69:7c:fb:d2:39:1a:46:a8:c4: 05:f9:2d:d0:68:f0:ec:e2:cc:bd:74:fb:90:01:ca:c8:6f:aa: 66:1c:49:61:d9:6f:cb:66:3d:7f:9a:bc:72:30:5e:dd:f1:a2: 3d:6c:5f:a9:71:98:7e:2a:86:70:7e:47:b4:6f:84:50:77:7f: 2a:30:34:ad:fc:97:b2:fd:c7:f3:96:75:99:7e:15:6a:3e:58: 78:f3:c5:60:ba:b8:45:7d:26:b4:c9:74:b0:c7:58:51:9e:97: 94:4a:8f:81:39:2d:d4:e0:21:0e:42:e3:73:9e:cb:d6:8d:2f: 54:09:36:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zPpvKUc8KnnhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Nzk4ZDVkODEtMGU3Yy00MjkxLThkYTUtYmIxNmU4M2IzMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FvF5VzoT017UQlfDnQA/qZpRJrKYKq97QMh fzcf0mRClxv7HKpPsRtQfOAAv7eMjtq7VJRuSER23Rf1wtb0Mvrykq1Ja7070MsT 3VDHFNyx5joSPi4u+dvANf62XWvA8fWF/Ty3evpJzkILG9N3v+sg7tWCgNj3OpRd aFU7aD5BB+vSLe9Wu5rVTCP7fPyNIIt9SjZ1RGWa1jt4LojaUjgoU8WeXygTBIbI dveB5bQXKeMVSdPLKjuLUK78EYIXU//v+kEiayFtCTC/gNeEaAM2AYJcbp/mcfMz bQ48BPlOdENPjtj47YFXNaiR1U8AKy0mq4ZbMUBVK1dt22bJPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP0gakTSegDuGCM/eO91k7AW1AZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTY4YzQ1ZjctNDk2Mi0z ZDJiLWFlYzctNGIyODFkYmQ1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBw51GDnofCU94rPqxUDlc1gySQbrriJDI9r+jfK/lNsYW5MD9EWzmM rBs7TvzrU0TjDhjHhWOMh9HXnl4ZVihY/4w9+oKdFe9e3xt9NlTLW56mBvLIAGey 5ZDWMmZImpgwFiCpj7gVrKss5owzZdFjQwRtr6loSzH6O4WEeWIE7aHMYgJWj91p fPvSORpGqMQF+S3QaPDs4sy9dPuQAcrIb6pmHElh2W/LZj1/mrxyMF7d8aI9bF+p cZh+KoZwfke0b4RQd38qMDSt/Jey/cfzlnWZfhVqPlh488VgurhFfSa0yXSwx1hR npeUSo+BOS3U4CEOQuNznsvWjS9UCTYp -----END CERTIFICATE-----Generated at Wed Oct 29 22:40:51 2025 by rpki-client