$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: CZ+s40xRvNLENA7zJzQwLdh5JBPpTyT7Z26EAOZsIpU= Subject key identifier: C8:52:B5:9C:11:0A:C7:1E:3D:4F:D1:B1:FA:DE:62:75:99:27:56:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E0DC38A87A9BBBA4600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:0d:c3:8a:87:a9:bb:ba:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=6e6aa97f-9f11-4d2f-8ab7-086648a041ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:60:e6:30:47:bd:7f:ab:a5:bf:65:3f:1a: a1:b0:ce:04:e0:37:54:c5:ec:66:fe:9d:34:3e:c0: 76:40:2c:53:59:a7:a6:50:6b:2f:37:d9:44:ad:e6: 67:0f:8c:43:ed:03:0b:40:06:96:fd:38:1d:f9:92: ef:78:a8:aa:40:f7:78:09:06:dd:db:65:1d:a5:be: e0:61:df:6d:8b:4d:d0:be:b3:98:53:f1:7c:37:e2: 12:13:b5:13:cd:62:18:38:5b:1a:14:82:b1:fc:ef: df:ed:98:4d:f6:43:02:3d:20:e4:d9:c1:37:97:9a: 8f:0d:ab:6e:b6:64:6c:97:f0:21:78:55:db:c2:80: cc:fe:c0:ca:55:75:a2:3e:ef:45:c1:44:be:c6:e6: ed:1e:0a:e7:6b:6b:fd:51:bf:7a:68:07:06:59:28: b3:b6:67:8e:ca:47:64:ec:28:26:93:d2:ca:8c:04: 80:ea:03:40:89:64:a6:a8:3d:3e:03:fc:ee:6d:25: 98:97:ff:19:00:4a:6c:a2:42:ee:aa:5d:17:2b:31: 8d:f3:2e:22:9e:c8:c8:27:aa:fd:e0:18:a8:35:73: 9a:72:ab:d5:5b:14:83:34:c9:a7:88:5f:16:31:3a: 87:b6:bb:fb:7f:87:a7:95:6f:af:cd:d7:af:eb:7c: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:B5:9C:11:0A:C7:1E:3D:4F:D1:B1:FA:DE:62:75:99:27:56:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3c:5d:e7:3d:cc:8e:67:26:39:fb:46:55:a9:0d:01:22:0e: c8:17:bc:41:10:73:45:a1:95:b1:31:73:fe:7f:fa:0f:90:58: 07:8a:2e:73:af:7d:d2:87:a7:a3:b4:bb:8c:7b:b9:63:0b:d2: 03:9e:8e:bc:d1:4a:fb:d8:0e:74:94:4d:9e:94:c1:55:2e:63: 0b:8a:da:ad:27:97:1f:c7:15:cd:fa:f4:3b:0e:9e:f8:9b:d9: 04:cd:8a:e7:d5:b7:51:60:c1:c5:76:ee:0b:ef:47:8a:0f:f0: e4:00:9b:ee:25:87:50:fc:76:4b:eb:4d:05:61:72:c6:81:bc: f7:0a:86:0a:b4:2a:f7:b5:98:cb:00:d0:2f:46:23:cc:5d:c2: b7:9f:13:64:51:a8:4d:59:60:0e:10:83:69:08:de:58:c9:23: aa:bc:fd:47:4a:c0:e9:64:03:a6:bd:ad:dd:40:5b:84:c3:a7: 1c:3d:ef:cc:be:e6:73:0b:1e:14:4e:51:68:62:d9:16:84:62: 0d:56:03:d1:80:29:be:16:1c:14:b9:fd:df:7a:df:32:34:15: 4c:fd:68:bd:23:f6:da:75:53:8c:16:54:ef:30:7c:f5:65:40: d3:ad:dd:72:d9:75:3d:49:e9:aa:ac:ae:62:c3:6d:93:b4:55: aa:19:05:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y4Nw4qHqbu6RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NmU2YWE5N2YtOWYxMS00ZDJmLThhYjctMDg2NjQ4YTA0MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAFg5jBHvX+rpb9lPxqhsM4E4DdUxexm/p00 PsB2QCxTWaemUGsvN9lEreZnD4xD7QMLQAaW/Tgd+ZLveKiqQPd4CQbd22Udpb7g Yd9ti03QvrOYU/F8N+ISE7UTzWIYOFsaFIKx/O/f7ZhN9kMCPSDk2cE3l5qPDatu tmRsl/AheFXbwoDM/sDKVXWiPu9FwUS+xubtHgrna2v9Ub96aAcGWSiztmeOykdk 7Cgmk9LKjASA6gNAiWSmqD0+A/zubSWYl/8ZAEpsokLuql0XKzGN8y4insjIJ6r9 4BioNXOacqvVWxSDNMmniF8WMTqHtrv7f4enlW+vzdev63zKgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMhStZwRCscePU/RsfreYnWZJ1ZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9PF3nPcyOZyY5+0ZVqQ0BIg7IF7xBEHNFoZWxMXP+f/oPkFgHii5z r33Sh6ejtLuMe7ljC9IDno680Ur72A50lE2elMFVLmMLitqtJ5cfxxXN+vQ7Dp74 m9kEzYrn1bdRYMHFdu4L70eKD/DkAJvuJYdQ/HZL600FYXLGgbz3CoYKtCr3tZjL ANAvRiPMXcK3nxNkUahNWWAOEINpCN5YySOqvP1HSsDpZAOmva3dQFuEw6ccPe/M vuZzCx4UTlFoYtkWhGINVgPRgCm+FhwUuf3fet8yNBVM/Wi9I/badVOMFlTvMHz1 ZUDTrd1y2XU9SemqrK5iw22TtFWqGQWS -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:59 2025 by rpki-client