$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa File: aa3aaa0b-972a-3dc5-aeb1-702709556878.roa (raw, json) Hash identifier: 2XPFw2leAArgQp+DfP2U006kQU3D2meNibGhNg5jO5Y= Subject key identifier: AA:7D:A4:8F:52:1A:A9:6E:82:6F:6D:C5:32:3B:12:C2:AB:56:A2:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAD02D87F502682912700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 25485 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ad:02:d8:7f:50:26:82:91:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=2657d616-b1d0-49c4-96fa-f1812e32ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:af:19:38:a6:09:d7:af:ce:81:7d:55:5e: 2f:5a:47:6f:67:6f:9a:84:5d:42:44:e7:66:9f:cc: e1:df:00:7e:11:7f:a6:19:1c:43:f3:37:1e:48:e2: 8a:6a:ae:32:94:6c:09:25:5f:48:00:40:0f:2c:4c: 8d:62:7f:9c:cf:79:1c:fc:65:64:ef:c1:ac:3f:f4: a7:43:b7:ae:f0:10:93:f0:b4:8d:0c:36:96:c0:f7: 9e:9c:be:38:6b:d8:36:b2:9c:61:89:e9:72:b5:15: ce:2c:fe:93:bb:39:7e:81:34:a9:41:38:ab:be:fe: d2:23:d9:dd:51:24:6d:58:ea:4f:bb:18:ab:52:21: e5:b4:9a:17:bf:eb:79:1c:93:c0:1e:89:7d:8d:e8: bb:27:45:51:b1:ec:b3:d3:6d:00:9f:f2:78:6d:35: 72:ff:64:d0:66:75:7c:5a:4a:8e:2d:e3:ab:1f:50: f6:e9:29:07:9e:9f:d9:dc:bd:f4:5d:af:6f:4f:24: 8d:70:7a:c1:cd:93:5f:4d:0f:2a:2d:d9:a1:23:9d: 0c:74:c5:a7:b3:48:d7:fb:0e:c3:1b:1b:eb:4d:d3: 44:b6:4d:30:c6:94:00:06:96:b2:e9:5f:e7:14:56: 32:14:06:14:ce:fd:06:80:01:f5:7e:f4:4f:d8:13: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:A4:8F:52:1A:A9:6E:82:6F:6D:C5:32:3B:12:C2:AB:56:A2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa3aaa0b-972a-3dc5-aeb1-702709556878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:03:c3:a7:02:67:20:4c:96:81:7a:fd:3e:77:e0:c0:fc:30: a1:17:c7:e1:d9:0c:b8:a8:e7:b5:ef:07:5c:22:e4:ee:50:de: 3f:19:0f:7f:5e:d8:c5:f9:25:eb:d6:73:2f:ff:ef:15:3e:db: 99:f6:d4:ff:00:a1:f1:6a:1e:d5:9f:61:62:b8:0c:6c:5e:a5: 7c:0a:9e:0e:5e:8a:b7:6e:ba:9a:87:ab:9e:6f:53:83:36:e1: aa:39:3c:f7:d5:71:2e:4c:2d:33:18:64:25:6e:26:6b:28:80: 45:b3:bc:c9:f3:c2:ad:27:5d:7e:a6:f1:47:0f:ff:d4:83:f9: d8:b7:94:53:c7:98:f0:b6:7c:cb:c4:1a:28:31:d1:65:68:0f: 74:72:e2:3e:4a:5f:33:00:c9:ae:67:16:d9:81:18:70:54:3d: 99:10:c5:81:22:5d:8d:57:a3:52:65:15:45:60:78:fe:d8:57: cb:5e:ba:8c:24:87:00:d3:f1:48:c5:99:16:e7:02:48:a5:ef: 43:6a:a1:24:a9:36:0e:54:98:5e:82:32:54:e5:be:ad:63:b1: 14:ca:63:56:f4:76:5a:2d:2f:c8:b6:aa:11:89:61:2a:bd:f2: 7b:c9:5b:05:1e:b3:15:19:73:39:ee:13:e4:fc:3d:ea:a0:23: f7:aa:2b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK0C2H9QJoKRJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjY1N2Q2MTYtYjFkMC00OWM0LTk2ZmEtZjE4MTJlMzJhZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtymvGTimCdevzoF9VV4vWkdvZ2+ahF1CROdm n8zh3wB+EX+mGRxD8zceSOKKaq4ylGwJJV9IAEAPLEyNYn+cz3kc/GVk78GsP/Sn Q7eu8BCT8LSNDDaWwPeenL44a9g2spxhielytRXOLP6Tuzl+gTSpQTirvv7SI9nd USRtWOpPuxirUiHltJoXv+t5HJPAHol9jei7J0VRseyz020An/J4bTVy/2TQZnV8 WkqOLeOrH1D26SkHnp/Z3L30Xa9vTySNcHrBzZNfTQ8qLdmhI50MdMWns0jX+w7D GxvrTdNEtk0wxpQABpay6V/nFFYyFAYUzv0GgAH1fvRP2BM2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKp9pI9SGqlugm9txTI7EsKrVqLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEzYWFhMGItOTcyYS0z ZGM1LWFlYjEtNzAyNzA5NTU2ODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJADw6cCZyBMloF6/T534MD8MKEXx+HZDLio57XvB1wi5O5Q3j8ZD39e 2MX5JevWcy//7xU+25n21P8AofFqHtWfYWK4DGxepXwKng5eirduupqHq55vU4M2 4ao5PPfVcS5MLTMYZCVuJmsogEWzvMnzwq0nXX6m8UcP/9SD+di3lFPHmPC2fMvE Gigx0WVoD3Ry4j5KXzMAya5nFtmBGHBUPZkQxYEiXY1Xo1JlFUVgeP7YV8teuowk hwDT8UjFmRbnAkil70NqoSSpNg5UmF6CMlTlvq1jsRTKY1b0dlotL8i2qhGJYSq9 8nvJWwUesxUZcznuE+T8PeqgI/eqK1k= -----END CERTIFICATE-----Generated at Wed Oct 29 20:10:31 2025 by rpki-client