$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adc5180c-5009-3a44-a0ba-3d4141ca2c15.roa File: adc5180c-5009-3a44-a0ba-3d4141ca2c15.roa (raw, json) Hash identifier: caGkPdCX86jUy467qi8mRG4POlX5+AiaCf+l7j1FeGY= Subject key identifier: DF:26:E7:69:68:23:96:9B:F5:59:12:BC:45:6B:6A:F0:E4:3B:A3:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72A7BC6A82724F0FB2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adc5180c-5009-3a44-a0ba-3d4141ca2c15.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36629 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2a:7b:c6:a8:27:24:f0:fb:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ea8c2aed-f84f-4af9-b5eb-306c3b9d8bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:e6:38:97:e7:00:0c:4c:cd:95:e2:42:9c: 40:56:1a:f8:54:b4:fd:75:7d:e4:fb:76:ba:87:6d: 8f:c4:20:c0:00:ea:2d:a4:d2:4a:08:f5:05:c1:d1: 84:70:42:d5:36:f0:85:65:84:4f:d4:0f:d3:d9:7a: e7:38:57:dd:7d:5c:f7:9b:53:72:6b:3c:64:a2:49: c0:74:75:02:ac:90:ae:e4:79:de:fd:40:b6:7e:2d: f8:14:52:19:28:2d:df:c7:57:a8:cd:0f:e3:81:c2: 70:a6:c8:5b:0f:2c:41:14:90:bb:cc:cd:3e:0f:f7: f2:8f:c1:bf:b6:9e:25:bf:cc:05:70:e8:f5:33:f9: 5b:96:a0:c7:f5:ef:96:16:dd:27:f0:8d:10:50:df: 27:f0:d3:8d:2b:d3:53:5c:8c:75:ac:a7:a5:bf:2d: 29:c6:e8:cd:1a:03:ad:c6:44:a1:49:2b:2a:5b:50: cb:35:a9:26:ed:af:38:44:5a:77:98:8c:8c:2d:9e: 67:f2:44:69:84:c3:0d:b7:04:77:b0:d7:47:c4:60: 88:fc:9e:03:36:76:c2:c4:c6:97:df:3c:6f:3b:83: fa:fd:33:a2:3f:9e:75:7e:61:8e:21:fc:36:52:04: 92:9c:0a:71:79:22:0b:38:25:5e:6f:30:ad:23:b8: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:E7:69:68:23:96:9B:F5:59:12:BC:45:6B:6A:F0:E4:3B:A3:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/adc5180c-5009-3a44-a0ba-3d4141ca2c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1e:d4:36:c8:34:c7:db:5e:19:24:cd:f0:89:bf:9a:02:76: f3:21:ed:a1:2b:94:a8:a5:27:a6:35:73:e2:9f:56:7e:e5:f0: 49:2c:20:da:a9:46:f9:22:dc:95:30:b3:89:0f:02:9e:2f:3b: f4:0b:59:fe:ea:04:6d:7e:c7:28:c6:ea:93:20:d5:3a:95:db: 14:ef:c3:18:0e:37:f6:a5:ac:9d:5e:45:6c:c8:4f:f4:34:91: 6b:ac:a2:33:15:a6:18:f1:3b:e0:94:82:3e:d9:b0:ae:c5:4c: f7:5d:99:0a:ab:bd:36:bf:05:26:b2:c0:8a:d2:2c:62:2b:35: f3:99:75:ea:81:3c:5f:4d:27:92:8a:a9:be:a0:57:67:90:e2: ca:ce:c1:5d:7c:98:ae:84:a1:15:d2:d1:ff:fc:23:4a:85:df: 73:46:c1:8e:3f:e8:f2:c6:33:a3:c4:b6:f0:cf:bb:ee:ac:50: 65:3d:54:f9:da:c1:8a:37:e9:15:15:02:ec:36:f9:43:c4:c5: 72:47:b3:cd:e7:d0:79:2f:22:85:f8:90:7f:6b:80:ea:ca:1f: de:c1:0c:62:a7:af:b1:05:4b:7e:2a:68:a4:f8:6d:22:23:04: c9:52:b3:44:0d:5c:19:8d:02:91:67:31:a8:f8:38:72:d4:f3: 31:3e:76:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5yp7xqgnJPD7LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZWE4YzJhZWQtZjg0Zi00YWY5LWI1ZWItMzA2YzNiOWQ4YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle/mOJfnAAxMzZXiQpxAVhr4VLT9dX3k+3a6 h22PxCDAAOotpNJKCPUFwdGEcELVNvCFZYRP1A/T2XrnOFfdfVz3m1NyazxkoknA dHUCrJCu5Hne/UC2fi34FFIZKC3fx1eozQ/jgcJwpshbDyxBFJC7zM0+D/fyj8G/ tp4lv8wFcOj1M/lblqDH9e+WFt0n8I0QUN8n8NONK9NTXIx1rKelvy0pxujNGgOt xkShSSsqW1DLNakm7a84RFp3mIyMLZ5n8kRphMMNtwR3sNdHxGCI/J4DNnbCxMaX 3zxvO4P6/TOiP551fmGOIfw2UgSSnApxeSILOCVebzCtI7irAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN8m52loI5ab9VkSvEVravDkO6M4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWRjNTE4MGMtNTAwOS0z YTQ0LWEwYmEtM2Q0MTQxY2EyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0HtQ2yDTH214ZJM3wib+aAnbzIe2hK5SopSemNXPin1Z+5fBJLCDa qUb5ItyVMLOJDwKeLzv0C1n+6gRtfscoxuqTINU6ldsU78MYDjf2paydXkVsyE/0 NJFrrKIzFaYY8TvglII+2bCuxUz3XZkKq702vwUmssCK0ixiKzXzmXXqgTxfTSeS iqm+oFdnkOLKzsFdfJiuhKEV0tH//CNKhd9zRsGOP+jyxjOjxLbwz7vurFBlPVT5 2sGKN+kVFQLsNvlDxMVyR7PN59B5LyKF+JB/a4Dqyh/ewQxip6+xBUt+Kmik+G0i IwTJUrNEDVwZjQKRZzGo+Dhy1PMxPnac -----END CERTIFICATE-----Generated at Wed Oct 29 20:38:45 2025 by rpki-client