$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa File: b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa (raw, json) Hash identifier: bgvooEOeA37do6ajRCZLSPVwmARqb/whcovOiuArTYs= Subject key identifier: 29:09:52:F1:0A:DE:EF:E1:CD:24:26:3F:AE:50:9B:84:E0:99:01:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72F279F17D0CA2F763C18 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396561 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2f:27:9f:17:d0:ca:2f:76:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=29f673af-5565-4088-92b6-ed5cbcdf962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:b9:ad:3a:79:ae:5b:ff:56:e0:a1:e2:c0:35: 5d:8f:0d:80:2d:09:d2:e3:f8:43:6a:64:f0:7f:a7: b6:a2:de:b0:e2:94:24:8f:af:44:53:45:1a:d7:19: 76:4c:a6:a7:f2:33:da:1b:2f:67:30:2e:66:25:65: 24:11:ca:cb:0f:1d:cc:fe:21:35:17:2d:d8:81:d1: bf:f9:19:dd:81:25:3a:ca:a6:c9:a1:7c:c9:1b:4d: cf:f1:4c:77:19:c5:61:e0:e1:b2:d6:30:5e:9d:9f: d6:64:76:f9:39:56:24:5a:18:c6:34:f7:62:bb:8b: 66:a4:45:cb:73:55:22:6d:02:de:ea:db:64:a4:38: 27:16:9f:0d:5c:dc:5c:c4:61:8f:39:7c:c0:9e:5e: 79:0c:2b:92:68:7f:a8:91:db:7e:68:f6:c2:bb:59: 89:80:80:c8:dc:eb:bf:ed:23:4e:d2:65:12:6f:71: 36:5e:cf:9f:18:f3:0d:45:cd:78:80:73:80:76:cf: e2:89:28:bd:2a:51:fb:cb:e7:bb:61:64:7f:a5:61: a1:5b:00:4a:d6:8f:c7:cb:ca:1a:05:b1:db:46:8a: 0e:aa:44:42:31:e0:62:e1:ab:de:31:99:65:ea:90: 58:66:88:a5:f4:22:c8:70:1c:aa:5d:f0:ef:c2:86: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:52:F1:0A:DE:EF:E1:CD:24:26:3F:AE:50:9B:84:E0:99:01:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c8:4b:79:68:a5:10:1f:e3:2c:69:8d:88:52:65:72:9d:b9: 3b:b9:47:0f:ef:87:7a:7e:ad:3f:04:34:dc:0d:c3:ea:05:a2: 07:1b:20:be:03:ea:2a:e2:33:41:a6:47:ca:7e:09:7b:6a:27: 03:68:7f:4c:fb:44:b9:ef:d2:0a:e4:22:4f:63:0b:0d:48:0c: a5:78:da:f7:5f:4a:6f:e8:72:36:1f:8f:35:05:eb:f6:ea:44: cb:7e:72:2a:51:b2:2c:51:15:96:55:aa:ba:c3:fb:b0:53:62: 0e:b6:e6:22:65:cb:7c:b0:20:f3:eb:6d:4c:7b:60:1e:9d:e9: a8:25:00:e1:6a:e5:dd:ec:ef:97:39:bb:17:3d:78:71:f3:8e: 3f:be:4d:41:43:35:5b:3b:20:8c:6e:d1:ec:3b:79:51:ab:b6: 23:18:5c:1c:94:93:2e:8f:40:57:67:2b:3c:00:0e:dd:bd:d5: 51:9a:98:d6:13:4f:d5:68:eb:1e:7e:9d:a5:b0:36:6c:6c:93: c6:7d:5f:1d:e8:d6:1b:c0:e9:b2:38:83:2e:06:2d:7c:39:85: 4a:d1:af:4d:97:76:15:ca:83:18:ac:1e:06:3a:36:ac:3e:63: 46:8c:18:5f:de:a3:50:3f:64:b9:2b:e7:15:4f:b9:da:7b:22: ac:09:88:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y8nnxfQyi92PBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjlmNjczYWYtNTU2NS00MDg4LTkyYjYtZWQ1Y2JjZGY5NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7mtOnmuW/9W4KHiwDVdjw2ALQnS4/hDamTw f6e2ot6w4pQkj69EU0Ua1xl2TKan8jPaGy9nMC5mJWUkEcrLDx3M/iE1Fy3YgdG/ +RndgSU6yqbJoXzJG03P8Ux3GcVh4OGy1jBenZ/WZHb5OVYkWhjGNPdiu4tmpEXL c1UibQLe6ttkpDgnFp8NXNxcxGGPOXzAnl55DCuSaH+okdt+aPbCu1mJgIDI3Ou/ 7SNO0mUSb3E2Xs+fGPMNRc14gHOAds/iiSi9KlH7y+e7YWR/pWGhWwBK1o/Hy8oa BbHbRooOqkRCMeBi4aveMZll6pBYZoil9CLIcByqXfDvwoZ6xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCkJUvEK3u/hzSQmP65Qm4TgmQGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhM2FhNGQtMjVkMS0z ZDcxLWE1OTYtNjA4YWZmMGEwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUyEt5aKUQH+MsaY2IUmVynbk7uUcP74d6fq0/BDTcDcPqBaIHGyC+ A+oq4jNBpkfKfgl7aicDaH9M+0S579IK5CJPYwsNSAyleNr3X0pv6HI2H481Bev2 6kTLfnIqUbIsURWWVaq6w/uwU2IOtuYiZct8sCDz621Me2AenemoJQDhauXd7O+X ObsXPXhx844/vk1BQzVbOyCMbtHsO3lRq7YjGFwclJMuj0BXZys8AA7dvdVRmpjW E0/VaOsefp2lsDZsbJPGfV8d6NYbwOmyOIMuBi18OYVK0a9Nl3YVyoMYrB4GOjas PmNGjBhf3qNQP2S5K+cVT7naeyKsCYjJ -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:13 2025 by rpki-client