$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa File: bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa (raw, json) Hash identifier: DO+rKmukwlN5cZ3AaDtMepLCSsxZt123NT9lm62FH8k= Subject key identifier: E4:9B:59:99:AF:E6:F2:F7:1C:67:78:2A:A6:EA:5D:2D:74:B1:F5:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB46EE252E9ED2F67B6E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397203 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b4:6e:e2:52:e9:ed:2f:67:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d8a6bbc0-a5e9-42d9-9502-8219fb1fc292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:8c:04:a2:af:fc:48:65:11:78:49:b5:4b: 9d:d6:17:86:01:e5:a5:20:54:9a:f1:4b:85:ae:1d: 9c:26:04:72:92:15:4c:ca:76:56:9b:d7:82:f2:f6: ea:f6:17:92:f1:4d:fa:35:48:dd:d7:15:75:59:a8: 46:95:59:c2:82:ee:9c:c3:18:fa:89:a5:6b:4f:4c: 75:e2:8a:b7:b3:64:5e:09:ee:07:7e:bb:5e:e4:2b: 8c:f5:ff:88:cf:3e:0c:96:49:05:22:aa:55:f6:9b: c1:51:7d:e6:2b:25:84:50:a6:ee:fd:36:fe:24:7e: ee:cd:f9:9b:e5:c1:dc:bf:7a:4a:36:84:fd:32:9d: d0:f0:9d:98:ae:8f:f6:5c:02:c4:53:c3:c3:aa:b6: f0:01:60:f9:cc:c9:65:9f:44:82:73:84:57:f8:c5: 27:1c:6f:ba:3c:e8:54:36:86:05:9a:2d:7a:6b:4c: 7a:2b:cd:6c:13:49:18:18:57:16:e0:83:75:03:ca: e4:66:01:a1:5e:ed:0b:e3:a6:2f:3c:a0:8b:07:25: 25:72:58:55:9a:1d:9c:68:2a:12:45:6d:16:35:5b: ac:d0:0b:fc:25:f9:e9:63:96:68:a4:ea:1d:66:c3: 47:64:ff:23:77:8d:da:45:a5:bc:82:68:24:4d:51: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9B:59:99:AF:E6:F2:F7:1C:67:78:2A:A6:EA:5D:2D:74:B1:F5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5f:c9:5f:e9:da:d6:b8:6d:03:a4:64:10:35:16:2c:51:c5: 62:84:bf:9e:f2:e3:e1:32:d2:9c:65:6c:06:3e:ae:1f:fa:6f: 9c:b5:e8:38:59:57:7b:01:27:60:72:26:e4:51:63:6f:01:f7: 3d:31:5a:0c:49:ea:4f:cb:8b:c6:2e:18:dc:77:b0:b1:3c:af: 1c:87:8b:67:54:d2:9a:ec:1f:0c:b8:e4:e1:10:ee:0c:5e:7a: 39:1b:32:fc:2d:21:bd:47:01:96:f9:82:88:b1:2a:c8:5a:91: 3e:5f:33:9f:d1:67:f2:80:23:c9:38:8f:ba:1f:53:d3:8c:d4: b1:ac:a1:b6:0e:ef:0c:aa:83:d6:2c:0e:b0:21:99:c2:22:6f: 42:0a:43:8d:ca:20:c6:c9:99:bc:f7:e4:bd:3b:20:53:d4:ea: 30:c1:85:da:5a:e8:51:7c:8d:13:9e:4a:73:43:f1:ae:77:00: d9:1e:88:c2:2a:60:24:a1:b1:33:43:60:8a:29:25:78:73:a4: 1d:7b:05:05:4a:89:e1:fe:a5:77:53:9d:3a:0b:b6:6f:9a:dd: c2:d3:a5:4a:e0:0c:fd:29:fb:bf:35:bb:44:e7:ef:c1:29:50: 35:ab:28:0a:7f:9f:d9:0a:48:9b:69:5a:2e:6d:77:48:8d:95: 88:32:1b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLRu4lLp7S9ntuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDhhNmJiYzAtYTVlOS00MmQ5LTk1MDItODIxOWZiMWZjMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGWMBKKv/EhlEXhJtUud1heGAeWlIFSa8UuF rh2cJgRykhVMynZWm9eC8vbq9heS8U36NUjd1xV1WahGlVnCgu6cwxj6iaVrT0x1 4oq3s2ReCe4Hfrte5CuM9f+Izz4MlkkFIqpV9pvBUX3mKyWEUKbu/Tb+JH7uzfmb 5cHcv3pKNoT9Mp3Q8J2Yro/2XALEU8PDqrbwAWD5zMlln0SCc4RX+MUnHG+6POhU NoYFmi16a0x6K81sE0kYGFcW4IN1A8rkZgGhXu0L46YvPKCLByUlclhVmh2caCoS RW0WNVus0Av8JfnpY5ZopOodZsNHZP8jd43aRaW8gmgkTVEVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSbWZmv5vL3HGd4KqbqXS10sfWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmRjNmRmMmYtZWQ1Zi0z YTc3LWI3ZTUtYjkwYjNiYzI1M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVfyV/p2ta4bQOkZBA1FixRxWKEv57y4+Ey0pxlbAY+rh/6b5y16DhZ V3sBJ2ByJuRRY28B9z0xWgxJ6k/Li8YuGNx3sLE8rxyHi2dU0prsHwy45OEQ7gxe ejkbMvwtIb1HAZb5goixKshakT5fM5/RZ/KAI8k4j7ofU9OM1LGsobYO7wyqg9Ys DrAhmcIib0IKQ43KIMbJmbz35L07IFPU6jDBhdpa6FF8jROeSnND8a53ANkeiMIq YCShsTNDYIopJXhzpB17BQVKieH+pXdTnToLtm+a3cLTpUrgDP0p+781u0Tn78Ep UDWrKAp/n9kKSJtpWi5td0iNlYgyG/U= -----END CERTIFICATE-----Generated at Wed Oct 29 20:36:34 2025 by rpki-client