$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b006d2-7755-302a-9ecd-b3a1330ae5cb.roa File: c2b006d2-7755-302a-9ecd-b3a1330ae5cb.roa (raw, json) Hash identifier: 5F+mHVCI/rewEKeco041um+L5RWtzvv6pJwSdTuMMs8= Subject key identifier: DE:7E:C5:07:AF:F4:26:BC:27:E1:C8:43:9B:1C:36:EB:68:31:45:BA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CADA4EE2D1092BE655880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b006d2-7755-302a-9ecd-b3a1330ae5cb.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396588 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:ad:a4:ee:2d:10:92:be:65:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=3286eec4-9897-42aa-a12b-6316d8a86b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:e0:f0:27:e3:4b:fa:cb:27:50:af:de:da: d2:7a:e0:18:b0:3b:c6:64:3c:c7:e0:22:ba:05:9c: d3:f4:38:d6:a2:b2:5d:fa:b9:d3:c9:81:44:e3:a7: 23:d5:a0:85:84:e6:77:67:4b:6b:b1:58:91:8a:b0: 71:c1:b4:5a:41:e1:e8:79:f3:0c:51:82:07:91:48: 37:79:48:1e:76:b1:65:c4:d6:ed:42:a3:bf:d5:d3: 89:4e:0d:4b:69:c7:72:29:92:7e:de:1f:98:18:bc: 72:bb:8b:72:e2:dc:b4:7f:fe:68:76:00:fe:a8:49: 09:8e:db:f1:32:54:30:94:8b:b8:b0:da:ae:08:ff: 87:cc:57:5a:22:15:c4:8b:26:d1:8f:60:ed:73:cb: 22:39:9d:cf:9d:56:8c:fd:f4:24:6b:2c:3e:06:2d: 65:1c:8f:80:eb:3a:40:04:7a:de:9f:4b:5d:a9:a6: 42:e0:73:02:e4:ad:07:fb:73:80:93:26:17:86:6f: 29:7a:9a:0a:f6:cd:17:69:48:5f:0d:3b:3d:fb:45: 12:cc:67:a4:a3:15:13:22:0b:4d:a0:18:49:92:a2: 0c:7a:a7:51:c4:f9:15:a6:98:73:b6:fe:d4:5c:35: c6:08:41:79:fe:8e:b6:26:d7:f4:64:0d:69:c9:3e: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7E:C5:07:AF:F4:26:BC:27:E1:C8:43:9B:1C:36:EB:68:31:45:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2b006d2-7755-302a-9ecd-b3a1330ae5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:5a:45:fb:ff:e8:bc:85:68:a7:3b:45:98:46:dd:be:4a: 51:d3:9e:d7:ee:2d:04:2b:dc:56:8b:cb:13:b5:b8:8a:7a:76: 7b:a8:4f:18:00:8b:4c:0c:e8:89:53:b2:69:fd:9c:48:c9:e3: dd:1e:1e:cf:28:58:c5:76:e8:2e:d4:d1:b0:c2:12:1d:a1:1d: a0:3b:56:bb:f2:46:75:de:46:68:ce:8d:f1:91:34:93:e6:36: 54:e6:5d:dd:d1:4f:47:97:cf:fd:cf:a2:48:80:b8:03:21:dd: ef:0b:e3:4b:20:32:99:b5:3d:c2:80:aa:75:bc:1a:f5:3a:28: b2:09:10:e1:93:8c:00:9b:48:25:ff:fa:82:4c:dc:2c:29:97: ba:a9:e2:9e:ae:1f:9f:b0:aa:b9:db:13:c4:55:18:3c:cb:d2: a2:7b:15:aa:1f:49:1b:f1:11:6e:d5:24:3c:31:7f:40:ac:3f: 34:34:be:c7:b7:b8:87:fc:18:fa:38:27:02:9f:05:56:46:53: 1b:30:94:2e:d8:8b:9c:26:6e:16:85:97:92:43:ab:66:7d:a2: 64:74:88:62:26:20:f1:88:d1:27:71:87:9b:5d:ac:e9:98:63: 85:61:ce:f5:e4:f0:15:c2:d3:7a:cf:59:f3:fa:8d:ef:64:48: 24:65:c1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK2k7i0Qkr5lWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzI4NmVlYzQtOTg5Ny00MmFhLWExMmItNjMxNmQ4YTg2YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmefg8CfjS/rLJ1Cv3trSeuAYsDvGZDzH4CK6 BZzT9DjWorJd+rnTyYFE46cj1aCFhOZ3Z0trsViRirBxwbRaQeHoefMMUYIHkUg3 eUgedrFlxNbtQqO/1dOJTg1LacdyKZJ+3h+YGLxyu4ty4ty0f/5odgD+qEkJjtvx MlQwlIu4sNquCP+HzFdaIhXEiybRj2Dtc8siOZ3PnVaM/fQkayw+Bi1lHI+A6zpA BHren0tdqaZC4HMC5K0H+3OAkyYXhm8pepoK9s0XaUhfDTs9+0USzGekoxUTIgtN oBhJkqIMeqdRxPkVpphztv7UXDXGCEF5/o62Jtf0ZA1pyT7ocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5+xQev9Ca8J+HIQ5scNutoMUW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJiMDA2ZDItNzc1NS0z MDJhLTllY2QtYjNhMTMzMGFlNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYOWkX7/+i8hWinO0WYRt2+SlHTntfuLQQr3FaLyxO1uIp6dnuoTxgA i0wM6IlTsmn9nEjJ490eHs8oWMV26C7U0bDCEh2hHaA7VrvyRnXeRmjOjfGRNJPm NlTmXd3RT0eXz/3PokiAuAMh3e8L40sgMpm1PcKAqnW8GvU6KLIJEOGTjACbSCX/ +oJM3Cwpl7qp4p6uH5+wqrnbE8RVGDzL0qJ7FaofSRvxEW7VJDwxf0CsPzQ0vse3 uIf8GPo4JwKfBVZGUxswlC7Yi5wmbhaFl5JDq2Z9omR0iGImIPGI0Sdxh5tdrOmY Y4VhzvXk8BXC03rPWfP6je9kSCRlwco= -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:18 2025 by rpki-client