$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa File: c552578b-7c14-3bff-b55f-c620ce75bda2.roa (raw, json) Hash identifier: EJllc27gGz1UzhBXkUon3CuMUvJWHjIqdXo1C2MW1ig= Subject key identifier: AC:EA:D5:5B:46:0D:D0:F6:1B:A3:30:08:13:2A:7B:10:75:E7:51:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB42C36C3257A594A9BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 36631 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b4:2c:36:c3:25:7a:59:4a:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b865e014-3222-4466-8ee8-9224b761dcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e8:36:9b:6c:26:b4:f2:4d:df:42:3e:d4:7a: bc:cf:59:59:b3:55:29:8f:65:47:d6:b6:a6:e9:61: 85:fa:11:a0:67:d2:f8:2b:63:07:05:58:d1:53:41: ef:ab:b1:af:a5:1b:45:1b:d8:be:b6:1d:f8:7d:ac: ea:57:37:b3:11:bc:3b:e0:26:96:3d:fe:18:87:30: 5f:49:31:42:02:49:4c:b9:09:3a:8f:9c:66:bc:ee: 32:3e:67:9a:97:57:e2:93:22:fa:0e:d2:a5:08:62: e7:ac:fe:35:64:00:7b:9d:69:67:8a:55:a4:4c:71: 8e:6f:8d:8e:bd:af:63:2a:a6:7b:62:a0:c5:84:aa: 47:76:78:03:64:23:38:79:4c:ff:c5:66:ea:ec:6c: e6:ca:ed:36:18:82:83:79:20:9a:ae:50:01:d5:12: 8e:31:c0:42:6e:a9:78:69:f7:fc:db:e4:b5:5b:1b: dc:6d:81:54:68:cb:1e:2f:14:6f:0f:56:6a:91:83: 93:b1:e7:ea:be:71:af:31:ab:07:dd:09:d9:7e:2e: 9d:a5:8a:f2:78:ac:7b:46:75:54:dd:46:1e:88:82: 3d:15:89:09:3c:5b:3a:0e:cd:8a:28:de:26:14:fa: 4f:4d:c8:08:f9:4a:a6:f1:17:d3:c3:47:59:93:35: c0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EA:D5:5B:46:0D:D0:F6:1B:A3:30:08:13:2A:7B:10:75:E7:51:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:78:c1:15:95:eb:66:25:71:1d:8a:8f:70:6a:dc:82:f3:e9: ab:52:5e:a2:67:36:93:18:98:4d:39:34:60:47:3b:70:6f:e8: 48:bd:58:6d:91:6a:67:26:9b:89:c0:9c:1c:ac:1c:40:f3:76: 80:79:bd:04:47:25:f8:6e:27:9d:b8:06:e5:ee:08:9e:29:b3: df:7d:b0:8a:af:db:26:44:ab:72:3e:ee:bf:16:68:09:0c:7e: 8f:76:a2:44:b1:97:6b:e0:4f:6d:f0:04:8c:6e:55:d5:e3:15: 0f:42:b8:e5:d0:61:85:8d:01:84:03:a0:9a:c1:6a:cb:ff:e4: 51:d0:98:fb:b8:10:a8:a5:71:d2:2a:5e:62:92:ac:50:e5:48: ec:4a:81:32:b4:76:75:19:b3:67:93:a4:1a:b4:7e:57:ea:97: 8e:44:fe:ad:4b:cc:14:b3:24:42:98:2e:40:07:35:2b:2d:7b: c8:d5:be:37:66:6d:36:f0:da:0c:2d:41:60:73:96:ba:71:db: 38:5a:3a:80:17:b0:bf:87:97:08:3f:00:36:5f:ae:17:bc:39: 55:37:7c:ed:d1:c4:b1:db:52:17:07:9c:5a:d8:3b:71:c6:fd: f0:c2:46:e9:3d:58:a9:be:82:83:b3:62:f7:a0:02:17:05:73: 84:f3:3f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLQsNsMlellKm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Yjg2NWUwMTQtMzIyMi00NDY2LThlZTgtOTIyNGI3NjFkY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+g2m2wmtPJN30I+1Hq8z1lZs1Upj2VH1ram 6WGF+hGgZ9L4K2MHBVjRU0Hvq7GvpRtFG9i+th34fazqVzezEbw74CaWPf4YhzBf STFCAklMuQk6j5xmvO4yPmeal1fikyL6DtKlCGLnrP41ZAB7nWlnilWkTHGOb42O va9jKqZ7YqDFhKpHdngDZCM4eUz/xWbq7Gzmyu02GIKDeSCarlAB1RKOMcBCbql4 aff82+S1WxvcbYFUaMseLxRvD1ZqkYOTsefqvnGvMasH3QnZfi6dpYryeKx7RnVU 3UYeiII9FYkJPFs6Ds2KKN4mFPpPTcgI+Uqm8RfTw0dZkzXAwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzq1VtGDdD2G6MwCBMqexB151HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU1MjU3OGItN2MxNC0z YmZmLWI1NWYtYzYyMGNlNzViZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN4wRWV62YlcR2Kj3Bq3ILz6atSXqJnNpMYmE05NGBHO3Bv6Ei9WG2R amcmm4nAnBysHEDzdoB5vQRHJfhuJ524BuXuCJ4ps999sIqv2yZEq3I+7r8WaAkM fo92okSxl2vgT23wBIxuVdXjFQ9CuOXQYYWNAYQDoJrBasv/5FHQmPu4EKilcdIq XmKSrFDlSOxKgTK0dnUZs2eTpBq0flfql45E/q1LzBSzJEKYLkAHNSste8jVvjdm bTbw2gwtQWBzlrpx2zhaOoAXsL+Hlwg/ADZfrhe8OVU3fO3RxLHbUhcHnFrYO3HG /fDCRuk9WKm+goOzYvegAhcFc4TzP90= -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:10 2025 by rpki-client