$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa File: c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa (raw, json) Hash identifier: bXcP6Yt2pfL/lwgdE4iNXAOpLECKt6l63vJyJnntTs0= Subject key identifier: 18:D0:7F:82:0C:76:42:F0:3D:79:1B:2F:6A:D2:7C:66:8D:E0:97:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAF0889C66DA0F99662C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396592 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:af:08:89:c6:6d:a0:f9:96:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=53c8a528-e34f-4b67-adc0-fc0ff5159458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5d:f0:90:0c:10:c9:75:24:0b:7c:fa:48:1c: c8:5b:66:b3:4c:f3:e2:32:3c:aa:ff:a3:12:52:22: a1:11:21:82:2b:9d:f2:2f:df:c9:00:62:0e:1a:5c: 92:2b:e9:ee:44:39:58:d1:82:9e:85:f2:55:1c:ea: 3c:86:6e:00:21:8e:50:95:7a:76:8d:b4:8f:bb:97: 1c:04:07:20:6c:af:67:24:67:70:4d:7f:6b:4b:80: 36:80:82:4c:51:2f:6b:49:a2:d1:1f:36:8d:cb:47: d5:8d:a4:6f:bd:c6:d5:e3:95:fe:44:16:90:a1:ff: 9b:58:e9:4b:37:87:e1:c6:de:d2:39:ed:e2:e2:7c: 71:e2:d4:34:76:7a:33:a2:fa:79:22:04:98:0f:64: f4:dd:4d:b1:32:03:eb:5e:21:6b:0d:46:be:52:08: 4f:1f:75:d6:7a:24:04:37:71:01:00:37:0d:74:82: ea:6b:bc:8e:50:b2:cd:b0:22:7e:4c:81:d4:aa:27: c4:fc:2a:f7:86:2c:ec:3c:3b:0a:ab:ed:1e:ca:82: 69:fc:35:7e:20:1a:68:99:de:6c:dc:64:9a:d3:17: 19:5e:ad:e8:8a:62:03:0a:38:2d:fc:b4:0b:c6:de: 71:af:38:75:21:72:6c:25:16:3c:aa:42:97:f8:36: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:7F:82:0C:76:42:F0:3D:79:1B:2F:6A:D2:7C:66:8D:E0:97:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:75:27:b6:9e:eb:a6:ad:f9:32:64:9f:72:37:d6:4f:a6:3e: 82:b1:97:ea:a7:80:f2:fa:18:43:0c:64:0b:d3:38:6d:ab:af: 43:0b:6c:0d:c6:f8:2c:5a:22:76:28:f4:8f:de:2b:db:74:f8: fc:fd:98:f4:5f:de:a7:21:3f:df:5d:88:c0:0e:74:95:05:53: 59:9c:c5:2b:0e:91:10:b2:d0:0b:ca:b4:c4:c1:39:21:a3:1d: 0a:41:ef:65:a2:05:e2:77:29:e4:03:06:75:9e:93:c1:ba:eb: 25:09:70:8b:39:9e:67:71:e0:e1:1b:33:ed:17:ca:c4:f2:25: ee:ca:2b:0a:cc:11:3c:77:d6:ba:87:b9:26:76:75:0c:64:cb: de:8c:6e:f6:a9:42:a4:80:75:90:3b:6d:05:f2:79:ec:d1:82: fe:fc:3d:be:91:ce:ee:73:ea:d2:ff:a0:82:9c:41:3d:db:d6: b5:7a:04:00:8c:4e:c3:ee:f1:9d:25:04:c0:55:ad:74:97:bb: ea:ad:57:f1:8e:19:09:e4:4a:59:c0:cc:e0:22:d3:44:fa:d9: 5e:2c:53:81:c6:7c:5e:e3:92:53:ce:bc:1e:1e:4e:a5:77:4d: df:70:c7:18:23:a9:17:f1:52:c9:13:b8:88:ae:f1:23:be:43: 66:59:28:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK8IicZtoPmWYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NTNjOGE1MjgtZTM0Zi00YjY3LWFkYzAtZmMwZmY1MTU5NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA613wkAwQyXUkC3z6SBzIW2azTPPiMjyq/6MS UiKhESGCK53yL9/JAGIOGlySK+nuRDlY0YKehfJVHOo8hm4AIY5QlXp2jbSPu5cc BAcgbK9nJGdwTX9rS4A2gIJMUS9rSaLRHzaNy0fVjaRvvcbV45X+RBaQof+bWOlL N4fhxt7SOe3i4nxx4tQ0dnozovp5IgSYD2T03U2xMgPrXiFrDUa+UghPH3XWeiQE N3EBADcNdILqa7yOULLNsCJ+TIHUqifE/Cr3hizsPDsKq+0eyoJp/DV+IBpomd5s 3GSa0xcZXq3oimIDCjgt/LQLxt5xrzh1IXJsJRY8qkKX+Db7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjQf4IMdkLwPXkbL2rSfGaN4JfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1NzBkYTYtM2EwNy0z NTZiLWE1YmEtMDhhZGFhMjllM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV1J7ae66at+TJkn3I31k+mPoKxl+qngPL6GEMMZAvTOG2rr0MLbA3G +CxaInYo9I/eK9t0+Pz9mPRf3qchP99diMAOdJUFU1mcxSsOkRCy0AvKtMTBOSGj HQpB72WiBeJ3KeQDBnWek8G66yUJcIs5nmdx4OEbM+0XysTyJe7KKwrMETx31rqH uSZ2dQxky96MbvapQqSAdZA7bQXyeezRgv78Pb6Rzu5z6tL/oIKcQT3b1rV6BACM TsPu8Z0lBMBVrXSXu+qtV/GOGQnkSlnAzOAi00T62V4sU4HGfF7jklPOvB4eTqV3 Td9wxxgjqRfxUskTuIiu8SO+Q2ZZKGY= -----END CERTIFICATE-----Generated at Wed Oct 29 20:22:31 2025 by rpki-client