$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa File: d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa (raw, json) Hash identifier: yTYoVTohwkxTcIbIqg9g/d/tpu6gj8fwXv72zUqb94k= Subject key identifier: 67:92:EE:8E:02:C5:9D:7B:0A:51:05:CC:24:78:C7:EF:20:0B:DA:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CB2C32CB26769AE82CE60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396545 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:b2:c3:2c:b2:67:69:ae:82:ce:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=3e6f398c-252a-46d0-9125-cecfd013792a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:d1:ca:1d:35:e6:6f:0e:e4:81:10:7a:48: 97:ec:5e:81:13:dd:88:60:0e:dd:d7:cd:da:f5:05: 6e:94:2d:30:b8:3d:c7:23:9c:7b:60:64:8b:41:47: 7b:ec:3e:79:24:4a:59:d1:7e:62:c0:64:5c:58:57: c9:67:5e:25:8e:33:98:af:c3:3c:8c:be:94:27:ce: f0:2e:97:29:7a:60:87:8c:41:4d:83:b1:9d:ea:97: 8b:70:6f:a8:4f:c5:8d:1d:85:38:6b:42:8d:87:90: df:9d:ed:b3:76:cc:5d:ac:64:46:cd:25:c0:9d:b8: 49:dc:e2:82:57:de:62:5e:1b:7e:e0:a5:c3:3e:a0: e4:74:62:91:5c:7b:c1:40:20:24:08:9e:c7:fb:8b: 19:bb:c2:57:f2:a7:09:f9:83:aa:03:ec:23:da:ed: 86:15:f4:2d:d0:de:8f:f1:ac:a6:9a:3e:cf:ff:4b: b3:c0:c1:fc:82:70:64:8a:63:a1:ca:b1:de:1b:a6: ec:b1:29:79:d7:c6:91:4a:c9:55:02:e5:e3:2f:ad: e5:ac:c4:df:3e:39:c5:49:36:56:37:0b:31:7f:52: 83:3f:0c:be:8e:11:3b:01:ef:6d:93:84:89:58:3e: 8c:76:72:51:22:64:04:fc:16:83:92:65:aa:e0:61: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:EE:8E:02:C5:9D:7B:0A:51:05:CC:24:78:C7:EF:20:0B:DA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f8:16:68:af:e4:69:ec:4a:91:2f:74:7c:f8:6e:2f:73:6e: 7e:2a:0e:7d:80:3f:78:03:c2:24:82:64:97:3b:f0:a6:aa:04: 31:1e:20:d6:85:a6:4a:42:05:ac:61:4b:58:63:f3:88:3f:61: f0:d8:b2:c8:d2:ad:3e:97:1a:d5:d3:81:59:6e:a9:52:2b:71: 1a:0d:29:dd:79:10:32:36:6b:be:4f:5f:67:f6:89:e3:82:c1: 96:47:4f:5b:54:ab:1d:9e:e9:22:0b:77:6a:3e:2c:49:71:53: 49:14:7f:de:19:95:ae:c8:ed:32:0a:1e:65:6e:a5:27:12:51: ee:52:90:a3:99:ee:71:37:92:13:cb:e4:25:34:4c:fb:1a:c8: e1:06:aa:cf:42:e0:d4:20:b2:5c:35:db:24:13:f6:61:52:ea: 89:d6:09:7f:80:a1:fa:8b:a8:ca:17:f6:9c:8b:bd:36:bc:ea: 5c:c6:10:93:61:bc:03:14:95:ea:af:bb:d9:bf:fb:65:fa:c3: 1d:38:02:ea:4d:c7:b2:f5:2a:4f:48:17:95:c7:56:21:3f:0c: 22:2c:55:ba:35:59:7f:69:de:78:e1:48:b6:13:b4:cb:8c:19: 02:7a:5f:f4:1c:d0:9d:22:a2:dc:47:e3:19:b6:7c:be:38:8f: 32:8c:74:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPLLDLLJnaa6CzmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2U2ZjM5OGMtMjUyYS00NmQwLTkxMjUtY2VjZmQwMTM3OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoXRyh015m8O5IEQekiX7F6BE92IYA7d183a 9QVulC0wuD3HI5x7YGSLQUd77D55JEpZ0X5iwGRcWFfJZ14ljjOYr8M8jL6UJ87w LpcpemCHjEFNg7Gd6peLcG+oT8WNHYU4a0KNh5Dfne2zdsxdrGRGzSXAnbhJ3OKC V95iXht+4KXDPqDkdGKRXHvBQCAkCJ7H+4sZu8JX8qcJ+YOqA+wj2u2GFfQt0N6P 8aymmj7P/0uzwMH8gnBkimOhyrHeG6bssSl518aRSslVAuXjL63lrMTfPjnFSTZW Nwsxf1KDPwy+jhE7Ae9tk4SJWD6MdnJRImQE/BaDkmWq4GGJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeS7o4CxZ17ClEFzCR4x+8gC9pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA1NWY5ODktOTU5Yy0z Y2RjLWIxZGQtYmY4ZGVjZmRmNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr4Fmiv5GnsSpEvdHz4bi9zbn4qDn2AP3gDwiSCZJc78KaqBDEeINaF pkpCBaxhS1hj84g/YfDYssjSrT6XGtXTgVluqVIrcRoNKd15EDI2a75PX2f2ieOC wZZHT1tUqx2e6SILd2o+LElxU0kUf94Zla7I7TIKHmVupScSUe5SkKOZ7nE3khPL 5CU0TPsayOEGqs9C4NQgslw12yQT9mFS6onWCX+AofqLqMoX9pyLvTa86lzGEJNh vAMUleqvu9m/+2X6wx04AupNx7L1Kk9IF5XHViE/DCIsVbo1WX9p3njhSLYTtMuM GQJ6X/Qc0J0iotxH4xm2fL44jzKMdFM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:42:25 2025 by rpki-client