$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa File: e11d5d20-c81c-3d60-a54b-f3047cd42608.roa (raw, json) Hash identifier: zgyxRGGpK6a8XkDez2N306wBqURrQ9HI2iRUF/yexIs= Subject key identifier: 9F:BD:0F:EB:24:3C:4B:B1:36:DD:6E:13:BD:8A:9F:8D:B1:8D:05:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B583CAFD8B21F99B31A47F890 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 396541 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:af:d8:b2:1f:99:b3:1a:47:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d5916c1d-cb38-4bbe-a01b-40a37f4575cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:2d:88:ca:33:46:d8:d6:b9:88:be:c5:75: ae:2f:fd:f2:4c:b0:76:c6:70:b9:eb:45:60:81:47: 59:43:c0:09:3e:7f:69:9f:92:51:55:77:c4:fd:c7: 77:89:40:88:a9:07:00:43:9c:72:51:97:e0:71:fb: 42:1a:d2:62:79:10:e8:4c:c1:df:73:65:58:a4:34: 89:0e:6b:7d:09:c2:71:53:0c:7b:94:86:c5:ff:ce: fe:b1:f0:08:71:e9:1b:89:e4:31:61:c5:ca:f3:9d: 4d:57:8c:9c:7f:4a:4b:15:3b:cb:b3:8f:02:31:cb: 06:fb:f3:fd:e3:dd:7c:40:19:db:c5:f5:15:97:ad: d2:0f:aa:86:2d:18:d5:67:2c:61:26:af:b4:7d:29: 41:3a:c5:7c:bb:b0:8d:4b:0d:ce:e4:6b:78:0a:f2: a7:02:0f:d8:a5:ec:c3:f4:a3:a0:4c:2d:29:e6:eb: 5d:d9:34:1c:de:14:7d:90:9a:90:87:b5:ff:3f:ba: d0:5b:2a:ca:2a:0c:88:02:1d:77:88:6c:a7:9b:95: 83:0d:39:b9:ac:2a:5b:01:5c:ef:cc:ea:86:82:64: 13:4e:18:39:d4:80:70:70:f2:34:05:99:f2:6f:4e: 1b:9e:09:05:95:06:92:ec:f5:ab:86:55:57:89:6b: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:0F:EB:24:3C:4B:B1:36:DD:6E:13:BD:8A:9F:8D:B1:8D:05:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e11d5d20-c81c-3d60-a54b-f3047cd42608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c9:23:d3:cc:2a:4a:41:9a:c3:01:a9:60:37:37:83:6d:55: 84:06:74:7a:ec:62:10:9a:84:e3:61:ce:83:67:a8:e4:fb:68: f2:fe:a3:b5:0b:03:b3:8e:ec:15:3a:68:cd:0f:dc:5f:38:c1: d9:18:78:49:77:d7:fd:67:f8:52:7f:00:d3:b7:1b:4f:53:28: 70:87:f8:e3:95:b6:72:51:7a:5c:e7:9f:23:b7:4d:a4:68:6e: ae:6f:2e:e5:6b:93:d7:59:55:61:b7:a9:b1:0d:5f:0f:2c:2c: e4:75:b0:25:ec:28:ea:ab:74:20:92:37:0b:9a:ae:17:af:88: d8:7c:b0:8a:0f:8d:19:ca:c8:3c:10:85:74:19:8b:ed:b3:83: ab:70:c6:09:a2:74:a7:df:ed:be:77:f3:f9:a3:ca:e0:50:6f: 7f:be:83:25:9d:0b:58:13:da:b9:26:42:07:32:c8:a9:a2:7b: d6:ce:ee:5e:d5:51:78:4a:be:7f:86:ae:42:cf:60:34:d6:ae: 27:18:fa:26:8e:33:28:4c:43:27:da:b0:ee:c6:bd:66:60:5e: 1d:ed:3a:93:5b:e0:29:ba:a6:58:6f:69:f4:6d:b9:6a:ec:e5: 4e:ce:40:2c:9b:ce:33:2d:77:dc:46:65:39:49:a4:61:eb:58: 4e:4f:bd:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPK/Ysh+ZsxpH+JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDU5MTZjMWQtY2IzOC00YmJlLWEwMWItNDBhMzdmNDU3NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H0tiMozRtjWuYi+xXWuL/3yTLB2xnC560Vg gUdZQ8AJPn9pn5JRVXfE/cd3iUCIqQcAQ5xyUZfgcftCGtJieRDoTMHfc2VYpDSJ Dmt9CcJxUwx7lIbF/87+sfAIcekbieQxYcXK851NV4ycf0pLFTvLs48CMcsG+/P9 4918QBnbxfUVl63SD6qGLRjVZyxhJq+0fSlBOsV8u7CNSw3O5Gt4CvKnAg/YpezD 9KOgTC0p5utd2TQc3hR9kJqQh7X/P7rQWyrKKgyIAh13iGynm5WDDTm5rCpbAVzv zOqGgmQTThg51IBwcPI0BZnyb04bngkFlQaS7PWrhlVXiWtQ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+9D+skPEuxNt1uE72Kn42xjQWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTExZDVkMjAtYzgxYy0z ZDYwLWE1NGItZjMwNDdjZDQyNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfJI9PMKkpBmsMBqWA3N4NtVYQGdHrsYhCahONhzoNnqOT7aPL+o7UL A7OO7BU6aM0P3F84wdkYeEl31/1n+FJ/ANO3G09TKHCH+OOVtnJRelznnyO3TaRo bq5vLuVrk9dZVWG3qbENXw8sLOR1sCXsKOqrdCCSNwuarheviNh8sIoPjRnKyDwQ hXQZi+2zg6twxgmidKff7b538/mjyuBQb3++gyWdC1gT2rkmQgcyyKmie9bO7l7V UXhKvn+GrkLPYDTWricY+iaOMyhMQyfasO7GvWZgXh3tOpNb4Cm6plhvafRtuWrs 5U7OQCybzjMtd9xGZTlJpGHrWE5PvRM= -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:58 2025 by rpki-client