$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa File: e4f2dd84-4660-3edd-a01c-c370af904e1d.roa (raw, json) Hash identifier: jZhScioO9LbyhGABnUW7cGcfbi9l3zb8VOnvDCiPStE= Subject key identifier: 92:F7:18:14:BE:C5:22:B8:1F:88:54:97:87:16:C5:F6:B6:3D:7A:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72C23AF6EC71093BF9240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396606 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2c:23:af:6e:c7:10:93:bf:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=1bb265fa-b888-4b51-9894-7160b5c19f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:8b:18:11:86:ae:67:b3:ee:61:5f:12:a7: 54:1c:43:73:45:e2:4f:28:c6:99:d1:75:f6:31:f1: cf:ed:62:6d:e7:4c:b3:7f:81:0f:f6:4f:04:24:8f: de:26:5a:1e:ac:84:f8:c1:c6:fb:18:2b:4c:38:cf: 0a:23:93:b4:38:59:23:0b:68:54:07:4c:89:ea:09: 38:c9:f2:dc:83:c0:3a:6d:00:36:ab:7f:62:64:e1: 7c:c6:31:87:e1:a9:38:5d:41:4b:4f:ab:a4:ce:42: d2:19:2f:17:79:3b:bb:93:bf:98:c1:e9:99:71:4f: 3c:a7:62:1a:3a:e1:f6:99:d4:27:1f:ce:12:28:9a: 87:85:64:50:2f:04:97:e1:a9:8e:d7:d6:ad:2d:2b: b9:1e:11:33:24:fd:65:cc:ac:6c:28:7f:2e:66:78: 63:ca:8a:47:80:ed:a7:2b:51:cb:9c:8f:bf:77:c2: d3:53:86:f1:0d:e4:c7:9f:15:50:a2:c6:14:f7:ae: ed:08:36:f7:4a:f6:89:1a:31:e5:a4:48:93:2d:5d: 37:49:77:20:9f:13:28:62:bf:f6:ae:ea:58:91:cc: e6:ed:19:ec:13:48:29:71:ef:1f:ca:31:e0:2a:1b: 79:75:53:3a:ed:34:b0:0f:77:72:7a:ac:13:07:93: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F7:18:14:BE:C5:22:B8:1F:88:54:97:87:16:C5:F6:B6:3D:7A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f9:84:05:55:b5:e0:64:1e:8d:8c:e7:b9:b0:63:ae:be:bb: 18:00:29:d4:c6:b7:5e:7e:b6:d7:df:83:59:c2:f0:89:c8:0b: cb:af:df:be:79:75:a6:24:57:0e:9b:7d:99:3f:89:95:b2:f8: 7b:68:ad:0b:97:a1:da:78:c0:54:e8:03:03:7a:75:bc:59:8d: 5b:dc:fb:8a:c8:29:e2:27:41:d8:70:c1:b1:55:bd:fa:93:11: 30:af:46:a8:bf:24:64:a4:b1:3f:b8:ed:f5:01:6a:cd:cf:29: 2c:04:50:3e:2e:aa:99:99:2b:c2:eb:23:c8:d0:f9:13:c5:e8: 94:39:8a:c1:b0:3e:7c:8e:7c:83:42:e4:31:50:b6:ab:3d:b7: 85:1b:36:c6:97:d6:b7:44:7a:a5:fe:7c:8a:70:2e:56:a2:81: 55:10:fe:43:f2:4c:1f:af:ad:fd:14:0b:0f:1f:18:62:16:b7: fb:92:8d:a3:2e:96:fe:6a:40:88:68:ee:0d:40:24:0b:c4:bb: bb:3b:eb:aa:bb:d3:19:36:27:99:d1:76:e7:65:24:96:71:9c: a7:2a:f4:f6:0c:52:aa:87:35:b6:14:e8:8f:72:a3:e2:da:06: 31:9d:7f:82:04:2a:cc:78:c8:c3:b4:1e:57:e0:e1:42:7e:38: ee:e8:28:4d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5ywjr27HEJO/kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MWJiMjY1ZmEtYjg4OC00YjUxLTk4OTQtNzE2MGI1YzE5ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i2LGBGGrmez7mFfEqdUHENzReJPKMaZ0XX2 MfHP7WJt50yzf4EP9k8EJI/eJloerIT4wcb7GCtMOM8KI5O0OFkjC2hUB0yJ6gk4 yfLcg8A6bQA2q39iZOF8xjGH4ak4XUFLT6ukzkLSGS8XeTu7k7+YwemZcU88p2Ia OuH2mdQnH84SKJqHhWRQLwSX4amO19atLSu5HhEzJP1lzKxsKH8uZnhjyopHgO2n K1HLnI+/d8LTU4bxDeTHnxVQosYU967tCDb3SvaJGjHlpEiTLV03SXcgnxMoYr/2 rupYkczm7RnsE0gpce8fyjHgKht5dVM67TSwD3dyeqwTB5O8awIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJL3GBS+xSK4H4hUl4cWxfa2PXruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRmMmRkODQtNDY2MC0z ZWRkLWEwMWMtYzM3MGFmOTA0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC+YQFVbXgZB6NjOe5sGOuvrsYACnUxrdefrbX34NZwvCJyAvLr9++ eXWmJFcOm32ZP4mVsvh7aK0Ll6HaeMBU6AMDenW8WY1b3PuKyCniJ0HYcMGxVb36 kxEwr0aovyRkpLE/uO31AWrNzyksBFA+LqqZmSvC6yPI0PkTxeiUOYrBsD58jnyD QuQxULarPbeFGzbGl9a3RHql/nyKcC5WooFVEP5D8kwfr639FAsPHxhiFrf7ko2j Lpb+akCIaO4NQCQLxLu7O+uqu9MZNieZ0XbnZSSWcZynKvT2DFKqhzW2FOiPcqPi 2gYxnX+CBCrMeMjDtB5X4OFCfjju6ChN -----END CERTIFICATE-----Generated at Wed Oct 29 22:41:16 2025 by rpki-client