$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa File: ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa (raw, json) Hash identifier: i0cRm3XIj0XiBqVYF5q+B7h9PIO4lCK64GpUcF9SbLg= Subject key identifier: 7D:9F:87:64:75:7F:BC:82:23:1E:31:60:E1:2D:05:DB:14:43:AB:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72E2033EE15997658D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 397199 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2e:20:33:ee:15:99:76:58:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=48ab7033-78c2-4895-b5ae-4ee429f656b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:01:bc:90:c7:a7:59:34:a6:0f:de:68:2f: e2:8a:62:7e:5c:e0:02:d6:89:57:e8:fd:2a:48:35: 0d:e6:a5:54:ef:92:ba:86:bc:bc:e8:f0:c4:58:54: 61:d6:09:18:57:55:82:fb:30:d3:e4:0c:ef:4e:9f: 7a:6a:48:b8:3c:24:98:80:21:2b:ff:e0:4c:ab:0d: 9a:c4:8a:43:63:83:77:62:8d:28:60:36:51:c4:49: b4:91:32:0f:f2:56:63:13:0c:ed:4f:50:da:67:fe: 68:19:77:bc:4b:e3:f6:aa:78:e2:3e:24:25:2f:f3: e4:4e:68:09:76:7a:2e:a0:a8:c3:7c:33:b3:de:84: 25:e3:4e:fa:ce:c4:49:05:c8:8d:d8:13:d0:36:05: fe:8e:f5:4a:d7:18:0e:1e:bb:c9:ee:f5:1f:b9:d7: 7d:6b:8e:25:a0:ca:2b:87:43:1b:8f:97:0a:25:a2: 65:30:63:2a:34:54:52:55:9b:75:de:45:6e:8f:c0: 6e:eb:ad:ef:92:09:f7:95:42:1e:b9:f3:f8:c6:8a: ba:f2:01:c1:b9:a8:6c:85:78:2c:6b:a5:ff:0b:f3: 56:cc:56:56:ab:35:3c:83:e4:e0:ba:b9:f0:19:4b: 73:da:67:d4:3c:62:65:c9:b1:1d:62:74:00:dd:10: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:87:64:75:7F:BC:82:23:1E:31:60:E1:2D:05:DB:14:43:AB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea5f76c1-35bf-3152-82db-f09dcba4abbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5f:d3:93:19:9c:3a:36:86:7e:39:89:2a:d2:96:2d:c4:9f: af:29:78:c9:d9:16:50:b9:07:b0:88:08:a6:54:96:74:e4:e2: 31:5d:ec:2b:93:23:69:2c:bf:0f:d0:d0:c1:6e:1a:57:e4:e2: 16:1d:93:6a:55:ee:79:f7:0a:c9:19:6a:ae:bd:42:d8:fb:d2: 29:59:50:ba:10:52:07:08:75:ae:f9:3d:06:1c:5c:ea:5d:2c: 44:ca:0c:e0:21:af:0b:af:9c:52:15:29:da:8f:bb:11:53:9a: 0a:24:5a:2e:39:05:e9:ed:7c:9c:a5:d9:6b:94:67:90:64:d4: 8c:8c:03:b6:00:c5:4f:25:f7:27:91:74:ac:c9:96:ff:26:bb: 91:f1:c8:bb:58:db:e1:d3:b3:cc:35:26:d7:22:7a:f0:10:92: e4:93:ba:30:2f:09:34:71:46:59:85:e0:c8:fe:08:68:56:59: 8e:09:95:b1:aa:2c:2b:3a:70:e7:e2:0c:70:dd:ab:92:25:bc: 1c:0f:c0:f1:0e:0d:27:44:fc:e1:9c:45:35:8e:fc:b5:e6:12: 6c:6b:6d:12:ae:35:73:58:b7:5c:cc:d6:c9:a6:a8:51:85:f8: 19:6b:d7:e6:79:10:54:52:1f:c0:04:1c:9f:85:7e:1f:1d:18: 1a:29:f2:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y4gM+4VmXZY1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDhhYjcwMzMtNzhjMi00ODk1LWI1YWUtNGVlNDI5ZjY1NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM8BvJDHp1k0pg/eaC/iimJ+XOAC1olX6P0q SDUN5qVU75K6hry86PDEWFRh1gkYV1WC+zDT5AzvTp96aki4PCSYgCEr/+BMqw2a xIpDY4N3Yo0oYDZRxEm0kTIP8lZjEwztT1DaZ/5oGXe8S+P2qnjiPiQlL/PkTmgJ dnouoKjDfDOz3oQl4076zsRJBciN2BPQNgX+jvVK1xgOHrvJ7vUfudd9a44loMor h0Mbj5cKJaJlMGMqNFRSVZt13kVuj8Bu663vkgn3lUIeufP4xoq68gHBuahshXgs a6X/C/NWzFZWqzU8g+TgurnwGUtz2mfUPGJlybEdYnQA3RBvowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH2fh2R1f7yCIx4xYOEtBdsUQ6t8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE1Zjc2YzEtMzViZi0z MTUyLTgyZGItZjA5ZGNiYTRhYmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFX9OTGZw6NoZ+OYkq0pYtxJ+vKXjJ2RZQuQewiAimVJZ05OIxXewr kyNpLL8P0NDBbhpX5OIWHZNqVe559wrJGWquvULY+9IpWVC6EFIHCHWu+T0GHFzq XSxEygzgIa8Lr5xSFSnaj7sRU5oKJFouOQXp7XycpdlrlGeQZNSMjAO2AMVPJfcn kXSsyZb/JruR8ci7WNvh07PMNSbXInrwEJLkk7owLwk0cUZZheDI/ghoVlmOCZWx qiwrOnDn4gxw3auSJbwcD8DxDg0nRPzhnEU1jvy15hJsa20SrjVzWLdczNbJpqhR hfgZa9fmeRBUUh/ABByfhX4fHRgaKfIR -----END CERTIFICATE-----Generated at Wed Oct 29 20:35:51 2025 by rpki-client