$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa File: ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa (raw, json) Hash identifier: w4r5k6fjVGAdDigB6jsFrsfhcCG3i5K00+tAlSXbg84= Subject key identifier: DC:0B:FB:38:0B:FE:F4:B9:6A:DA:E1:AC:4B:A1:04:12:A9:D2:19:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E730655314F7EFBB9B2E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 211369 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:30:65:53:14:f7:ef:bb:9b:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=ca193d19-6942-43ab-97e0-fe1766ebdd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:5f:76:16:bd:f3:a7:44:ac:f0:7e:f8:41: 94:14:9d:51:73:1d:09:e4:22:40:c3:78:f5:b0:a3: d5:6e:6c:34:e1:05:2d:30:92:68:21:9f:9c:ea:02: 20:ce:cd:d7:2c:be:14:f4:bc:dc:91:65:e0:73:c7: 9c:ef:6a:b5:9b:cd:8e:ca:e9:1d:f0:f5:ac:64:03: 66:10:e6:98:f7:46:13:fd:03:3d:21:67:89:a4:ec: 77:c0:cb:22:47:0a:ae:27:17:73:5f:c0:f5:6b:64: 05:dc:6d:cd:5e:6d:d7:6c:08:60:46:da:74:53:66: ad:c4:d1:fa:e0:68:95:9d:3d:ae:61:04:ed:08:92: 2d:b9:12:b2:61:36:73:1b:52:80:28:1e:f7:6d:54: f0:2b:83:4f:23:fa:20:83:19:db:12:6b:43:01:18: eb:53:f6:35:ac:c4:29:e5:1a:79:5e:f0:6c:0f:8c: a6:0c:7d:76:9f:b1:aa:37:88:19:d3:2a:d1:98:ad: 64:4b:dc:20:05:21:10:c1:7b:70:35:0b:7c:4e:bd: 80:4d:00:d9:f5:73:2a:64:cb:47:1c:17:5a:70:d9: 84:f0:44:81:17:7e:e0:50:64:58:35:45:71:40:7f: 3b:30:65:8d:26:30:e5:77:58:cd:e1:e1:b4:9e:cc: da:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:FB:38:0B:FE:F4:B9:6A:DA:E1:AC:4B:A1:04:12:A9:D2:19:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef3910e3-9fe5-34e7-9a8f-6ed148b22856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:40:0b:4b:c0:8b:2e:a4:bf:70:dd:f8:82:34:96:b8:51:1f: 72:f6:3a:2c:3b:4d:d4:2e:33:b6:ac:3d:7a:5d:33:6e:b8:c4: ce:ff:18:1e:f4:9b:af:fb:02:1a:b6:e4:23:85:db:c5:be:d7: bd:a9:13:4a:05:a5:9f:7c:34:16:dd:d1:3c:65:32:34:30:c3: db:6e:c4:45:f4:5a:b3:55:41:85:e8:a8:d5:35:9e:99:27:26: c1:a2:d9:91:4c:f9:e9:69:60:fc:11:49:80:74:36:97:26:5b: dc:38:9a:f6:be:32:9f:f1:55:58:df:d8:19:47:1d:ea:ed:9a: b5:8a:0c:ce:a1:7d:8a:c7:26:8a:50:cf:29:39:0f:6f:b3:b6: d9:1f:8e:8f:05:d2:7d:1b:af:6b:ab:6c:f8:66:5e:e9:fd:e1: 61:4f:dc:77:1d:c6:99:2c:5e:84:b8:3e:00:53:cf:3c:b4:05: af:84:09:04:60:ec:ab:c4:37:70:a5:48:89:7d:62:da:74:22: f7:2c:16:25:43:e0:15:53:7e:12:b3:79:0c:c0:5f:f3:91:51: 08:7a:b3:2c:d8:b4:26:24:0c:29:d7:55:eb:eb:2b:b4:03:15: 0c:30:ce:e2:ae:29:f8:8d:3d:3b:cb:67:2c:48:a2:c4:3d:2d: 3e:cf:f7:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5zBlUxT377ubLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2ExOTNkMTktNjk0Mi00M2FiLTk3ZTAtZmUxNzY2ZWJkZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xhfdha986dErPB++EGUFJ1Rcx0J5CJAw3j1 sKPVbmw04QUtMJJoIZ+c6gIgzs3XLL4U9LzckWXgc8ec72q1m82Oyukd8PWsZANm EOaY90YT/QM9IWeJpOx3wMsiRwquJxdzX8D1a2QF3G3NXm3XbAhgRtp0U2atxNH6 4GiVnT2uYQTtCJItuRKyYTZzG1KAKB73bVTwK4NPI/oggxnbEmtDARjrU/Y1rMQp 5Rp5XvBsD4ymDH12n7GqN4gZ0yrRmK1kS9wgBSEQwXtwNQt8Tr2ATQDZ9XMqZMtH HBdacNmE8ESBF37gUGRYNUVxQH87MGWNJjDld1jN4eG0nszaEQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNwL+zgL/vS5atrhrEuhBBKp0hlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWYzOTEwZTMtOWZlNS0z NGU3LTlhOGYtNmVkMTQ4YjIyODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkQAtLwIsupL9w3fiCNJa4UR9y9josO03ULjO2rD16XTNuuMTO/xge 9Juv+wIatuQjhdvFvte9qRNKBaWffDQW3dE8ZTI0MMPbbsRF9FqzVUGF6KjVNZ6Z JybBotmRTPnpaWD8EUmAdDaXJlvcOJr2vjKf8VVY39gZRx3q7Zq1igzOoX2KxyaK UM8pOQ9vs7bZH46PBdJ9G69rq2z4Zl7p/eFhT9x3HcaZLF6EuD4AU888tAWvhAkE YOyrxDdwpUiJfWLadCL3LBYlQ+AVU34Ss3kMwF/zkVEIerMs2LQmJAwp11Xr6yu0 AxUMMM7irin4jT07y2csSKLEPS0+z/dg -----END CERTIFICATE-----Generated at Wed Oct 29 20:45:19 2025 by rpki-client