$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/821d1814-40f2-3e18-8342-c35444071b22.roa File: 821d1814-40f2-3e18-8342-c35444071b22.roa (raw, json) Hash identifier: JDVoNlpn6n9/Ef7EDxpGyzOAkOw42fYfij4p0nGoJ4c= Subject key identifier: 0D:46:EF:D2:61:55:B5:3A:AC:F1:92:82:5A:E5:47:58:6B:46:F4:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B41E72D0C3FE483E470D383C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/821d1814-40f2-3e18-8342-c35444071b22.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396554 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:2d:0c:3f:e4:83:e4:70:d3:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=20351f0d-d3bb-49ce-a34d-e3bb2f3c6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:fb:42:29:92:c5:a7:b3:44:2c:56:5b:31: 24:19:93:25:ef:3b:ca:87:17:3e:04:e1:37:5a:a5: 06:14:ba:11:e1:93:3a:7b:ee:02:a0:21:97:5a:96: 5e:12:d8:cd:60:72:10:d8:bc:a9:51:2d:2a:10:e6: 94:e9:fc:7d:86:bf:3d:9e:b4:3b:86:20:17:dc:15: e6:8f:ec:16:aa:26:74:e0:cc:28:8a:89:2c:42:f0: 80:7d:4b:18:df:a1:26:51:ef:2d:39:65:13:c5:b7: 5b:2f:31:c1:a2:c8:67:5c:59:38:53:e5:e4:79:f5: 84:38:b6:02:f0:5b:8f:ae:41:3c:e3:8c:ac:1c:84: 3a:72:d3:5c:98:06:5d:e7:bd:57:a1:35:64:6b:d4: 40:75:69:85:8d:af:24:14:1a:65:85:61:42:2b:51: 85:24:00:73:7b:b9:e4:e0:11:00:16:13:05:f1:e0: a6:e4:98:10:c5:84:b2:b2:c2:0e:11:70:f2:e7:02: 94:b4:97:27:7c:87:73:ee:9c:97:af:ea:2e:da:38: df:14:e5:2d:a4:33:b9:b4:7d:f3:6f:d2:82:74:72: 0f:49:5c:e7:3e:31:ee:61:1d:b9:59:44:f4:91:b0: 17:ad:77:eb:ca:c2:91:fd:1c:85:99:59:31:22:aa: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:46:EF:D2:61:55:B5:3A:AC:F1:92:82:5A:E5:47:58:6B:46:F4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/821d1814-40f2-3e18-8342-c35444071b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:cc:c0:c5:7d:92:35:fe:27:0f:a1:3d:e2:3a:ad:cb:fe:a8: ef:69:94:7e:0a:29:58:e1:c0:8d:bf:4c:8a:da:30:25:cd:87: 21:81:44:de:92:75:e9:b4:ba:06:4a:de:56:23:5f:2f:64:ba: 6f:ef:9b:06:a7:95:14:5d:17:d1:41:30:b5:83:30:da:ea:5f: b0:dd:51:3c:d6:70:18:80:90:3e:93:06:8e:81:62:56:b4:37: 66:84:96:eb:7e:d8:fa:c8:f0:f2:79:16:9a:58:68:aa:b3:d5: 74:1b:e0:00:95:10:46:8b:0c:2b:b5:83:13:e9:42:8e:09:4a: b9:43:7a:c1:f9:fe:a4:57:e5:6f:60:56:30:b9:a4:b8:a7:c3: 1f:3e:02:98:b8:17:1c:d2:0d:88:f7:3f:2a:23:62:59:a9:fc: fd:40:94:70:89:eb:0c:8e:3b:87:30:0c:02:db:82:04:18:47: 76:c9:1b:4c:72:16:60:61:34:a1:ed:46:22:42:21:5c:7d:76: 87:90:b6:f2:ae:27:e6:dc:02:dc:85:db:af:b2:b0:35:b3:63: 65:62:af:1c:79:25:4a:68:12:ee:f3:e9:89:bd:b2:5b:41:ab: 03:26:97:dc:f1:ef:8c:d5:1a:62:82:15:5f:15:24:01:71:45: 7a:d6:3c:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtB5y0MP+SD5HDTg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MjAzNTFmMGQtZDNiYi00OWNlLWEzNGQtZTNiYjJmM2M2NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd77QimSxaezRCxWWzEkGZMl7zvKhxc+BOE3 WqUGFLoR4ZM6e+4CoCGXWpZeEtjNYHIQ2LypUS0qEOaU6fx9hr89nrQ7hiAX3BXm j+wWqiZ04MwoioksQvCAfUsY36EmUe8tOWUTxbdbLzHBoshnXFk4U+XkefWEOLYC 8FuPrkE844ysHIQ6ctNcmAZd571XoTVka9RAdWmFja8kFBplhWFCK1GFJABze7nk 4BEAFhMF8eCm5JgQxYSyssIOEXDy5wKUtJcnfIdz7pyXr+ou2jjfFOUtpDO5tH3z b9KCdHIPSVznPjHuYR25WUT0kbAXrXfrysKR/RyFmVkxIqpuxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA1G79JhVbU6rPGSglrlR1hrRvTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODIxZDE4MTQtNDBmMi0z ZTE4LTgzNDItYzM1NDQ0MDcxYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQzMDFfZI1/icPoT3iOq3L/qjvaZR+CilY4cCNv0yK2jAlzYchgUTe knXptLoGSt5WI18vZLpv75sGp5UUXRfRQTC1gzDa6l+w3VE81nAYgJA+kwaOgWJW tDdmhJbrftj6yPDyeRaaWGiqs9V0G+AAlRBGiwwrtYMT6UKOCUq5Q3rB+f6kV+Vv YFYwuaS4p8MfPgKYuBcc0g2I9z8qI2JZqfz9QJRwiesMjjuHMAwC24IEGEd2yRtM chZgYTSh7UYiQiFcfXaHkLbyrifm3ALchduvsrA1s2NlYq8ceSVKaBLu8+mJvbJb QasDJpfc8e+M1RpighVfFSQBcUV61jx6 -----END CERTIFICATE-----Generated at Wed Nov 5 02:53:45 2025 by rpki-client