$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa File: 0a1d17be-d951-336b-89c6-34210e530519.roa (raw, json) Hash identifier: D8HnbXJfeRau6kc04iHTW3Q9gtId9K6TbCj0MbI3DHg= Subject key identifier: 12:33:BC:57:B7:1C:A2:1F:63:E6:4F:30:71:84:9F:C5:30:EA:FF:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49879A63478CDDDFDD804000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396592 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:9a:63:47:8c:dd:df:dd:80:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77da513f-9471-4a8a-9009-4ef7f51c5a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:9f:35:50:9e:e1:9e:74:ba:3a:11:dd:63: de:a5:c3:81:db:1a:82:f2:c4:e2:00:42:20:d4:61: e8:75:32:eb:3f:d4:6f:9a:dc:f6:ab:42:38:9e:4e: 1f:2b:db:4c:e6:be:eb:53:8b:ec:8e:79:0e:da:41: f3:52:1d:b1:88:cd:db:1e:7d:0b:3d:59:eb:fe:5a: d5:c9:af:7a:92:2f:9b:a6:3a:d0:19:3a:13:ad:5f: c7:1a:f7:75:28:23:ed:49:72:f4:27:5f:d0:b5:64: e6:56:66:55:ea:ef:13:92:8f:d5:8d:a9:f7:5d:cb: 2c:83:a0:52:6d:cb:61:67:6a:22:5e:fc:58:19:26: 55:7f:5f:a8:04:51:8c:7a:ab:2d:7b:d2:cd:1a:2d: 0e:3c:68:1b:0d:94:d3:4c:02:a3:5c:8c:b0:76:b2: ad:88:be:c5:a2:0c:03:15:e6:a0:12:00:62:54:d8: 98:a8:a6:60:bd:a5:82:19:cc:ae:dc:24:27:f5:9f: f7:31:fa:41:04:b0:19:2a:a9:f7:41:9b:51:6e:22: 27:21:9c:7a:3b:4f:8d:b5:98:54:b7:67:86:b5:b3: 16:9f:5e:1d:12:c7:0b:96:cc:5a:8b:d7:cf:b3:9b: e2:8f:9c:cb:74:ec:36:a1:81:9b:c8:15:40:45:b6: 4c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:BC:57:B7:1C:A2:1F:63:E6:4F:30:71:84:9F:C5:30:EA:FF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0a1d17be-d951-336b-89c6-34210e530519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6c:3d:d9:d4:15:89:3b:01:f3:f9:5b:73:23:ce:fd:2a:e0: e8:a7:e6:05:5a:0f:80:86:03:7e:b4:aa:c8:bc:fe:ab:84:37: 06:14:37:90:5e:7d:da:2f:88:c0:76:74:81:30:1e:19:d1:e1: 38:e9:b8:10:fe:9f:21:fc:5e:89:c3:31:ab:82:35:eb:28:6d: 7d:b2:8e:aa:b5:20:ce:7d:1a:4c:24:28:8e:19:40:d3:b5:44: 19:59:ef:b6:86:4b:da:23:1e:da:3e:b4:3d:d1:ca:42:b4:d9: e6:fb:70:30:ac:85:f4:8d:df:15:09:ee:15:24:70:e8:12:ed: 90:9c:a0:44:be:df:23:8b:37:dc:89:81:74:c1:e1:4a:61:cf: 43:1b:ae:b9:e0:90:dd:0c:98:f3:b1:5f:50:68:b7:fa:86:d0: 65:71:be:43:03:fa:29:bc:79:fa:8d:cb:9c:5f:31:32:46:97: a7:d4:b7:a4:4a:24:ca:6b:b3:0b:f8:b8:2c:94:0d:dd:16:d2: 2c:bb:cc:a3:c7:b1:c2:dd:32:c6:3d:76:5b:d7:cf:d1:89:aa: 5d:7d:a6:51:00:87:60:b2:77:cd:7f:44:9c:e4:19:70:51:b2: 90:59:2f:5e:95:bc:d0:54:36:2f:e8:5c:f8:2d:70:7b:92:bc: db:98:9a:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jh5pjR4zd392AQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdkYTUxM2YtOTQ3MS00YThhLTkwMDktNGVmN2Y1MWM1YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ifNVCe4Z50ujoR3WPepcOB2xqC8sTiAEIg 1GHodTLrP9Rvmtz2q0I4nk4fK9tM5r7rU4vsjnkO2kHzUh2xiM3bHn0LPVnr/lrV ya96ki+bpjrQGToTrV/HGvd1KCPtSXL0J1/QtWTmVmZV6u8Tko/Vjan3Xcssg6BS bcthZ2oiXvxYGSZVf1+oBFGMeqste9LNGi0OPGgbDZTTTAKjXIywdrKtiL7FogwD FeagEgBiVNiYqKZgvaWCGcyu3CQn9Z/3MfpBBLAZKqn3QZtRbiInIZx6O0+NtZhU t2eGtbMWn14dEscLlsxai9fPs5vij5zLdOw2oYGbyBVARbZMDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBIzvFe3HKIfY+ZPMHGEn8Uw6v8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGExZDE3YmUtZDk1MS0z MzZiLTg5YzYtMzQyMTBlNTMwNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgbD3Z1BWJOwHz+VtzI879KuDop+YFWg+AhgN+tKrIvP6rhDcGFDeQ Xn3aL4jAdnSBMB4Z0eE46bgQ/p8h/F6JwzGrgjXrKG19so6qtSDOfRpMJCiOGUDT tUQZWe+2hkvaIx7aPrQ90cpCtNnm+3AwrIX0jd8VCe4VJHDoEu2QnKBEvt8jizfc iYF0weFKYc9DG6654JDdDJjzsV9QaLf6htBlcb5DA/opvHn6jcucXzEyRpen1Lek SiTKa7ML+LgslA3dFtIsu8yjx7HC3TLGPXZb18/RiapdfaZRAIdgsnfNf0Sc5Blw UbKQWS9elbzQVDYv6Fz4LXB7krzbmJpp -----END CERTIFICATE-----Generated at Fri Sep 25 17:58:10 2026 by rpki-client