$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa File: 0f088544-af2e-30e5-ad62-8a9024656cd2.roa (raw, json) Hash identifier: nPJIgBzrPNjfgpuFEz9zr38sNjqEMjdDF/iz5h33L2o= Subject key identifier: 05:47:6F:15:73:66:17:CE:AF:5F:F6:91:81:FE:94:52:03:F2:58:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B7E8FDFA04E47721B5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20362 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:7e:8f:df:a0:4e:47:72:1b:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0caadf19-eece-4732-8a5f-e4975604d94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:8f:d2:7e:a3:19:63:69:c0:a9:dc:6b:cd: 8a:79:74:73:b4:39:d0:f4:2b:83:46:6b:89:04:e2: 8e:bb:30:ea:08:f0:e4:89:66:63:47:cc:70:5a:04: c8:af:b5:81:6a:89:83:75:b0:38:18:aa:df:c8:81: bd:24:de:03:90:47:70:42:4b:d0:27:36:96:8f:16: 72:e8:92:0e:21:51:e1:70:6b:ea:e5:11:12:94:ee: 57:02:f1:32:8a:c1:68:d6:66:2b:e4:76:9d:a7:f6: 73:fc:8a:05:7a:f0:17:b1:fa:0d:bd:4e:45:03:9a: ca:b0:1c:05:e1:23:d8:e6:61:c3:e9:ce:a6:0c:b4: e0:81:c5:50:8b:28:ca:29:6a:62:d1:0b:37:ba:eb: 36:3e:95:9b:23:35:0d:6b:55:2f:14:92:ce:56:1d: 86:48:76:03:b3:d4:21:6c:07:11:71:9e:42:77:2f: 37:c3:d6:f4:ba:a8:bc:e4:47:fc:71:b0:10:f7:91: 59:1d:c2:19:c6:76:8b:ed:c8:fc:22:99:66:e7:1b: a3:3e:fa:74:ab:28:bf:5d:c1:98:02:dd:3d:b0:37: 66:f7:6c:b9:fa:08:ee:b2:dd:09:72:28:62:3d:46: ba:37:b5:aa:e2:86:6d:f4:71:d4:5b:f1:5f:be:25: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:6F:15:73:66:17:CE:AF:5F:F6:91:81:FE:94:52:03:F2:58:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f088544-af2e-30e5-ad62-8a9024656cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4b:67:55:bd:a3:1e:35:9b:45:2b:6f:26:c5:31:f0:2d:20: 8d:bc:0e:aa:64:bd:a4:9f:6c:c7:be:55:0f:98:5e:1f:4a:9e: 0e:9d:e0:1b:b7:16:f7:c6:c1:83:1d:71:ee:77:1c:dc:71:65: 43:42:10:66:6a:f0:05:a2:ac:f5:ab:80:4e:86:42:05:40:03: 76:7a:c3:03:02:2c:bc:f3:e5:3a:b4:7d:5f:bf:ab:7a:b7:52: 7c:75:cd:dc:fa:44:d2:b5:00:21:20:c8:d8:05:93:76:43:09: 1b:3d:fd:13:be:55:74:96:9f:38:85:60:45:cd:f9:f4:bc:d4: 47:8d:1e:ef:ac:40:9d:14:e9:27:21:a3:a8:3d:73:c8:23:d8: 6a:9f:79:42:a4:fd:20:6f:c2:06:ed:c4:26:ec:80:0f:ff:8d: 8d:af:ac:f0:8f:a3:1d:a7:c2:6f:91:fd:de:13:90:6c:0a:d4: 6d:08:fc:6d:c2:97:49:b4:24:f5:f5:59:ae:8e:fb:d6:0d:7f: 4b:e3:91:57:a3:b1:3d:c5:54:d2:a0:91:eb:18:f6:bc:a4:73: aa:8d:00:83:03:c0:44:a2:52:78:46:38:fd:15:7c:c7:82:ab: a7:8d:c9:25:51:9a:a4:b2:ff:b5:2b:e5:09:73:14:01:92:9f: bb:73:ae:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji36P36BOR3IbXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNhYWRmMTktZWVjZS00NzMyLThhNWYtZTQ5NzU2MDRkOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI+P0n6jGWNpwKnca82KeXRztDnQ9CuDRmuJ BOKOuzDqCPDkiWZjR8xwWgTIr7WBaomDdbA4GKrfyIG9JN4DkEdwQkvQJzaWjxZy 6JIOIVHhcGvq5RESlO5XAvEyisFo1mYr5Hadp/Zz/IoFevAXsfoNvU5FA5rKsBwF 4SPY5mHD6c6mDLTggcVQiyjKKWpi0Qs3uus2PpWbIzUNa1UvFJLOVh2GSHYDs9Qh bAcRcZ5Cdy83w9b0uqi85Ef8cbAQ95FZHcIZxnaL7cj8Iplm5xujPvp0qyi/XcGY At09sDdm92y5+gjust0JcihiPUa6N7Wq4oZt9HHUW/FfviUWTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAVHbxVzZhfOr1/2kYH+lFID8ljVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwODg1NDQtYWYyZS0z MGU1LWFkNjItOGE5MDI0NjU2Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYS2dVvaMeNZtFK28mxTHwLSCNvA6qZL2kn2zHvlUPmF4fSp4OneAb txb3xsGDHXHudxzccWVDQhBmavAFoqz1q4BOhkIFQAN2esMDAiy88+U6tH1fv6t6 t1J8dc3c+kTStQAhIMjYBZN2QwkbPf0TvlV0lp84hWBFzfn0vNRHjR7vrECdFOkn IaOoPXPII9hqn3lCpP0gb8IG7cQm7IAP/42Nr6zwj6Mdp8Jvkf3eE5BsCtRtCPxt wpdJtCT19VmujvvWDX9L45FXo7E9xVTSoJHrGPa8pHOqjQCDA8BEolJ4Rjj9FXzH gqunjcklUZqksv+1K+UJcxQBkp+7c64u -----END CERTIFICATE-----Generated at Fri Sep 25 13:26:44 2026 by rpki-client