$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa File: 0f0aac1e-83cb-3953-814a-150b44c1756d.roa (raw, json) Hash identifier: WUzpwLudTzxRy9Zh+HesC6k4GKzlyRM8qquoBLfh6Sc= Subject key identifier: 21:32:37:A3:FC:18:17:C2:26:A8:D6:B4:CB:5B:22:CD:91:D9:A1:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988E87A8F66230DABFC3D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397198 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e8:7a:8f:66:23:0d:ab:fc:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=191eed00-b72c-4547-a526-5c8149645b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:ce:d7:0d:0b:05:98:72:78:53:aa:2e:68: 62:8c:9c:4e:49:00:93:e9:9c:30:b5:2d:f1:25:e6: 18:ae:72:75:9d:2d:f0:28:d5:23:96:0e:23:cb:01: 87:85:8d:f0:a1:eb:7e:58:95:06:60:95:bb:c4:65: cc:2c:ac:0b:b4:77:75:6d:d9:12:a2:42:ba:cd:6f: 16:51:e0:78:cf:93:73:36:61:8d:e2:f8:d3:5f:78: 53:39:b9:61:5b:99:9d:a6:6b:f7:e8:32:fb:e4:78: 68:c8:b5:c6:30:77:ba:5d:9e:ec:7b:7d:e8:0a:ed: 88:66:e3:c3:18:46:b1:83:a7:f5:2c:8e:50:3a:dc: ca:08:7d:ef:a9:46:b5:19:9e:90:45:23:be:1d:39: da:07:00:bf:11:a3:2a:48:ce:80:c0:fa:6f:81:89: b7:9c:65:c8:e7:ac:ea:79:a4:ad:d3:a5:e1:71:73: 77:f9:d1:42:0b:d0:c8:cf:07:7c:b3:25:59:98:b1: 63:39:1b:8b:1c:fc:13:7a:45:74:4f:6a:8e:d0:5b: 64:b3:f6:28:fd:39:55:f3:38:6b:d3:7f:79:d4:cb: e7:e4:62:c8:17:ef:06:d1:b4:a7:f0:d0:44:93:a1: e9:13:53:84:6b:ff:22:d4:e3:b5:77:a1:26:b2:11: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:37:A3:FC:18:17:C2:26:A8:D6:B4:CB:5B:22:CD:91:D9:A1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bb:a0:84:8d:63:fe:33:6b:f6:f4:3c:ac:8e:b3:9d:6f:df: 24:1a:1b:ed:6e:f7:56:44:c6:65:46:1a:13:40:9f:86:23:9e: 5d:88:aa:9f:ce:05:ff:3f:50:3f:2c:19:84:d2:da:e7:a6:e8: 55:25:45:a1:05:a8:c2:a5:d1:20:07:87:07:fe:ca:e6:43:1c: f4:56:6d:c9:9c:47:e1:a1:da:a7:c4:0d:05:2e:50:91:04:07: 24:b6:cc:42:98:cd:92:7e:2c:d0:f6:bb:da:20:ad:3c:9a:98: 3d:d0:e6:fa:f4:de:78:a6:a2:6e:cb:45:2a:9f:0e:74:8f:31: b5:aa:94:5a:f8:18:ec:0d:fb:93:e5:5f:3e:71:8b:00:70:2d: 4f:e2:0a:30:d6:ac:6d:8e:13:82:f2:5b:2b:66:17:0e:a2:3c: aa:c5:c7:11:a7:4d:5e:a1:08:41:73:40:d7:40:39:34:fa:83: 05:29:7c:d6:de:33:5b:95:21:c2:8e:eb:5f:38:be:61:9c:67: fb:3f:cf:28:bd:d2:df:9d:7b:d0:85:8f:f4:82:ee:02:a7:30: 25:da:85:bb:82:23:24:14:cd:fb:01:cc:1c:5d:77:60:27:51: f8:b5:53:ca:3f:ba:c5:09:f5:86:09:9c:a6:21:59:1d:db:36: 03:df:09:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiOh6j2YjDav8PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTkxZWVkMDAtYjcyYy00NTQ3LWE1MjYtNWM4MTQ5NjQ1YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpHO1w0LBZhyeFOqLmhijJxOSQCT6ZwwtS3x JeYYrnJ1nS3wKNUjlg4jywGHhY3woet+WJUGYJW7xGXMLKwLtHd1bdkSokK6zW8W UeB4z5NzNmGN4vjTX3hTOblhW5mdpmv36DL75HhoyLXGMHe6XZ7se33oCu2IZuPD GEaxg6f1LI5QOtzKCH3vqUa1GZ6QRSO+HTnaBwC/EaMqSM6AwPpvgYm3nGXI56zq eaSt06XhcXN3+dFCC9DIzwd8syVZmLFjORuLHPwTekV0T2qO0Ftks/Yo/TlV8zhr 03951Mvn5GLIF+8G0bSn8NBEk6HpE1OEa/8i1OO1d6EmshFyqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCEyN6P8GBfCJqjWtMtbIs2R2aFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwYWFjMWUtODNjYi0z OTUzLTgxNGEtMTUwYjQ0YzE3NTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRu6CEjWP+M2v29DysjrOdb98kGhvtbvdWRMZlRhoTQJ+GI55diKqf zgX/P1A/LBmE0trnpuhVJUWhBajCpdEgB4cH/srmQxz0Vm3JnEfhodqnxA0FLlCR BAcktsxCmM2SfizQ9rvaIK08mpg90Ob69N54pqJuy0Uqnw50jzG1qpRa+BjsDfuT 5V8+cYsAcC1P4gow1qxtjhOC8lsrZhcOojyqxccRp01eoQhBc0DXQDk0+oMFKXzW 3jNblSHCjutfOL5hnGf7P88ovdLfnXvQhY/0gu4CpzAl2oW7giMkFM37AcwcXXdg J1H4tVPKP7rFCfWGCZymIVkd2zYD3wnh -----END CERTIFICATE-----Generated at Sat Sep 26 12:39:55 2026 by rpki-client