$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa File: 12e2635e-4868-3388-8a9a-db68ab1dcac7.roa (raw, json) Hash identifier: FOKTpdR7b+3G7+BOQxCPI35oLmILOdQ9oj2CtHserGQ= Subject key identifier: 38:86:04:B6:6B:F6:2C:9A:5A:D1:8C:0B:75:6A:10:2F:9C:4A:EB:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B8BB1F7E21AF3BC94EFA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20362 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:8b:b1:f7:e2:1a:f3:bc:94:ef:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0a17021-b472-46e5-8be7-f60d17ee9deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:30:2d:ad:b3:ce:b6:ed:b1:16:cd:76:31: 35:50:58:ab:44:b3:1d:c1:67:fe:71:bc:b4:58:6c: 4c:02:be:be:1c:a9:85:1f:b8:ea:59:5a:48:76:b6: 68:ad:00:a4:fd:6b:82:7a:cb:20:9f:86:e6:81:b9: e4:88:2e:7d:fb:ea:92:ca:55:c8:23:95:4d:83:f5: 87:ce:0f:70:fa:6b:3b:8b:7d:25:d2:a3:46:ee:99: d4:68:bc:50:ab:89:d6:d2:f6:98:3b:1e:1f:4a:38: d4:c3:16:70:c6:3d:0a:9f:41:74:ad:4c:f0:de:d5: 39:74:78:30:1b:83:12:6c:52:3c:50:1f:c6:29:d8: 37:4b:2e:29:67:5c:cc:e2:16:52:64:33:96:4e:9e: b5:19:9b:a9:11:c6:a1:e2:13:22:24:0d:25:0e:4c: bc:99:d2:2b:63:2d:2b:fd:e0:10:33:79:3e:46:56: 30:1d:19:f7:6f:44:34:88:d4:2b:ac:14:45:e1:32: 72:08:63:82:4b:77:85:8b:af:b7:24:e7:d4:87:fb: 7a:45:20:6e:9c:24:6d:77:6d:2d:8f:97:b6:ed:9e: b2:0e:5c:5f:70:27:8b:48:88:76:59:ec:37:54:53: c2:e6:a1:4b:16:ea:bc:cd:28:81:c8:58:51:1f:9c: 52:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:86:04:B6:6B:F6:2C:9A:5A:D1:8C:0B:75:6A:10:2F:9C:4A:EB:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ce:37:4d:ed:53:6d:7a:e1:37:7a:f4:3f:64:84:94:73:ec: 96:31:bd:4f:c7:34:6e:02:f4:e8:15:70:5c:46:15:49:99:77: d5:40:79:59:9c:9a:77:1e:c5:8a:b9:76:fc:fd:08:9d:e4:60: cf:95:a2:8f:70:16:de:0c:a3:ad:ab:0d:76:19:a3:e3:db:ff: 5d:18:03:92:92:a6:f3:d0:b9:2a:80:cb:59:4e:fc:e1:3b:55: 19:58:f7:9c:04:1d:47:68:0a:79:89:be:af:4c:17:34:9c:06: 98:ed:ef:96:3b:27:07:a0:18:3f:a4:da:bf:95:a8:ed:b4:b0: d9:cd:fc:c6:65:bb:ca:06:74:c4:9e:dc:34:d0:cc:a0:a1:16: 8d:67:f7:b5:fb:f8:3f:bc:29:d5:70:9e:11:75:73:b8:06:28: c2:e4:dc:e9:08:5f:f3:5d:e1:68:46:46:3b:f7:6f:20:77:66: d1:82:23:18:a0:13:52:14:45:66:3d:16:ba:16:2f:b7:fa:8c: ea:ce:57:1b:21:63:9c:56:34:f0:6c:1d:c7:0a:11:4d:7d:d8: f7:0e:54:be:ab:a5:25:ae:fb:30:93:4f:f5:c9:7a:45:1d:ba: 7e:8b:9b:28:0f:63:5f:ea:e8:2b:a8:7e:22:3a:22:5e:2f:5a: 99:29:5a:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji4ux9+Ia87yU76AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBhMTcwMjEtYjQ3Mi00NmU1LThiZTctZjYwZDE3ZWU5ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtowLa2zzrbtsRbNdjE1UFirRLMdwWf+cby0 WGxMAr6+HKmFH7jqWVpIdrZorQCk/WuCessgn4bmgbnkiC59++qSylXII5VNg/WH zg9w+ms7i30l0qNG7pnUaLxQq4nW0vaYOx4fSjjUwxZwxj0Kn0F0rUzw3tU5dHgw G4MSbFI8UB/GKdg3Sy4pZ1zM4hZSZDOWTp61GZupEcah4hMiJA0lDky8mdIrYy0r /eAQM3k+RlYwHRn3b0Q0iNQrrBRF4TJyCGOCS3eFi6+3JOfUh/t6RSBunCRtd20t j5e27Z6yDlxfcCeLSIh2Wew3VFPC5qFLFuq8zSiByFhRH5xSRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDiGBLZr9iyaWtGMC3VqEC+cSuuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTJlMjYzNWUtNDg2OC0z Mzg4LThhOWEtZGI2OGFiMWRjYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAczjdN7VNteuE3evQ/ZISUc+yWMb1PxzRuAvToFXBcRhVJmXfVQHlZ nJp3HsWKuXb8/Qid5GDPlaKPcBbeDKOtqw12GaPj2/9dGAOSkqbz0LkqgMtZTvzh O1UZWPecBB1HaAp5ib6vTBc0nAaY7e+WOycHoBg/pNq/lajttLDZzfzGZbvKBnTE ntw00MygoRaNZ/e1+/g/vCnVcJ4RdXO4BijC5NzpCF/zXeFoRkY7928gd2bRgiMY oBNSFEVmPRa6Fi+3+ozqzlcbIWOcVjTwbB3HChFNfdj3DlS+q6Ulrvswk0/1yXpF Hbp+i5soD2Nf6ugrqH4iOiJeL1qZKVrr -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:40 2026 by rpki-client