$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa File: 172e475a-8153-336c-8bb5-c27b6f69a079.roa (raw, json) Hash identifier: sp8IHBATQRN4vVqTOVQMR0QXHroOGq5/IF4cKEuUhwk= Subject key identifier: 12:70:20:F2:DE:7B:47:49:6C:BF:28:35:8A:E8:19:5A:77:A5:78:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497419065E97D536CD959580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397194 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:19:06:5e:97:d5:36:cd:95:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9123512e-06ff-41ef-80b5-1a2ef564fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:60:c5:f4:f2:6c:be:7d:73:ec:69:a9:27: e4:69:0b:d6:ca:77:a5:a6:9f:cd:06:3a:cb:e7:4f: bb:a7:de:84:ed:97:29:d6:d1:a7:6e:bf:21:e2:7d: 66:41:c4:b8:a7:11:df:57:44:08:50:45:69:6a:24: 39:0c:64:7c:21:bc:25:df:20:9a:87:3a:6f:3d:39: 7b:ee:1c:a6:a0:2a:f8:83:9b:a3:81:72:5f:5b:a6: e5:7a:cb:4d:4d:24:cc:31:6f:a9:90:d2:73:d9:f0: 4a:79:52:9a:df:6b:f8:b4:4d:04:23:68:e3:42:ed: f7:7f:32:58:19:8a:a9:42:37:80:c2:13:d3:38:6c: c2:e3:f0:ac:1b:e4:51:b3:91:f6:3a:f3:72:16:3f: be:8a:6c:78:df:75:a0:e9:76:02:17:a7:d1:29:74: bc:22:64:b0:e2:a7:6f:da:52:6d:77:91:0e:e5:f1: 10:b6:42:4d:b2:e2:c2:7b:cf:76:08:d4:06:7d:20: 04:8b:9b:91:e7:f9:6c:f1:db:9b:8e:ef:f3:13:83: 2e:81:09:ce:44:dc:c2:73:34:a8:4a:26:a9:58:09: 36:12:e8:2b:94:af:31:35:4d:b9:4c:7f:b4:ad:53: 05:46:a6:1f:59:6f:34:ac:14:a3:6a:0a:5d:81:08: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:70:20:F2:DE:7B:47:49:6C:BF:28:35:8A:E8:19:5A:77:A5:78:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/172e475a-8153-336c-8bb5-c27b6f69a079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8b:e9:2f:e9:a5:e8:c7:65:96:50:66:29:c4:b5:90:63:cb: ba:13:57:ed:2e:6d:67:55:e9:f4:69:14:d6:79:ea:30:53:da: 4b:42:f3:04:ab:c2:0d:65:a9:58:63:0b:01:12:3e:4e:b8:30: 91:b9:a6:9c:1c:d8:fb:e6:b1:68:4a:0b:84:e4:6a:7f:c7:0a: c1:a6:eb:76:28:da:5b:63:f2:bc:f4:95:42:78:7b:56:14:a1: 6f:81:fb:12:9e:9a:8f:92:9a:da:8a:0d:c6:b1:1a:12:43:b1: cb:02:62:57:5b:54:33:a5:d4:e2:0b:4d:e2:0a:98:44:8e:d4: ec:76:e0:47:d8:56:ea:f1:a4:11:49:5e:00:61:80:ce:90:64: 65:51:6e:4f:a7:33:15:a9:a9:3c:08:15:00:61:26:e5:43:01: ec:f6:e1:82:30:ed:8e:68:df:df:ca:85:6c:ba:31:f1:d9:af: ac:8d:30:d1:7a:32:5a:37:90:ab:0b:c8:27:c6:12:82:3f:34: 47:9a:9d:bc:f3:ff:70:d6:8d:8e:f4:a7:1f:ea:6f:34:ff:24: e4:fd:98:5f:01:b7:7c:b9:c7:21:16:32:b1:e4:1b:54:ab:fa: f4:53:49:70:ff:22:09:d7:ef:e7:e6:84:28:1e:eb:ec:1c:4b: 36:05:38:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdBkGXpfVNs2VlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTEyMzUxMmUtMDZmZi00MWVmLTgwYjUtMWEyZWY1NjRmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUtgxfTybL59c+xpqSfkaQvWynelpp/NBjrL 50+7p96E7Zcp1tGnbr8h4n1mQcS4pxHfV0QIUEVpaiQ5DGR8Ibwl3yCahzpvPTl7 7hymoCr4g5ujgXJfW6blestNTSTMMW+pkNJz2fBKeVKa32v4tE0EI2jjQu33fzJY GYqpQjeAwhPTOGzC4/CsG+RRs5H2OvNyFj++imx433Wg6XYCF6fRKXS8ImSw4qdv 2lJtd5EO5fEQtkJNsuLCe892CNQGfSAEi5uR5/ls8dubju/zE4MugQnORNzCczSo SiapWAk2EugrlK8xNU25TH+0rVMFRqYfWW80rBSjagpdgQhZbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBJwIPLee0dJbL8oNYroGVp3pXhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTcyZTQ3NWEtODE1My0z MzZjLThiYjUtYzI3YjZmNjlhMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBti+kv6aXox2WWUGYpxLWQY8u6E1ftLm1nVen0aRTWeeowU9pLQvME q8INZalYYwsBEj5OuDCRuaacHNj75rFoSguE5Gp/xwrBput2KNpbY/K89JVCeHtW FKFvgfsSnpqPkpraig3GsRoSQ7HLAmJXW1QzpdTiC03iCphEjtTsduBH2Fbq8aQR SV4AYYDOkGRlUW5PpzMVqak8CBUAYSblQwHs9uGCMO2OaN/fyoVsujHx2a+sjTDR ejJaN5CrC8gnxhKCPzRHmp288/9w1o2O9Kcf6m80/yTk/ZhfAbd8ucchFjKx5BtU q/r0U0lw/yIJ1+/n5oQoHuvsHEs2BTiM -----END CERTIFICATE-----Generated at Sun Sep 27 02:52:36 2026 by rpki-client