$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa File: 1b78363f-e1eb-3ae5-ad01-db598270fa74.roa (raw, json) Hash identifier: 0aBBS5ieMkYjclqjqO4HY4f3HXqmK0Li8+kI5U8GK/E= Subject key identifier: 9A:32:55:B5:63:7D:6E:19:73:83:74:35:97:F7:26:48:3B:46:66:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B1C8A0331C99B3713C4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:1c:8a:03:31:c9:9b:37:13:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e30b379-bb54-480c-ba52-2d297528dc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:4f:62:b8:3f:63:5c:d3:84:58:73:3a:7f: 70:56:1f:cd:14:f6:8d:40:61:26:c3:cc:b5:f9:3c: 81:81:3f:82:98:91:54:ac:e4:9f:ef:c7:94:a2:b9: c3:10:98:a4:bf:d1:11:07:6a:0f:b0:62:21:43:ec: ec:8a:8c:a2:29:6a:eb:76:e0:9d:1a:7e:f1:36:ad: b5:f8:80:6e:92:c1:9e:d2:22:b6:8c:13:be:b4:c5: 50:ff:8d:85:67:7f:0b:ee:ea:33:5d:b5:b1:e7:9f: a8:8c:0a:c7:1e:d7:64:54:e7:e5:2e:f9:e5:16:ce: 8f:37:f3:e0:e3:86:1d:c5:19:99:7e:87:d0:21:79: 8d:eb:06:ab:a6:2c:1a:3e:b5:23:1e:9f:f1:b9:c9: 06:50:b6:21:c6:93:40:3d:9a:b8:05:cc:47:61:22: f8:35:97:1a:e9:24:53:52:92:bf:1a:03:89:0f:1a: 5a:a8:62:05:2d:c6:f4:04:70:36:8f:c0:ad:b0:b5: f1:c7:c8:11:5a:45:0c:22:e6:e9:fd:8e:fb:d0:ff: f0:6a:92:3f:31:26:ea:24:35:68:39:05:da:cc:92: 2e:aa:7d:b8:26:10:55:a5:41:d5:ff:a4:75:ae:d8: 2b:25:12:de:bb:47:dc:90:1b:a4:3e:f2:0b:98:ac: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:32:55:B5:63:7D:6E:19:73:83:74:35:97:F7:26:48:3B:46:66:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b78363f-e1eb-3ae5-ad01-db598270fa74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e6:72:1e:b7:94:32:67:48:72:da:02:69:9c:22:4b:63:78: 68:46:32:93:ac:ec:a6:f4:f7:ef:f1:d3:80:92:a0:1d:18:0a: 9d:db:77:0e:04:c5:f2:a8:cf:bd:e0:eb:18:57:3d:6a:40:ee: 67:b3:54:51:05:2d:73:1f:b8:a1:1b:b9:22:9d:c6:9b:4b:2e: fe:72:60:1c:f4:9c:c6:6f:ac:b5:c4:82:45:0b:f3:01:bd:07: ee:ad:e5:63:1c:b0:93:db:32:95:26:af:7a:8a:39:76:0f:46: f0:43:12:a4:22:f4:fa:d7:ec:d6:97:8a:f6:fb:fe:6a:1d:18: aa:7a:cd:64:97:b5:b8:f3:51:24:3e:38:00:8e:de:f8:ba:88: 4f:02:01:06:5c:2e:69:56:32:1f:bb:6f:b0:54:cd:83:5f:78: d2:14:82:5d:77:5c:70:2d:34:da:e0:90:70:f8:32:14:20:99: dd:3f:87:79:e2:13:e3:44:83:9f:c3:64:cf:c7:f5:83:ac:fc: 76:96:1f:8c:79:ff:a2:91:a9:d4:7d:6f:5f:4b:16:dd:1e:91: dc:2a:95:6e:e6:84:3a:a5:5f:d4:0e:7a:d4:82:6e:dc:31:85: 56:17:97:cd:90:44:e0:2a:d4:7c:dd:7f:e0:8d:c3:60:03:e9: 6d:d3:6b:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JixyKAzHJmzcTxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWUzMGIzNzktYmI1NC00ODBjLWJhNTItMmQyOTc1MjhkYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM5PYrg/Y1zThFhzOn9wVh/NFPaNQGEmw8y1 +TyBgT+CmJFUrOSf78eUornDEJikv9ERB2oPsGIhQ+zsioyiKWrrduCdGn7xNq21 +IBuksGe0iK2jBO+tMVQ/42FZ38L7uozXbWx55+ojArHHtdkVOflLvnlFs6PN/Pg 44YdxRmZfofQIXmN6warpiwaPrUjHp/xuckGULYhxpNAPZq4BcxHYSL4NZca6SRT UpK/GgOJDxpaqGIFLcb0BHA2j8CtsLXxx8gRWkUMIubp/Y770P/wapI/MSbqJDVo OQXazJIuqn24JhBVpUHV/6R1rtgrJRLeu0fckBukPvILmKzVCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJoyVbVjfW4Zc4N0NZf3Jkg7RmYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWI3ODM2M2YtZTFlYi0z YWU1LWFkMDEtZGI1OTgyNzBmYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAm5nIet5QyZ0hy2gJpnCJLY3hoRjKTrOym9Pfv8dOAkqAdGAqd23cO BMXyqM+94OsYVz1qQO5ns1RRBS1zH7ihG7kincabSy7+cmAc9JzGb6y1xIJFC/MB vQfureVjHLCT2zKVJq96ijl2D0bwQxKkIvT61+zWl4r2+/5qHRiqes1kl7W481Ek PjgAjt74uohPAgEGXC5pVjIfu2+wVM2DX3jSFIJdd1xwLTTa4JBw+DIUIJndP4d5 4hPjRIOfw2TPx/WDrPx2lh+Mef+ikanUfW9fSxbdHpHcKpVu5oQ6pV/UDnrUgm7c MYVWF5fNkETgKtR83X/gjcNgA+lt02sM -----END CERTIFICATE-----Generated at Thu Oct 1 16:17:50 2026 by rpki-client