$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa File: 28e60d50-57d9-350d-bd89-c1257d4d7364.roa (raw, json) Hash identifier: m87aHliFuaCtjMXldyeFR/7Dl7VrNNFYidJii4IilrE= Subject key identifier: CB:EE:2B:F1:E4:9B:D7:C3:58:78:02:B8:9A:75:2B:10:E2:E8:13:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989F2F5A8B296845E533E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396582 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f2:f5:a8:b2:96:84:5e:53:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=188d282b-c822-4b04-b403-02d562982cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:f5:9d:bd:4b:80:9b:9f:87:22:ae:8f:7a: 87:ae:42:4d:bf:2d:30:98:c2:b6:ee:d8:e2:01:b8: db:df:33:f0:72:3f:6d:24:fe:5f:9d:aa:28:0a:cf: da:a1:89:13:06:00:65:7a:be:8b:37:b8:cf:50:1a: 05:5b:89:88:bd:9f:d9:b8:3a:d3:93:e0:9e:b1:3f: ae:aa:22:0a:62:23:e3:9f:e9:e4:97:90:61:4b:d4: ab:7f:ee:33:3b:bc:cf:8a:a9:59:5a:7a:89:f9:c4: 75:a5:ea:8d:24:4a:8c:4e:60:85:1c:2d:38:f3:5f: 22:bc:78:d7:3e:39:46:b0:98:fe:84:f6:cd:c9:39: 0e:15:b9:d6:6b:5f:dd:a1:f3:36:b1:e2:f0:87:d9: c0:0b:80:cb:6e:d7:72:56:4d:88:6b:e9:6d:d4:a6: c5:6c:13:4c:68:65:76:25:d5:b3:3b:f7:4a:77:20: 25:c7:bb:12:27:fb:73:c6:da:db:c1:b8:53:59:7e: b5:b2:e7:6b:a1:87:bd:d8:a9:4c:2d:11:19:d9:35: 92:a9:41:4b:45:e3:b9:13:43:23:4e:a5:e8:46:f0: 45:dc:bd:c1:c5:2b:1b:2d:ea:6d:83:d9:69:8e:39: 0d:6f:d9:8f:eb:75:cf:1f:10:8f:95:13:82:ed:f9: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EE:2B:F1:E4:9B:D7:C3:58:78:02:B8:9A:75:2B:10:E2:E8:13:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6b:28:cc:6d:66:31:a1:91:63:7d:b8:b0:fe:ca:13:01:4e: 04:0e:0e:f0:7b:16:85:5b:71:83:63:7c:ce:9d:72:ff:dd:b7: 0b:2e:48:a9:af:e9:62:e9:77:f3:45:18:48:ea:80:bd:82:13: 3e:48:05:8b:80:b9:e3:e3:1f:f0:bf:f2:e7:2d:09:62:71:b6: df:74:30:bc:31:40:0d:57:46:e5:2a:97:1f:cb:1a:e3:d2:da: 59:29:2f:1b:6d:d2:1a:e2:e5:d6:13:4c:38:a3:4c:e4:67:91: 63:1d:3b:18:af:31:65:4a:04:a3:cf:ef:62:42:ed:ef:c2:17: 77:5e:d7:a6:90:d4:21:ba:92:17:e3:f9:c7:1f:53:f7:2f:69: 1f:ce:2c:f9:a7:18:a3:21:86:85:e8:47:2a:b5:6a:32:bf:33: 80:62:98:c5:3e:16:eb:e7:98:db:81:e7:00:2f:36:40:ca:e0: 94:6c:81:e2:43:c6:1f:34:f9:56:7f:02:c8:82:05:fc:36:94: 69:c6:8d:7f:ca:27:a8:db:cb:a4:20:36:4c:b7:c3:7b:ba:5f: 75:32:39:00:43:52:43:94:dc:f4:0b:24:9c:ac:af:5f:ca:ff: 1c:df:4d:4d:c6:5d:ed:5f:03:0c:37:2f:a0:e6:b1:da:6e:c6: 9a:66:6a:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JifL1qLKWhF5TPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTg4ZDI4MmItYzgyMi00YjA0LWI0MDMtMDJkNTYyOTgyY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlov1nb1LgJufhyKuj3qHrkJNvy0wmMK27tji Abjb3zPwcj9tJP5fnaooCs/aoYkTBgBler6LN7jPUBoFW4mIvZ/ZuDrTk+CesT+u qiIKYiPjn+nkl5BhS9Srf+4zO7zPiqlZWnqJ+cR1peqNJEqMTmCFHC04818ivHjX PjlGsJj+hPbNyTkOFbnWa1/dofM2seLwh9nAC4DLbtdyVk2Ia+lt1KbFbBNMaGV2 JdWzO/dKdyAlx7sSJ/tzxtrbwbhTWX61sudroYe92KlMLREZ2TWSqUFLReO5E0Mj TqXoRvBF3L3BxSsbLeptg9lpjjkNb9mP63XPHxCPlROC7fkl8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMvuK/Hkm9fDWHgCuJp1KxDi6BNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNjBkNTAtNTdkOS0z NTBkLWJkODktYzEyNTdkNGQ3MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrayjMbWYxoZFjfbiw/soTAU4EDg7wexaFW3GDY3zOnXL/3bcLLkip r+li6XfzRRhI6oC9ghM+SAWLgLnj4x/wv/LnLQlicbbfdDC8MUANV0blKpcfyxrj 0tpZKS8bbdIa4uXWE0w4o0zkZ5FjHTsYrzFlSgSjz+9iQu3vwhd3XtemkNQhupIX 4/nHH1P3L2kfziz5pxijIYaF6EcqtWoyvzOAYpjFPhbr55jbgecALzZAyuCUbIHi Q8YfNPlWfwLIggX8NpRpxo1/yieo28ukIDZMt8N7ul91MjkAQ1JDlNz0CyScrK9f yv8c301Nxl3tXwMMNy+g5rHabsaaZmp6 -----END CERTIFICATE-----Generated at Fri Sep 25 17:48:50 2026 by rpki-client