$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa File: 2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa (raw, json) Hash identifier: sbc/Mcc0ci+owt8cKKTtgi5Y/xBwyXJL7JLPqvMsA5Q= Subject key identifier: CA:E5:12:53:67:78:95:41:28:B1:29:17:A5:2D:2C:E9:7B:D5:0D:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988197B9F3484E4C98C3D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36627 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:19:7b:9f:34:84:e4:c9:8c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cd5950d2-c570-490c-800a-84d896a3d852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:48:9b:2d:ac:f3:a9:8b:1a:8b:b6:a6:c1: 33:83:c5:ba:a1:09:ac:90:43:2b:8c:91:51:74:1b: a9:95:f7:d6:21:df:db:c7:1b:d0:41:7c:12:40:b8: c4:e2:9d:29:8e:08:1a:05:a5:51:f1:c0:9f:bb:44: 5e:a6:de:cd:8e:8a:43:13:c5:7a:87:3b:98:11:5d: 2b:21:20:5b:e3:e5:2a:e9:dc:ea:17:d9:06:6d:66: a8:a7:ac:2b:95:4d:1b:96:85:23:e2:c1:48:a9:a0: 0d:59:b4:7a:13:15:00:0b:f3:72:84:53:ea:b6:43: 34:ef:4e:e2:35:94:a8:bc:e4:31:7e:50:b3:bb:92: 44:8d:d4:f6:25:21:6c:9f:d1:ed:86:54:3b:b9:0e: f0:99:2b:0b:18:69:29:72:8e:b8:32:bb:1b:64:42: 29:ab:94:64:c9:00:f1:46:86:6e:f5:07:15:d7:89: cf:3c:3c:83:aa:45:c2:48:2d:1f:d8:e3:f9:dc:ff: 60:75:84:c5:38:e0:95:c9:07:ce:7b:bd:a0:8b:c3: c7:d1:5e:6c:87:fa:23:53:24:6d:62:c5:d3:7a:44: c5:17:7a:90:95:dc:61:65:7c:52:24:bf:36:93:85: 56:9c:6d:6f:cf:98:ba:a3:33:0b:65:78:a9:89:74: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E5:12:53:67:78:95:41:28:B1:29:17:A5:2D:2C:E9:7B:D5:0D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ccd33a6-f6f4-3df8-95a9-f13e57fc649e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3a:f6:ae:c8:af:f6:43:ad:91:95:9d:a8:87:3a:97:4f:5b: 79:02:29:45:c3:07:e2:3d:d4:fb:7e:50:1b:92:0e:88:4a:64: 08:f9:47:7d:bc:40:e0:ef:12:47:8d:bb:76:c2:34:78:77:ad: 4a:73:0e:d9:27:90:46:11:9a:7d:3b:19:52:72:af:ea:01:62: ac:90:01:70:56:cc:b3:56:61:c1:18:dd:44:c3:57:9d:f3:06: 33:67:bf:d6:14:3e:a7:68:d0:f1:06:dc:f0:93:cf:e8:71:30: ae:24:2b:54:73:de:63:17:60:4c:a8:8a:a8:51:45:72:1d:2f: 78:08:e6:60:2c:65:dd:97:17:d2:74:69:5c:f1:36:be:8e:00: 4e:e7:cb:e0:c0:4c:d1:47:ee:00:2f:09:df:b1:ca:68:ff:b7: 78:db:2d:98:2e:45:e5:88:84:1c:fb:6a:02:9c:1a:9e:11:36: d5:30:de:84:a0:99:78:05:4e:a7:a6:87:1c:45:e4:03:cd:42: d0:59:ad:87:11:16:b8:3e:3d:d8:1e:7a:6c:6b:9b:fd:b4:75: af:52:38:4c:39:70:7f:34:66:50:68:6d:76:9f:40:77:f0:c6: 0e:00:1d:3c:d0:bd:d0:78:8c:90:bb:46:b1:e6:d3:c1:bc:46: 99:1f:56:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiBl7nzSE5MmMPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Q1OTUwZDItYzU3MC00OTBjLTgwMGEtODRkODk2YTNkODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtJImy2s86mLGou2psEzg8W6oQmskEMrjJFR dBuplffWId/bxxvQQXwSQLjE4p0pjggaBaVR8cCfu0Rept7NjopDE8V6hzuYEV0r ISBb4+Uq6dzqF9kGbWaop6wrlU0bloUj4sFIqaANWbR6ExUAC/NyhFPqtkM0707i NZSovOQxflCzu5JEjdT2JSFsn9HthlQ7uQ7wmSsLGGkpco64MrsbZEIpq5RkyQDx RoZu9QcV14nPPDyDqkXCSC0f2OP53P9gdYTFOOCVyQfOe72gi8PH0V5sh/ojUyRt YsXTekTFF3qQldxhZXxSJL82k4VWnG1vz5i6ozMLZXipiXTJ9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMrlElNneJVBKLEpF6UtLOl71Q2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmNjZDMzYTYtZjZmNC0z ZGY4LTk1YTktZjEzZTU3ZmM2NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbOvauyK/2Q62RlZ2ohzqXT1t5AilFwwfiPdT7flAbkg6ISmQI+Ud9 vEDg7xJHjbt2wjR4d61Kcw7ZJ5BGEZp9OxlScq/qAWKskAFwVsyzVmHBGN1Ew1ed 8wYzZ7/WFD6naNDxBtzwk8/ocTCuJCtUc95jF2BMqIqoUUVyHS94COZgLGXdlxfS dGlc8Ta+jgBO58vgwEzRR+4ALwnfscpo/7d42y2YLkXliIQc+2oCnBqeETbVMN6E oJl4BU6npoccReQDzULQWa2HERa4Pj3YHnpsa5v9tHWvUjhMOXB/NGZQaG12n0B3 8MYOAB080L3QeIyQu0ax5tPBvEaZH1bI -----END CERTIFICATE-----Generated at Sun Sep 27 10:44:36 2026 by rpki-client