$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa File: 3096e349-4454-38f3-b7ed-c55015678503.roa (raw, json) Hash identifier: faQ/x9Cdq8hD5pQgcZJpSfMDjl7w00VRcO3RI7WqGyc= Subject key identifier: 67:68:B2:EC:BC:47:1C:B4:A3:0B:AB:FA:90:6A:C4:23:49:C7:AD:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973768A5C91FB6ADE49A728 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36616 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:76:8a:5c:91:fb:6a:de:49:a7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=39aee4ab-b3e2-4b51-a8a8-426cfbf1764f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:30:70:0c:27:9d:a0:69:bf:ab:1a:b5:83: 84:7e:1b:df:ed:81:e5:92:33:0d:47:13:63:77:24: 65:5b:d7:04:51:f6:eb:4e:60:26:75:f1:ec:ee:8a: cb:25:c9:1b:e9:4b:0c:f6:a1:74:c7:98:a3:e5:36: 2b:12:d5:5c:e4:07:18:8b:d3:a1:a0:92:77:c7:11: be:72:d4:a2:93:4b:f6:0a:d3:b5:b2:8f:d8:42:f4: 84:38:12:95:b5:12:92:2e:b4:c2:63:0e:90:69:b5: ff:1b:8d:0d:c4:8d:fd:51:17:8c:9a:80:36:50:da: 91:32:73:99:48:88:43:2b:62:33:aa:6c:f5:7f:c9: 83:ac:b1:f5:bc:51:49:cb:15:f7:25:4c:3b:cc:60: dd:f2:4a:1b:ad:fe:a3:ed:07:b8:db:f0:5c:11:f2: 16:25:91:2e:9c:eb:01:ae:71:3a:3a:cc:78:0d:eb: 1e:71:98:97:87:3e:65:ec:74:a5:44:cc:2f:3c:c6: 0b:86:02:d1:7c:57:a1:9e:b8:f6:be:f5:2e:43:55: 4b:57:e4:ce:f9:f2:ae:a4:77:f8:ff:6d:56:9e:f7: 18:e6:36:5a:b5:92:41:58:69:e2:bf:3f:a1:a1:b6: 5b:c2:f5:15:98:84:c0:91:ce:ef:47:b3:ee:ba:6e: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:68:B2:EC:BC:47:1C:B4:A3:0B:AB:FA:90:6A:C4:23:49:C7:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ab:d7:32:fa:c0:32:76:f6:01:d8:21:91:cd:6f:25:82:10: 3c:eb:cf:89:97:d9:c2:95:e6:a2:55:17:cb:c2:ed:81:9b:be: 34:a1:f6:9d:3d:5a:98:d3:de:38:a3:3a:b3:e0:41:c2:7c:f5: 97:41:0d:1e:21:87:8a:9e:90:02:9c:f2:8a:4a:9d:a0:12:fa: 70:b2:a0:f0:56:82:29:5c:91:86:dd:57:6b:7e:04:e2:7b:8a: 5e:99:e7:4f:4b:96:e8:7d:92:19:89:c1:2d:e1:38:55:fc:b6: be:18:b0:94:63:5b:18:cc:8c:d5:7d:f5:94:98:69:e4:37:26: 69:51:c8:cf:68:0b:2e:3a:e6:60:e6:de:7f:a6:f6:1e:28:d4: bd:19:31:ca:56:f3:d5:3d:69:4e:76:81:74:d7:01:0f:8c:01: 22:22:88:4a:e8:c0:44:44:80:9f:6a:c9:33:61:ed:42:8f:3c: ea:f2:7b:fe:56:ea:e1:79:9b:64:ba:44:d7:e5:2e:40:64:39: ca:d0:60:d3:b7:2b:6a:57:64:be:25:79:3b:6e:75:34:f1:5b: 9f:35:ac:7e:24:ea:aa:ce:c0:c7:f8:b1:dd:73:0a:ed:bc:4a: 63:6b:2b:dd:23:ba:8a:f5:45:e7:2a:e4:b9:94:06:83:c9:13: aa:2a:c9:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3aKXJH7at5JpygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzlhZWU0YWItYjNlMi00YjUxLWE4YTgtNDI2Y2ZiZjE3NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA0wcAwnnaBpv6satYOEfhvf7YHlkjMNRxNj dyRlW9cEUfbrTmAmdfHs7orLJckb6UsM9qF0x5ij5TYrEtVc5AcYi9OhoJJ3xxG+ ctSik0v2CtO1so/YQvSEOBKVtRKSLrTCYw6QabX/G40NxI39UReMmoA2UNqRMnOZ SIhDK2Izqmz1f8mDrLH1vFFJyxX3JUw7zGDd8kobrf6j7Qe42/BcEfIWJZEunOsB rnE6Osx4DesecZiXhz5l7HSlRMwvPMYLhgLRfFehnrj2vvUuQ1VLV+TO+fKupHf4 /21WnvcY5jZatZJBWGnivz+hobZbwvUVmITAkc7vR7Puum5NXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdosuy8Rxy0owur+pBqxCNJx63FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA5NmUzNDktNDQ1NC0z OGYzLWI3ZWQtYzU1MDE1Njc4NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKr1zL6wDJ29gHYIZHNbyWCEDzrz4mX2cKV5qJVF8vC7YGbvjSh9p09 WpjT3jijOrPgQcJ89ZdBDR4hh4qekAKc8opKnaAS+nCyoPBWgilckYbdV2t+BOJ7 il6Z509Lluh9khmJwS3hOFX8tr4YsJRjWxjMjNV99ZSYaeQ3JmlRyM9oCy465mDm 3n+m9h4o1L0ZMcpW89U9aU52gXTXAQ+MASIiiErowEREgJ9qyTNh7UKPPOrye/5W 6uF5m2S6RNflLkBkOcrQYNO3K2pXZL4leTtudTTxW581rH4k6qrOwMf4sd1zCu28 SmNrK90juor1Recq5LmUBoPJE6oqyT8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:49:53 2026 by rpki-client