$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/309df500-3b37-3d62-bf5e-c4b89a24df1d.roa File: 309df500-3b37-3d62-bf5e-c4b89a24df1d.roa (raw, json) Hash identifier: EQiib5N7GyQwSUCIqKSh/U2PWWu584EJ3Id0/L+n0NU= Subject key identifier: F1:3E:83:88:14:81:E7:5C:98:D3:07:66:59:4F:1D:D1:F3:81:69:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987BF4962EA621B5BC5E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/309df500-3b37-3d62-bf5e-c4b89a24df1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:bf:49:62:ea:62:1b:5b:c5:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=65a163d4-b53a-4df1-beb2-0c19710cbc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4b:6d:d0:58:8e:e4:11:f1:ce:96:c9:17:98: 2a:6d:f0:b7:0e:f7:15:71:bc:08:ba:fd:b2:6d:76: 1f:c9:74:32:ca:39:c4:87:08:5c:2a:d5:3f:f1:a9: 36:11:56:c0:c0:9f:2d:f1:12:63:9f:27:a9:f3:16: 41:5d:84:ed:87:80:d1:ba:8a:76:ce:c4:24:d0:34: 6b:87:bc:62:86:dc:21:83:4f:57:b2:65:59:2a:ce: 94:a8:a5:a8:de:f7:1b:4e:20:0f:5c:a6:46:34:3e: 3c:23:d5:86:98:6d:b5:9f:c8:5f:dd:bd:68:51:93: 0e:1e:02:ed:6b:c0:b9:71:0b:68:fe:8a:fc:24:8e: 57:ed:61:b6:89:33:c5:27:33:5a:e3:20:f6:af:86: b4:cb:08:be:b5:d7:81:b3:0d:c5:e3:a2:d4:55:44: ef:98:39:7e:6e:25:1a:4d:a6:7d:f3:88:03:d5:77: f9:fd:f2:c1:6c:0e:bc:20:87:09:5b:cc:d5:43:2e: 9e:69:9f:4d:e8:46:af:b0:53:3b:b9:11:d7:63:af: 1e:94:da:96:66:3e:65:21:1f:34:8d:93:0c:d9:d5: 99:af:8d:59:eb:08:3c:25:ea:41:f5:de:70:d6:18: 72:28:b6:b1:37:a6:82:de:de:20:7d:08:e8:86:b1: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3E:83:88:14:81:E7:5C:98:D3:07:66:59:4F:1D:D1:F3:81:69:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/309df500-3b37-3d62-bf5e-c4b89a24df1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ef:ce:77:fc:91:45:48:17:51:d1:ff:6e:b4:2e:91:30:46: 53:31:a7:2a:62:6c:c8:79:85:a6:80:70:e1:62:bf:f7:7c:c8: 74:f8:13:89:ff:5b:59:6e:55:34:f0:39:78:a1:33:38:e0:f0: 49:f1:d7:58:35:c8:4f:56:da:5f:13:8f:59:43:59:f3:21:51: 16:1c:36:2a:fa:56:cd:b6:41:f2:36:9d:7a:30:25:45:7c:46: 4d:0b:be:7c:59:bf:37:b0:5f:f0:9f:51:a1:d6:fb:53:ee:c5: 2a:76:45:b6:64:29:1b:24:9d:f1:33:81:5a:0b:fc:e9:76:0c: 0a:9b:e9:9d:b8:80:44:5d:0a:a9:3f:c5:00:8f:c5:11:db:8f: 44:60:3b:40:0b:1f:6d:4d:45:f8:35:24:e3:94:88:01:76:16: 02:94:b0:9b:de:61:c1:a8:4c:f7:95:1b:8d:07:79:31:d2:5a: 1b:2a:ae:78:42:be:70:52:22:e4:ae:89:c8:51:69:20:e3:5e: ca:62:21:89:41:bd:ad:78:9b:ac:12:29:dd:5f:f0:f7:f8:d3: 26:89:ef:93:f5:ea:5b:4b:fc:be:3b:73:56:f4:b0:19:db:53: be:8a:e4:ec:fe:ec:16:07:e4:57:02:22:5a:d3:d6:30:28:02: 14:ad:92:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh79JYupiG1vF4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjVhMTYzZDQtYjUzYS00ZGYxLWJlYjItMGMxOTcxMGNiYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUtt0FiO5BHxzpbJF5gqbfC3DvcVcbwIuv2y bXYfyXQyyjnEhwhcKtU/8ak2EVbAwJ8t8RJjnyep8xZBXYTth4DRuop2zsQk0DRr h7xihtwhg09XsmVZKs6UqKWo3vcbTiAPXKZGND48I9WGmG21n8hf3b1oUZMOHgLt a8C5cQto/or8JI5X7WG2iTPFJzNa4yD2r4a0ywi+tdeBsw3F46LUVUTvmDl+biUa TaZ984gD1Xf5/fLBbA68IIcJW8zVQy6eaZ9N6EavsFM7uRHXY68elNqWZj5lIR80 jZMM2dWZr41Z6wg8JepB9d5w1hhyKLaxN6aC3t4gfQjohrEDiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE+g4gUgedcmNMHZllPHdHzgWlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA5ZGY1MDAtM2IzNy0z ZDYyLWJmNWUtYzRiODlhMjRkZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvvznf8kUVIF1HR/260LpEwRlMxpypibMh5haaAcOFiv/d8yHT4E4n/ W1luVTTwOXihMzjg8Enx11g1yE9W2l8Tj1lDWfMhURYcNir6Vs22QfI2nXowJUV8 Rk0LvnxZvzewX/CfUaHW+1PuxSp2RbZkKRsknfEzgVoL/Ol2DAqb6Z24gERdCqk/ xQCPxRHbj0RgO0ALH21NRfg1JOOUiAF2FgKUsJveYcGoTPeVG40HeTHSWhsqrnhC vnBSIuSuichRaSDjXspiIYlBva14m6wSKd1f8Pf40yaJ75P16ltL/L47c1b0sBnb U76K5Oz+7BYH5FcCIlrT1jAoAhStkgY= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:58 2026 by rpki-client