$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa File: 3893d1e1-2218-38f4-82f9-5af50426a787.roa (raw, json) Hash identifier: I8jQbGIvmO8uEhWyat/w/hgluKedmSEvGwQnubBLDb8= Subject key identifier: 00:88:BB:66:02:04:D0:8D:29:1E:28:D9:E3:7C:69:FF:EE:0A:80:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974866C65362728007A1200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396589 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:86:6c:65:36:27:28:00:7a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ae4cde5-4e94-44d5-94b4-ad4e0cc64893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:ca:08:cc:99:00:d6:cc:70:b3:b0:2c:fb: cc:37:f8:a2:e2:7f:89:d0:e3:0c:35:bd:c9:48:4d: 0a:71:2b:7f:ad:5b:b6:de:c3:f5:0b:02:50:b3:11: 81:3d:7b:cf:66:ff:59:d9:09:47:8f:2c:db:10:c5: cb:79:f2:72:ca:e3:b8:a1:68:56:f1:d3:7b:49:1d: 93:1b:4f:f5:56:68:91:ec:94:fe:e1:db:ee:22:0c: cc:9d:5f:b6:58:88:05:c9:0d:eb:b4:0d:e4:93:b4: b7:84:16:17:1b:a5:ea:d1:d4:60:dd:ad:af:b3:29: 6e:12:c2:16:29:45:3c:91:10:d3:02:7b:e2:bf:a7: 9c:18:ae:d9:b1:b7:7e:f3:d3:b1:ab:18:a3:6e:85: 38:09:ce:03:96:b9:ff:38:e8:34:16:80:e0:ae:8e: e3:30:b6:c8:a0:a8:4c:a5:0a:14:f0:4c:d6:e9:48: 85:9c:08:ac:d7:76:f6:b0:d6:ff:4c:be:9b:0e:9d: eb:5d:8e:de:c1:49:9d:d5:93:83:3e:cd:fc:d8:0d: d7:11:7f:81:8e:93:61:63:a4:f0:be:e9:fc:14:d4: a6:e3:d1:87:80:f9:74:a3:ec:54:09:c1:ea:49:76: 45:c3:e0:fb:50:c9:bb:a6:6d:fc:89:4a:da:2f:e5: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:88:BB:66:02:04:D0:8D:29:1E:28:D9:E3:7C:69:FF:EE:0A:80:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:73:d5:b9:54:2c:82:dc:78:77:e2:71:93:6e:c9:6a:18:eb: 3b:52:31:bd:b7:5c:70:53:8e:ed:23:83:4d:1c:94:d4:ea:c1: 40:c2:c1:7d:b6:7d:b7:e8:82:47:69:25:97:43:96:bb:9c:aa: 73:da:72:ec:b7:8d:a7:38:5d:79:03:e1:53:8a:5e:53:3c:2e: 71:0e:1e:dc:bb:30:4a:fb:fc:5b:dc:52:2c:86:d7:1c:84:02: f0:b7:c4:22:68:32:d6:8a:31:5f:cd:6d:71:33:3c:17:ca:dc: 8c:32:4d:ea:96:59:d4:42:0e:80:1b:56:62:1c:b0:26:be:a4: e6:98:f8:72:36:82:5f:c6:da:0c:b8:33:93:b6:ee:c8:87:d9: 92:ee:d1:d1:4f:ea:82:6b:4f:5a:b6:7c:17:c9:e4:60:fb:bb: b8:18:dd:d9:ef:26:55:b0:38:22:3e:54:6c:3e:9b:21:dd:78: 43:ce:aa:b2:51:20:00:57:ba:49:2a:93:d5:4b:ca:0a:4f:8c: 53:c7:8f:24:b2:99:87:0c:bf:2b:6d:61:b3:df:38:6d:fd:46: 1d:31:e7:21:96:d0:d7:44:ac:b2:5c:bd:1a:92:e1:3a:93:c1: bb:86:aa:61:a0:43:67:08:f0:0e:9e:7e:4d:33:49:71:71:a3: a3:5e:f6:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdIZsZTYnKAB6EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmFlNGNkZTUtNGU5NC00NGQ1LTk0YjQtYWQ0ZTBjYzY0ODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMDKCMyZANbMcLOwLPvMN/ii4n+J0OMMNb3J SE0KcSt/rVu23sP1CwJQsxGBPXvPZv9Z2QlHjyzbEMXLefJyyuO4oWhW8dN7SR2T G0/1VmiR7JT+4dvuIgzMnV+2WIgFyQ3rtA3kk7S3hBYXG6Xq0dRg3a2vsyluEsIW KUU8kRDTAnviv6ecGK7Zsbd+89OxqxijboU4Cc4Dlrn/OOg0FoDgro7jMLbIoKhM pQoU8EzW6UiFnAis13b2sNb/TL6bDp3rXY7ewUmd1ZODPs382A3XEX+BjpNhY6Tw vun8FNSm49GHgPl0o+xUCcHqSXZFw+D7UMm7pm38iUraL+UzOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFACIu2YCBNCNKR4o2eN8af/uCoCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg5M2QxZTEtMjIxOC0z OGY0LTgyZjktNWFmNTA0MjZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGc9W5VCyC3Hh34nGTbslqGOs7UjG9t1xwU47tI4NNHJTU6sFAwsF9 tn236IJHaSWXQ5a7nKpz2nLst42nOF15A+FTil5TPC5xDh7cuzBK+/xb3FIshtcc hALwt8QiaDLWijFfzW1xMzwXytyMMk3qllnUQg6AG1ZiHLAmvqTmmPhyNoJfxtoM uDOTtu7Ih9mS7tHRT+qCa09atnwXyeRg+7u4GN3Z7yZVsDgiPlRsPpsh3XhDzqqy USAAV7pJKpPVS8oKT4xTx48kspmHDL8rbWGz3zht/UYdMechltDXRKyyXL0akuE6 k8G7hqphoENnCPAOnn5NM0lxcaOjXvaH -----END CERTIFICATE-----Generated at Fri Sep 25 07:18:53 2026 by rpki-client