$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa File: 40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa (raw, json) Hash identifier: ryFuYMGhj/63veub70vbmY5sTTO1Cvj9vLUUKy2Ol70= Subject key identifier: FB:06:A2:6F:9F:9C:8F:5E:19:0A:48:D2:DA:1B:6B:24:9E:E7:FF:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497369F4B32045486151E080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:69:f4:b3:20:45:48:61:51:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dcd7df90-62c6-4e9b-9e7c-1916217d8d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:79:c9:91:94:b1:50:7b:75:e4:88:f6:e3: e0:67:e0:6a:b1:d6:99:f3:31:12:bf:86:70:8f:09: d6:28:67:1f:c3:49:45:18:b6:2c:de:a3:72:2a:b3: 20:fd:56:3e:eb:03:85:e9:70:66:82:5b:c9:06:e6: 38:47:43:69:c9:a0:ad:38:0b:15:6b:9b:fa:4d:2f: de:03:27:7d:8f:26:40:7e:4b:a7:be:b2:f3:e7:11: 53:b8:42:cb:67:7c:d2:05:71:ab:03:78:26:0e:3b: cf:3a:e7:22:03:e6:ba:9b:c8:00:06:ab:56:f2:32: 28:02:ed:12:8e:db:87:3f:47:7d:a7:12:ea:36:48: 41:9a:c2:f4:97:0f:f9:51:9d:2f:31:ea:37:72:4d: a2:0d:98:f3:63:4b:01:72:54:84:63:3f:60:4f:fe: 2b:58:54:d0:d6:ea:44:7a:96:e8:fe:c2:df:e8:c2: 37:78:a0:9e:2f:29:b6:4c:2c:50:73:29:44:5c:c8: 67:36:7b:56:55:d2:05:0f:f9:16:2e:d6:7a:5a:7e: d2:8e:66:5b:83:cf:82:5a:f3:a7:55:8c:33:9b:3d: 57:fb:d7:c5:79:b4:33:35:1b:7b:8f:a4:6b:90:0b: 72:e9:62:b1:c0:6e:3f:21:21:07:88:af:81:23:45: ad:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:A2:6F:9F:9C:8F:5E:19:0A:48:D2:DA:1B:6B:24:9E:E7:FF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40f7365f-a160-3129-ad81-7d7e4ba7a70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:27:de:99:4a:a8:56:73:73:a8:e3:2e:d1:50:cb:aa:f0:b7: 7c:cd:ab:29:13:52:c1:77:c8:13:33:ed:ce:6c:4e:ff:e7:60: 5e:22:42:b0:ac:35:34:c8:98:01:d3:b4:8b:0c:77:3d:b2:e6: 86:8b:12:1a:4e:0c:c8:84:fc:4b:cb:8e:5b:b0:46:81:de:57: bd:cc:68:0d:ea:5b:67:d3:24:f7:7f:18:64:a5:ad:af:bf:cd: a8:64:1b:54:2f:9b:15:b6:fc:a0:7c:7a:cb:95:df:0d:b4:15: 2c:c8:e3:ba:ea:47:a9:30:d5:a4:07:6c:3d:d3:d5:18:a2:e2: 91:10:da:1f:e5:f5:e2:6c:9e:d0:b7:32:e7:ca:7a:20:30:11: b5:23:fd:7f:c3:6d:90:c0:c3:01:28:93:2c:85:f3:4d:b7:7d: 51:d5:22:6b:70:60:f4:85:ca:bc:d0:5f:b8:8c:aa:d0:c1:24: 12:e2:a8:40:15:93:78:8b:5d:dc:92:6b:3e:ae:d4:12:2d:c7: fd:cb:aa:a6:b3:02:77:53:78:44:82:62:ec:7e:65:41:d7:22: d8:b1:78:d7:2b:5e:26:e8:fe:01:57:eb:ff:00:88:ef:81:7d: 36:76:51:3a:fe:43:19:69:02:88:82:1e:32:e9:60:c8:7f:dd: 28:db:67:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc2n0syBFSGFR4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGNkN2RmOTAtNjJjNi00ZTliLTllN2MtMTkxNjIxN2Q4ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrN5yZGUsVB7deSI9uPgZ+BqsdaZ8zESv4Zw jwnWKGcfw0lFGLYs3qNyKrMg/VY+6wOF6XBmglvJBuY4R0NpyaCtOAsVa5v6TS/e Ayd9jyZAfkunvrLz5xFTuELLZ3zSBXGrA3gmDjvPOuciA+a6m8gABqtW8jIoAu0S jtuHP0d9pxLqNkhBmsL0lw/5UZ0vMeo3ck2iDZjzY0sBclSEYz9gT/4rWFTQ1upE epbo/sLf6MI3eKCeLym2TCxQcylEXMhnNntWVdIFD/kWLtZ6Wn7SjmZbg8+CWvOn VYwzmz1X+9fFebQzNRt7j6RrkAty6WKxwG4/ISEHiK+BI0WtQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPsGom+fnI9eGQpI0tobaySe5/8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBmNzM2NWYtYTE2MC0z MTI5LWFkODEtN2Q3ZTRiYTdhNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQJ96ZSqhWc3Oo4y7RUMuq8Ld8zaspE1LBd8gTM+3ObE7/52BeIkKw rDU0yJgB07SLDHc9suaGixIaTgzIhPxLy45bsEaB3le9zGgN6ltn0yT3fxhkpa2v v82oZBtUL5sVtvygfHrLld8NtBUsyOO66kepMNWkB2w909UYouKRENof5fXibJ7Q tzLnynogMBG1I/1/w22QwMMBKJMshfNNt31R1SJrcGD0hcq80F+4jKrQwSQS4qhA FZN4i13ckms+rtQSLcf9y6qmswJ3U3hEgmLsfmVB1yLYsXjXK14m6P4BV+v/AIjv gX02dlE6/kMZaQKIgh4y6WDIf90o22c2 -----END CERTIFICATE-----Generated at Sat Sep 26 13:00:42 2026 by rpki-client