$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa File: 459572fb-ad1b-3597-974f-68e154989cc8.roa (raw, json) Hash identifier: aKbbf6dqL86tbQdQvv/T7D+fYiSWO5mAyus24L6xY28= Subject key identifier: 67:01:FB:28:87:03:0F:FE:3E:B7:FF:53:F2:C8:33:5E:72:94:CA:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49890C7A4598E7EA63F1DEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211369 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:0c:7a:45:98:e7:ea:63:f1:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33c09569-5000-4637-a9f1-d48ff335d84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:63:16:5d:97:a2:19:1b:df:f9:10:52:79: 13:2a:85:3b:92:04:fe:04:0e:42:52:0c:ca:7b:5e: 73:10:91:ef:36:45:da:ca:1a:61:cd:0c:7e:20:ac: f7:ce:3b:f3:b2:01:ab:fc:1c:07:7c:f2:c3:55:dc: 31:37:98:7f:f1:f3:e5:68:ff:6d:40:8d:4d:ed:61: c4:76:6b:20:51:72:be:51:59:67:8b:fa:6d:1a:6c: 63:e6:b1:58:07:72:d8:20:17:06:b9:3f:75:9c:c8: 91:a9:95:9b:27:fb:d7:4e:5d:17:d1:54:a3:f3:e0: ed:ca:12:ac:bd:d2:bc:72:4e:95:dd:5e:0c:63:d8: c6:ac:8a:48:54:f2:be:de:d2:d6:e0:1c:33:4f:57: 16:51:8d:d5:e5:48:00:8d:e8:02:cb:50:70:d5:50: 68:97:43:e3:03:18:fb:c9:5d:a7:39:10:8f:d5:35: b4:01:09:53:29:b3:01:cc:a9:31:d3:54:7a:ff:f0: 13:93:ce:85:a0:c0:3c:fa:ca:17:67:a2:4d:fa:98: da:03:85:e6:11:a5:c1:ba:10:a6:e3:f3:65:b6:b1: c8:ae:b4:b2:fd:04:5e:ca:ad:b2:e9:26:4c:45:03: 26:fa:4b:52:c8:dd:df:1e:7d:95:7b:ed:b4:08:5d: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:FB:28:87:03:0F:FE:3E:B7:FF:53:F2:C8:33:5E:72:94:CA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:75:65:8a:61:d2:3d:ee:d7:48:1f:0d:1f:3b:0c:5e:1a:4d: 73:9f:2a:c8:2d:9e:5e:92:8d:52:a9:df:17:b7:34:2f:ea:56: 0d:57:83:56:a0:e8:a2:77:3b:c6:44:80:69:97:da:c1:18:29: 6f:00:d9:8c:2f:3e:83:b9:34:53:f8:04:d0:54:75:53:b4:d5: b5:f3:bc:ef:81:de:a5:9c:e1:6d:82:ac:70:26:47:aa:eb:1c: 31:27:46:53:94:ae:15:9f:c9:e3:48:f4:3e:6c:a8:38:f8:5b: 62:17:6b:58:b5:c0:a8:43:ea:04:db:2d:b6:6e:c1:f8:8b:9b: b7:99:70:55:dd:21:81:fb:e0:ae:94:73:3d:a7:04:80:b3:e3: 92:ba:c6:be:28:b6:ab:9b:29:54:09:9c:cb:b8:df:15:6e:4b: 87:fa:23:f5:d1:76:6c:81:a1:c6:3a:b7:87:c2:18:04:c9:6b: 78:97:6a:bb:ff:20:f2:4e:0b:45:ba:5d:c2:7d:2c:9a:c0:cf: 73:a6:4b:07:99:77:73:a5:d9:89:5b:72:d3:00:ab:80:cc:64: c6:a6:4c:f5:0d:6d:9e:85:ad:e7:5c:50:22:03:4e:fc:2b:82: 38:f4:9c:70:c7:cd:95:a6:de:7e:2e:06:ac:35:4b:de:78:c5: 9a:d6:17:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQx6RZjn6mPx3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzNjMDk1NjktNTAwMC00NjM3LWE5ZjEtZDQ4ZmYzMzVkODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XxjFl2Xohkb3/kQUnkTKoU7kgT+BA5CUgzK e15zEJHvNkXayhphzQx+IKz3zjvzsgGr/BwHfPLDVdwxN5h/8fPlaP9tQI1N7WHE dmsgUXK+UVlni/ptGmxj5rFYB3LYIBcGuT91nMiRqZWbJ/vXTl0X0VSj8+DtyhKs vdK8ck6V3V4MY9jGrIpIVPK+3tLW4BwzT1cWUY3V5UgAjegCy1Bw1VBol0PjAxj7 yV2nORCP1TW0AQlTKbMBzKkx01R6//ATk86FoMA8+soXZ6JN+pjaA4XmEaXBuhCm 4/NltrHIrrSy/QReyq2y6SZMRQMm+ktSyN3fHn2Ve+20CF2uZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcB+yiHAw/+Prf/U/LIM15ylMrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU5NTcyZmItYWQxYi0z NTk3LTk3NGYtNjhlMTU0OTg5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt1ZYph0j3u10gfDR87DF4aTXOfKsgtnl6SjVKp3xe3NC/qVg1Xg1ag 6KJ3O8ZEgGmX2sEYKW8A2YwvPoO5NFP4BNBUdVO01bXzvO+B3qWc4W2CrHAmR6rr HDEnRlOUrhWfyeNI9D5sqDj4W2IXa1i1wKhD6gTbLbZuwfiLm7eZcFXdIYH74K6U cz2nBICz45K6xr4otqubKVQJnMu43xVuS4f6I/XRdmyBocY6t4fCGATJa3iXarv/ IPJOC0W6XcJ9LJrAz3OmSweZd3Ol2YlbctMAq4DMZMamTPUNbZ6FredcUCIDTvwr gjj0nHDHzZWm3n4uBqw1S954xZrWFyA= -----END CERTIFICATE-----Generated at Fri Sep 25 16:39:49 2026 by rpki-client