$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49783823-0166-3942-9be8-0a981127aedc.roa File: 49783823-0166-3942-9be8-0a981127aedc.roa (raw, json) Hash identifier: 0w+yMFt970Tyop6qGVOCAMh4QMQiLao7r/LGBdktnEg= Subject key identifier: 52:D3:53:FB:DC:0D:E0:E3:CD:95:AC:52:2C:E9:E9:44:BD:37:DB:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972A181E8303EAFAEDA120C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49783823-0166-3942-9be8-0a981127aedc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396550 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a1:81:e8:30:3e:af:ae:da:12:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20f9fa8d-6345-4a70-9dc5-91c9a0e5bf41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:34:de:ac:f7:69:9e:53:92:b7:13:27:2f: e1:92:33:e6:f2:f8:a7:01:ca:26:0a:30:23:7b:6a: 56:ef:09:86:0f:fe:38:91:1f:73:a8:bb:d3:8a:59: 1d:e9:1e:3c:23:65:38:34:b9:a9:3a:a1:d6:8f:01: fb:bd:07:ef:99:30:c6:fb:62:e9:7d:b2:4b:c2:a3: 90:85:c1:c4:ba:db:ea:66:f5:f5:8c:57:28:be:31: ce:0b:93:50:49:cd:f6:61:2c:c7:21:2d:87:9e:90: 22:de:ff:7e:6e:65:0a:76:38:f9:29:36:32:bf:d6: b5:8c:f7:6e:f6:15:96:f2:c9:c3:4d:64:83:8b:2c: 95:f5:78:df:23:c0:a8:65:af:07:ea:87:5f:33:82: 7d:98:47:c2:23:96:0b:22:cb:e0:04:ef:4d:2d:14: 13:ee:09:df:31:5f:a9:02:5e:13:44:68:c1:81:53: ff:0a:42:8d:2a:bd:94:42:99:18:3e:48:e0:a2:b0: a2:01:fe:3b:1f:bf:3f:df:83:14:01:9d:e8:96:bf: 03:1b:32:e3:d4:0a:a3:58:43:cc:3f:3d:7c:37:47: d5:28:7a:31:8f:a0:04:04:53:01:7e:d1:2d:5d:25: 03:69:f3:f2:39:6f:98:ec:3e:a9:19:72:9e:c2:5b: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:53:FB:DC:0D:E0:E3:CD:95:AC:52:2C:E9:E9:44:BD:37:DB:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/49783823-0166-3942-9be8-0a981127aedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ce:e2:57:49:ce:e2:63:cc:dd:8f:26:fa:1a:ea:f8:68:fc: 9d:c2:d8:c0:12:39:5f:cb:4e:ba:71:b7:a9:1a:f0:10:7c:f7: be:de:e3:16:91:a3:b1:97:40:42:09:ff:0c:6b:e0:ca:e4:d4: 38:ab:fa:a8:3c:35:c4:75:f3:f0:0c:55:22:56:86:7f:b8:aa: a1:08:a8:2c:2b:b2:b5:92:1b:24:cc:2c:3f:15:da:5e:a1:3c: 79:a4:78:b5:31:f0:13:f3:6a:48:76:68:0a:6a:e9:63:15:f1: d7:ee:ce:dc:d7:f2:a2:28:c0:95:68:4c:e9:06:66:a8:3a:5b: a4:f8:9a:ef:b2:ea:47:44:a0:e4:d6:13:f0:fe:b0:49:6f:61: e7:d7:7f:e6:44:10:9e:4d:9a:2c:df:7b:9a:5b:bc:6e:9f:ec: e4:16:36:74:4c:80:c5:84:64:5b:e6:93:f7:7b:26:d4:c9:98: 44:fb:35:57:1d:7e:dc:8c:af:48:e9:e9:ad:2a:a3:b5:53:0b: 5b:f0:74:c7:d7:90:6f:6a:90:e5:1c:0a:fe:99:81:10:2b:13: a6:68:f3:d5:ae:d9:87:a4:df:ea:18:a1:1e:05:bd:cf:b3:c6: f6:de:b2:1d:dd:8a:59:85:a7:0e:9f:19:2c:4c:d3:04:68:0e: aa:d2:36:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqGB6DA+r67aEgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBmOWZhOGQtNjM0NS00YTcwLTlkYzUtOTFjOWEwZTViZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzM03qz3aZ5TkrcTJy/hkjPm8vinAcomCjAj e2pW7wmGD/44kR9zqLvTilkd6R48I2U4NLmpOqHWjwH7vQfvmTDG+2LpfbJLwqOQ hcHEutvqZvX1jFcovjHOC5NQSc32YSzHIS2HnpAi3v9+bmUKdjj5KTYyv9a1jPdu 9hWW8snDTWSDiyyV9XjfI8CoZa8H6odfM4J9mEfCI5YLIsvgBO9NLRQT7gnfMV+p Al4TRGjBgVP/CkKNKr2UQpkYPkjgorCiAf47H78/34MUAZ3olr8DGzLj1AqjWEPM Pz18N0fVKHoxj6AEBFMBftEtXSUDafPyOW+Y7D6pGXKewlsL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLTU/vcDeDjzZWsUizp6US9N9t0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDk3ODM4MjMtMDE2Ni0z OTQyLTliZTgtMGE5ODExMjdhZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvO4ldJzuJjzN2PJvoa6vho/J3C2MASOV/LTrpxt6ka8BB8977e4xaR o7GXQEIJ/wxr4Mrk1Dir+qg8NcR18/AMVSJWhn+4qqEIqCwrsrWSGyTMLD8V2l6h PHmkeLUx8BPzakh2aApq6WMV8dfuztzX8qIowJVoTOkGZqg6W6T4mu+y6kdEoOTW E/D+sElvYefXf+ZEEJ5Nmizfe5pbvG6f7OQWNnRMgMWEZFvmk/d7JtTJmET7NVcd ftyMr0jp6a0qo7VTC1vwdMfXkG9qkOUcCv6ZgRArE6Zo89Wu2Yek3+oYoR4Fvc+z xvbesh3dilmFpw6fGSxM0wRoDqrSNts= -----END CERTIFICATE-----Generated at Sat Sep 26 10:33:33 2026 by rpki-client