$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa File: 4a010b08-bb23-3e72-9dae-7202b24c1df9.roa (raw, json) Hash identifier: AhRKB85SmOeOmkGMEMOvONcksMXIN1a4permDbs4OA4= Subject key identifier: 58:95:DC:3A:52:F1:69:88:1C:CE:42:AE:FD:8E:69:24:DC:87:A4:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BE5E89636983BC321C740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396613 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:e5:e8:96:36:98:3b:c3:21:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ec05d93-39af-4cdc-b646-41e26492c4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:7c:2c:e2:99:b0:32:5f:5e:e6:16:43:2a: a2:90:5d:d0:88:9f:34:47:65:08:e1:57:7f:e7:c4: fa:8f:ff:94:84:43:4b:1a:d2:e4:ba:7b:71:75:47: 30:8f:f6:20:f7:5a:3d:ff:16:44:74:ed:95:86:14: 28:cc:d7:73:41:6c:8e:93:bc:ae:2f:47:67:86:9a: 8d:86:03:73:c4:7a:e7:8d:dc:ae:cb:43:8c:9b:1a: d1:31:f6:a6:59:89:72:a8:8d:4d:5e:69:1d:2b:b8: 3a:b7:77:31:9c:04:84:14:60:84:0b:28:25:87:3f: 96:88:f5:a8:b0:25:6b:e7:0c:99:3d:58:77:14:e7: 9b:61:9c:23:d2:58:72:95:aa:10:b9:87:de:68:85: 90:a6:3a:5a:9b:e1:0c:de:b3:97:29:6f:97:3b:85: 70:42:87:af:74:01:67:0f:c6:97:ca:47:4c:9d:03: 1c:01:9d:f2:e7:56:9c:49:a7:86:e3:2f:d9:9e:f9: a9:e2:40:05:c8:19:ac:64:2f:a3:7c:7b:da:f0:a5: 36:be:00:3a:7c:fc:3d:75:e0:2b:12:92:bc:1e:57: 09:3f:0b:6e:74:4b:17:6a:5d:0f:12:80:4f:37:3a: 0e:4a:f3:ef:7d:7f:0e:dd:b5:ba:ca:e5:c3:64:2d: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:DC:3A:52:F1:69:88:1C:CE:42:AE:FD:8E:69:24:DC:87:A4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a010b08-bb23-3e72-9dae-7202b24c1df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:be:0d:70:08:ec:2b:6f:a6:16:da:2b:a6:74:9e:1c:b1:b6: 74:3d:47:27:cf:36:3b:c0:42:57:db:4c:b3:09:85:45:f7:e7: 8e:74:fb:33:78:34:e3:37:6d:98:0f:65:e5:93:7b:f8:2b:c7: eb:0e:72:70:93:f4:1b:e3:c2:a3:4a:50:d9:56:50:c7:bb:7a: 16:18:df:ea:e0:91:5d:3f:54:67:d1:de:06:62:80:87:ed:c3: bb:a2:f8:b1:9d:38:f2:3a:fc:01:2d:43:4c:b5:84:ba:f8:cc: e0:c5:3d:b3:aa:08:e8:c1:a9:42:30:53:c6:af:fb:e9:7a:ac: b2:65:e1:cc:be:11:1b:43:e8:8e:a0:0a:79:c3:c1:15:1c:f5: 10:18:30:32:65:a1:3e:4f:3f:8e:55:4a:99:b0:a5:d1:f7:68: 9b:f8:c6:23:b4:0a:99:9a:43:13:e4:37:c2:0e:ab:65:68:e4: 6c:75:7c:0d:eb:b1:fe:71:81:bc:ad:ea:b6:5b:34:97:0d:23: 73:f8:09:07:65:7c:8a:c7:f3:5e:19:03:61:7a:e5:96:5c:d6: 51:fc:d5:39:0a:77:37:36:c1:c3:b9:0f:7b:9a:12:79:c0:b6: 0e:04:55:de:97:e5:46:14:dc:15:de:83:1b:e9:a9:fa:29:4f: 8e:9f:56:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji+XoljaYO8Mhx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2VjMDVkOTMtMzlhZi00Y2RjLWI2NDYtNDFlMjY0OTJjNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqR8LOKZsDJfXuYWQyqikF3QiJ80R2UI4Vd/ 58T6j/+UhENLGtLkuntxdUcwj/Yg91o9/xZEdO2VhhQozNdzQWyOk7yuL0dnhpqN hgNzxHrnjdyuy0OMmxrRMfamWYlyqI1NXmkdK7g6t3cxnASEFGCECyglhz+WiPWo sCVr5wyZPVh3FOebYZwj0lhylaoQuYfeaIWQpjpam+EM3rOXKW+XO4VwQoevdAFn D8aXykdMnQMcAZ3y51acSaeG4y/Znvmp4kAFyBmsZC+jfHva8KU2vgA6fPw9deAr EpK8HlcJPwtudEsXal0PEoBPNzoOSvPvfX8O3bW6yuXDZC0jhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiV3DpS8WmIHM5Crv2OaSTch6Q8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGEwMTBiMDgtYmIyMy0z ZTcyLTlkYWUtNzIwMmIyNGMxZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy+DXAI7CtvphbaK6Z0nhyxtnQ9RyfPNjvAQlfbTLMJhUX35450+zN4 NOM3bZgPZeWTe/grx+sOcnCT9BvjwqNKUNlWUMe7ehYY3+rgkV0/VGfR3gZigIft w7ui+LGdOPI6/AEtQ0y1hLr4zODFPbOqCOjBqUIwU8av++l6rLJl4cy+ERtD6I6g CnnDwRUc9RAYMDJloT5PP45VSpmwpdH3aJv4xiO0CpmaQxPkN8IOq2Vo5Gx1fA3r sf5xgbyt6rZbNJcNI3P4CQdlfIrH814ZA2F65ZZc1lH81TkKdzc2wcO5D3uaEnnA tg4EVd6X5UYU3BXegxvpqfopT46fVtE= -----END CERTIFICATE-----Generated at Fri Sep 25 16:35:09 2026 by rpki-client