$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa File: 599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa (raw, json) Hash identifier: 2NN1a0K1iybWK2ZOW+Yo4uL+U1svCwZaBvFnRPeNWd0= Subject key identifier: 5D:96:40:E5:A9:9D:F4:8A:FB:E6:73:55:13:8A:40:DF:1F:C1:BE:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497442678E9EEF4D44E9E780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396562 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:42:67:8e:9e:ef:4d:44:e9:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5c7dc88-d6d8-4204-ad11-6e9748c60df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:3a:a5:9e:47:00:0e:ba:c0:86:b9:42:65: 7c:b7:a7:7d:70:99:30:eb:c5:f0:8e:77:dd:a0:5c: 7d:b9:32:1f:91:67:9e:35:44:e8:44:8d:c4:9f:55: 83:2d:a7:d5:93:89:6f:22:2b:d8:d4:36:49:32:68: 7c:48:a7:89:b2:07:1c:12:dd:72:af:89:92:1e:e5: 32:1b:a4:c0:41:e0:01:8c:6d:46:60:19:8a:c9:9b: e6:1c:da:cb:bb:59:a0:ee:c3:66:82:d5:0f:a0:07: 4f:3c:f8:08:d0:9b:41:40:af:2b:dc:79:1c:95:23: da:42:65:2d:f7:a5:d6:c9:6c:fe:3d:bf:ec:8f:85: 49:4e:ef:73:c6:bd:56:29:44:a0:e4:d5:87:a5:4c: bd:c1:0a:a0:86:9d:02:a5:33:6e:af:cb:68:31:a0: 1e:a0:9f:c6:cf:2d:e0:61:a8:e2:46:7b:f9:bf:a0: ec:ce:5f:ad:26:60:90:a2:5e:bf:2a:6b:8b:0b:e6: 75:5c:37:2d:5a:26:89:36:46:b8:d9:00:10:a7:d7: 15:71:6e:00:b4:a4:a2:6a:e0:96:2f:15:be:38:1b: ff:21:bf:2b:52:56:04:93:c4:3f:0b:9c:dc:9a:ae: 81:08:ef:03:5f:61:b0:03:95:0e:70:0e:b3:a8:e8: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:40:E5:A9:9D:F4:8A:FB:E6:73:55:13:8A:40:DF:1F:C1:BE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ce:c2:c8:58:be:67:b7:d3:ba:75:84:9a:b9:b6:86:1c:0f: 42:1e:a9:52:df:41:20:99:89:9e:7c:6c:51:44:50:9a:07:3c: a7:d4:83:01:a7:90:3c:97:d5:be:f5:8e:14:38:01:7f:94:8c: 86:e0:84:3a:c4:b9:c6:6b:42:4b:cf:ad:d9:de:a7:7d:01:27: 0a:61:7b:7c:62:b4:f7:b7:05:e4:97:ff:79:25:4b:76:7d:4c: 98:ba:ea:2a:00:70:b4:da:c3:00:07:de:9e:85:e4:d7:dd:b9: 84:b6:84:6f:f4:a0:d2:b7:0f:6c:0f:d2:eb:0c:96:22:88:4b: de:7e:21:0f:a8:8f:6c:44:0f:0f:09:3f:9d:b4:cb:54:ce:c8: 75:4e:77:a8:01:51:1c:5c:1b:89:c6:17:df:8d:b3:b5:1e:65: bc:7d:1a:38:71:aa:76:6a:d3:b1:cf:88:81:f6:d0:c4:6e:3d: 4e:dd:ae:ae:13:ac:20:33:de:92:da:d6:c2:e5:72:17:7d:76: 47:5a:43:01:65:01:a5:ed:ee:75:b9:03:5f:c5:07:4b:07:95: 19:cf:8b:e6:b6:6c:b8:2e:b4:b8:20:4e:45:0c:59:24:e0:6a: fa:8c:bf:77:6d:7f:d9:f7:23:74:77:13:bf:a9:d6:b4:38:78: 16:92:64:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdEJnjp7vTUTp54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDVjN2RjODgtZDZkOC00MjA0LWFkMTEtNmU5NzQ4YzYwZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBI6pZ5HAA66wIa5QmV8t6d9cJkw68Xwjnfd oFx9uTIfkWeeNUToRI3En1WDLafVk4lvIivY1DZJMmh8SKeJsgccEt1yr4mSHuUy G6TAQeABjG1GYBmKyZvmHNrLu1mg7sNmgtUPoAdPPPgI0JtBQK8r3HkclSPaQmUt 96XWyWz+Pb/sj4VJTu9zxr1WKUSg5NWHpUy9wQqghp0CpTNur8toMaAeoJ/Gzy3g YajiRnv5v6Dszl+tJmCQol6/KmuLC+Z1XDctWiaJNka42QAQp9cVcW4AtKSiauCW LxW+OBv/Ib8rUlYEk8Q/C5zcmq6BCO8DX2GwA5UOcA6zqOjUHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF2WQOWpnfSK++ZzVROKQN8fwb7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk5NTg4ZmYtMTdkNS0z ZGM5LWFhYTctMjEyMmIxZWM1MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzzsLIWL5nt9O6dYSaubaGHA9CHqlS30EgmYmefGxRRFCaBzyn1IMB p5A8l9W+9Y4UOAF/lIyG4IQ6xLnGa0JLz63Z3qd9AScKYXt8YrT3twXkl/95JUt2 fUyYuuoqAHC02sMAB96eheTX3bmEtoRv9KDStw9sD9LrDJYiiEvefiEPqI9sRA8P CT+dtMtUzsh1TneoAVEcXBuJxhffjbO1HmW8fRo4cap2atOxz4iB9tDEbj1O3a6u E6wgM96S2tbC5XIXfXZHWkMBZQGl7e51uQNfxQdLB5UZz4vmtmy4LrS4IE5FDFkk 4Gr6jL93bX/Z9yN0dxO/qda0OHgWkmSm -----END CERTIFICATE-----Generated at Tue Sep 29 04:56:03 2026 by rpki-client