$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa File: 5ca52584-7b11-32cc-94d7-eac837c5a2af.roa (raw, json) Hash identifier: Mys0aT6ScxnLwwue0WREjRV1ijIuahF9Spchws08KIM= Subject key identifier: DB:CE:C6:33:4F:F8:6F:AF:A7:F9:F8:BD:22:03:A6:B0:49:4C:A1:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973384BDFE60A6A94AAD800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396604 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:38:4b:df:e6:0a:6a:94:aa:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=515a2283-49f2-4044-890b-1e93f0a64b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:2f:22:f1:ac:57:b1:f6:d8:3b:b0:a9:10: c8:1c:7b:76:bd:ee:61:5e:63:5f:d1:ff:96:ef:7e: 62:78:13:a4:c5:be:12:5f:86:e1:cc:c7:7d:2d:95: 8f:37:d6:1a:ba:c6:01:7a:ae:11:fd:f6:ed:ac:90: 4e:18:cc:9d:6a:64:ce:ca:39:7b:e2:73:b9:00:1a: 57:81:b6:ea:3e:57:70:86:18:8e:61:3c:55:6c:db: ae:99:6b:d6:3a:ec:27:8e:3b:75:e8:22:d2:b1:52: 56:53:60:cc:a1:07:3d:19:29:d4:66:3c:96:fe:e5: f9:c1:5a:d5:e3:85:37:dd:40:d6:12:e8:03:32:74: 0a:6b:34:ea:64:13:20:3d:c5:1f:43:a7:e0:bb:6b: b5:ae:a5:5d:cd:80:02:a3:99:19:f8:0e:e3:f5:7e: 08:95:e7:35:10:8e:99:8e:64:fb:f1:2b:5e:1c:a5: e3:bb:df:2b:b4:37:b9:c4:b1:5a:90:8a:2a:2d:ef: a8:b6:d9:41:e9:ae:4f:e8:08:ef:04:76:f9:d3:c3: d9:c4:bb:fb:60:d0:3e:0a:0f:3e:37:75:ae:f6:8b: f8:6a:54:fd:38:af:65:fb:2f:1c:36:96:13:c9:b4: 48:35:ac:16:46:29:62:c3:79:79:0e:ce:c7:3c:33: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CE:C6:33:4F:F8:6F:AF:A7:F9:F8:BD:22:03:A6:B0:49:4C:A1:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5ca52584-7b11-32cc-94d7-eac837c5a2af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:27:49:cb:60:b9:60:d2:58:9c:ef:56:78:13:d4:54:80:d1: 46:85:05:70:32:bf:3f:f0:db:72:4f:c8:10:2a:b4:ee:03:da: 7c:55:65:6b:15:20:ee:08:ff:5f:4c:78:80:19:6f:85:25:67: c0:9d:59:d8:e7:7d:fd:37:e7:7c:bc:bb:09:21:b4:0e:69:70: 5f:14:e8:17:76:81:2e:6e:09:d0:06:5c:d4:c3:4c:16:a0:30: 2f:79:8a:48:31:8d:0a:c4:cb:96:28:c4:ef:53:b0:91:5d:be: b6:bc:00:82:d3:27:c0:85:2e:0c:aa:18:59:31:8b:e2:9b:b7: 71:fc:32:03:37:4b:d9:2f:57:6a:7f:2c:e2:48:d1:96:14:4e: 4d:0a:cc:8e:55:39:12:f2:77:52:e4:d7:0d:f2:a2:93:c2:51: f3:51:e5:c5:22:67:0d:40:ee:ad:fe:c8:b7:90:d9:d2:5e:63: 1c:a7:f9:b8:40:84:de:6c:9e:b7:a9:d4:19:70:bf:36:89:ac: 73:23:eb:72:1d:9a:ec:0c:f2:7f:7d:7f:58:01:0d:41:bf:39: 48:a2:bc:b9:74:57:8a:52:9c:88:26:80:9a:90:af:88:d9:b2: d0:68:12:14:72:fa:3e:ea:fa:5e:bb:d5:99:cf:50:88:81:49: 91:cc:87:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczhL3+YKapSq2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTE1YTIyODMtNDlmMi00MDQ0LTg5MGItMWU5M2YwYTY0Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIvIvGsV7H22DuwqRDIHHt2ve5hXmNf0f+W 735ieBOkxb4SX4bhzMd9LZWPN9YausYBeq4R/fbtrJBOGMydamTOyjl74nO5ABpX gbbqPldwhhiOYTxVbNuumWvWOuwnjjt16CLSsVJWU2DMoQc9GSnUZjyW/uX5wVrV 44U33UDWEugDMnQKazTqZBMgPcUfQ6fgu2u1rqVdzYACo5kZ+A7j9X4Ilec1EI6Z jmT78SteHKXju98rtDe5xLFakIoqLe+ottlB6a5P6AjvBHb508PZxLv7YNA+Cg8+ N3Wu9ov4alT9OK9l+y8cNpYTybRINawWRiliw3l5Ds7HPDOXiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvOxjNP+G+vp/n4vSIDprBJTKEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWNhNTI1ODQtN2IxMS0z MmNjLTk0ZDctZWFjODM3YzVhMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgnSctguWDSWJzvVngT1FSA0UaFBXAyvz/w23JPyBAqtO4D2nxVZWsV IO4I/19MeIAZb4UlZ8CdWdjnff0353y8uwkhtA5pcF8U6Bd2gS5uCdAGXNTDTBag MC95ikgxjQrEy5YoxO9TsJFdvra8AILTJ8CFLgyqGFkxi+Kbt3H8MgM3S9kvV2p/ LOJI0ZYUTk0KzI5VORLyd1Lk1w3yopPCUfNR5cUiZw1A7q3+yLeQ2dJeYxyn+bhA hN5snrep1BlwvzaJrHMj63IdmuwM8n99f1gBDUG/OUiivLl0V4pSnIgmgJqQr4jZ stBoEhRy+j7q+l671ZnPUIiBSZHMh6g= -----END CERTIFICATE-----Generated at Fri Sep 25 12:56:31 2026 by rpki-client