$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa File: 672d8fcd-2150-3c7e-8677-093f7d936027.roa (raw, json) Hash identifier: yMQ3vnhWyGOW4eGV7mgpdjAf5l3MUdfZRaID1Dm1gqc= Subject key identifier: 78:DC:20:0F:68:A9:9B:92:45:87:F9:09:55:DF:DD:4B:2F:B9:80:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49729E791F480009EEFE8480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36627 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:9e:79:1f:48:00:09:ee:fe:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c2ba5d77-2066-4da3-a180-0b050e735a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:ee:9c:77:cc:46:c1:27:af:26:9a:99:54: 4e:33:b0:fe:ef:0c:79:6c:c1:8a:ad:f7:86:8f:94: 8f:10:28:1d:69:c1:ec:ab:5e:e9:b8:84:02:10:94: a4:ac:38:86:bf:95:88:52:b0:48:0a:42:3c:da:75: bd:b7:9e:0f:e3:54:25:66:01:42:d8:fd:28:5e:8f: 2f:e0:54:45:17:fc:40:2b:86:20:b8:9d:f5:46:91: d9:4b:9f:79:42:3c:6f:45:69:24:1a:b6:93:eb:07: 33:e0:44:29:b8:c0:5e:f8:24:7b:0e:9f:6d:9d:73: c5:20:fc:30:b4:97:7b:6f:76:1b:ec:c8:d8:5b:2b: 43:af:88:0e:76:ec:8b:60:e7:a2:c7:33:4e:a2:bb: 65:17:b4:8a:b7:15:10:cb:32:e3:a3:4d:bb:d3:8c: 1a:54:c5:74:49:c8:e4:dd:b5:1f:25:ea:c9:36:7f: 9a:00:0f:13:97:b3:85:71:87:5e:6e:72:8a:7e:7f: 60:50:d9:29:ec:a7:5e:0b:6d:67:a7:15:b2:2e:fe: 8a:fe:fc:9e:c7:20:61:65:9f:d8:7c:37:18:b3:28: 7b:c3:ee:95:5b:8c:3f:f9:a5:ba:63:41:82:fe:d8: 9c:47:76:89:cf:5a:d3:35:eb:0c:70:64:5f:0d:54: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:20:0F:68:A9:9B:92:45:87:F9:09:55:DF:DD:4B:2F:B9:80:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:07:ea:fd:4d:7b:a5:a0:56:24:e6:44:b7:25:e3:7c:06:34: 13:99:bb:5c:c2:40:4a:89:02:97:f6:b4:8e:c8:79:32:b3:53: af:06:88:2d:81:68:97:96:e0:ab:84:45:29:a1:99:a9:82:32: 8f:9e:c9:ee:93:9b:3f:16:46:19:90:7e:84:2b:36:83:4e:85: 36:3f:c9:37:8f:4e:34:0e:b2:a5:be:55:22:2b:d4:e2:4d:90: 3b:e9:0f:06:73:7b:bd:03:d0:0f:da:50:bb:a2:e6:7b:07:d9: 55:6b:26:b6:68:c0:82:9c:60:07:18:a8:78:70:74:d8:4e:5f: 84:3b:0c:80:ee:3f:3d:be:1a:f8:4c:9e:eb:06:66:8b:24:5a: e1:b2:ca:7d:e1:3b:ff:c7:50:9c:55:a9:40:9e:c3:63:48:e0: da:c8:f3:19:c7:bb:52:fd:23:7c:ce:26:51:37:88:52:e4:fb: 11:9d:94:08:5b:4f:a7:01:2b:12:55:2f:61:17:61:f7:8f:8d: f3:8e:6b:e7:82:f7:1c:4d:f0:40:47:5f:c8:1a:3b:52:0d:fa: dc:b1:9f:e4:f4:aa:2f:bd:a5:5f:9b:1a:5d:a2:fc:18:30:6a: ce:a4:54:e3:ff:c7:0e:68:2c:bf:10:a2:c5:2a:29:13:5a:79: 7e:95:f9:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcp55H0gACe7+hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJiYTVkNzctMjA2Ni00ZGEzLWExODAtMGIwNTBlNzM1YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2zunHfMRsEnryaamVROM7D+7wx5bMGKrfeG j5SPECgdacHsq17puIQCEJSkrDiGv5WIUrBICkI82nW9t54P41QlZgFC2P0oXo8v 4FRFF/xAK4YguJ31RpHZS595QjxvRWkkGraT6wcz4EQpuMBe+CR7Dp9tnXPFIPww tJd7b3Yb7MjYWytDr4gOduyLYOeixzNOortlF7SKtxUQyzLjo02704waVMV0Scjk 3bUfJerJNn+aAA8Tl7OFcYdebnKKfn9gUNkp7KdeC21npxWyLv6K/vyexyBhZZ/Y fDcYsyh7w+6VW4w/+aW6Y0GC/ticR3aJz1rTNesMcGRfDVSGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjcIA9oqZuSRYf5CVXf3UsvuYCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyZDhmY2QtMjE1MC0z YzdlLTg2NzctMDkzZjdkOTM2MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQH6v1Ne6WgViTmRLcl43wGNBOZu1zCQEqJApf2tI7IeTKzU68GiC2B aJeW4KuERSmhmamCMo+eye6Tmz8WRhmQfoQrNoNOhTY/yTePTjQOsqW+VSIr1OJN kDvpDwZze70D0A/aULui5nsH2VVrJrZowIKcYAcYqHhwdNhOX4Q7DIDuPz2+GvhM nusGZoskWuGyyn3hO//HUJxVqUCew2NI4NrI8xnHu1L9I3zOJlE3iFLk+xGdlAhb T6cBKxJVL2EXYfePjfOOa+eC9xxN8EBHX8gaO1IN+tyxn+T0qi+9pV+bGl2i/Bgw as6kVOP/xw5oLL8QosUqKRNaeX6V+eY= -----END CERTIFICATE-----Generated at Fri Sep 25 14:28:54 2026 by rpki-client