$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa File: 6c69a170-71e0-38d1-9369-f97deba2b850.roa (raw, json) Hash identifier: lKjy7KPz+f24jy5mdJRSbeCaIXnrttsvX14sASEsfJE= Subject key identifier: 08:96:8A:2B:46:F9:30:91:4C:42:A8:6E:CC:21:80:76:AE:C8:31:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987E5C129651B173D9B3984 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396546 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:e5:c1:29:65:1b:17:3d:9b:39:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=01aea0a1-f6ef-4c5f-b898-d2a93e7ce3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7b:04:17:15:fe:f8:cc:e5:a3:df:1e:0f:ac: 1f:ac:13:48:05:53:fd:92:28:a6:60:61:aa:bf:0a: 0b:98:a6:6f:ca:55:ef:f7:cb:a5:0a:98:55:ed:8e: c9:d2:c4:ca:f7:86:ba:de:52:d6:2a:2c:a6:18:e3: 30:e5:b3:ec:d5:53:43:28:a7:23:1c:13:c5:db:a6: c2:17:67:81:39:20:4a:30:b5:fe:e5:43:11:1f:6c: 95:ba:0b:de:5d:e2:76:92:9f:9b:d2:bc:77:fb:c7: 0e:93:00:1b:61:72:4e:d7:07:26:4d:03:0e:d0:99: 6a:0d:e0:3c:00:26:a3:36:7e:ff:84:49:78:61:67: ee:69:f9:86:74:83:34:a0:59:92:38:e3:27:3d:08: 0e:ee:b1:db:07:db:3c:fb:88:2c:ec:5d:d2:9b:c6: d6:46:f4:27:60:a8:15:0e:1e:6b:73:be:cc:3c:ab: 14:95:fe:11:cc:6b:d3:32:fb:1e:d2:db:d7:e3:c2: 43:e7:df:89:e2:63:41:35:6a:93:68:ed:1c:ac:71: 8e:f1:31:3b:1c:81:af:35:87:89:66:b3:e4:9d:95: 70:19:69:1f:e2:63:fb:6a:2f:b0:5a:d0:1d:77:1f: 43:c5:3f:7b:6f:f5:a5:df:7b:3d:20:a7:94:28:3e: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:96:8A:2B:46:F9:30:91:4C:42:A8:6E:CC:21:80:76:AE:C8:31:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:81:08:12:61:c1:f1:48:68:4b:48:cd:02:83:f3:8b:27:31: 62:26:22:38:eb:fe:d9:53:e2:75:50:e7:1c:6e:52:32:d6:81: 2e:07:48:7d:ff:26:19:cd:0a:a0:c4:44:60:27:61:e3:25:22: 57:ad:aa:71:58:2b:8d:ec:da:36:bc:21:f8:9e:d4:f4:15:52: 60:94:be:17:5e:af:75:ea:de:45:2a:6b:dc:58:e6:11:02:79: c4:70:b3:cd:8c:1d:26:5f:df:dd:45:9c:3e:68:db:14:91:02: d1:57:52:3d:af:c1:32:b0:af:52:dc:d0:74:a6:fa:13:09:37: 0a:ad:78:6f:aa:69:88:dd:7f:88:11:0c:c4:0c:bd:6f:3e:c3: 2d:20:04:78:4d:79:db:f5:b7:fb:72:19:a4:2e:66:1e:23:13: a5:11:12:dc:5c:cb:da:e5:ef:26:7b:f5:18:29:38:16:1d:be: 29:fe:0e:b1:72:dd:ed:08:4b:4e:b2:1c:65:ff:00:eb:a8:44: a5:ef:21:f3:71:f6:86:51:b3:8e:28:5c:85:46:7f:83:43:03: 91:35:9f:19:4e:a5:e0:6f:52:65:14:84:10:f4:c8:8f:6a:4c: 78:6c:86:1f:78:2f:6a:4e:48:3d:1c:f5:b2:c4:e8:44:a3:a1: 99:24:64:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh+XBKWUbFz2bOYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDFhZWEwYTEtZjZlZi00YzVmLWI4OTgtZDJhOTNlN2NlM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHsEFxX++Mzlo98eD6wfrBNIBVP9kiimYGGq vwoLmKZvylXv98ulCphV7Y7J0sTK94a63lLWKiymGOMw5bPs1VNDKKcjHBPF26bC F2eBOSBKMLX+5UMRH2yVugveXeJ2kp+b0rx3+8cOkwAbYXJO1wcmTQMO0JlqDeA8 ACajNn7/hEl4YWfuafmGdIM0oFmSOOMnPQgO7rHbB9s8+4gs7F3Sm8bWRvQnYKgV Dh5rc77MPKsUlf4RzGvTMvse0tvX48JD59+J4mNBNWqTaO0crHGO8TE7HIGvNYeJ ZrPknZVwGWkf4mP7ai+wWtAddx9DxT97b/Wl33s9IKeUKD7UsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiWiitG+TCRTEKobswhgHauyDGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2OWExNzAtNzFlMC0z OGQxLTkzNjktZjk3ZGViYTJiODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuBCBJhwfFIaEtIzQKD84snMWImIjjr/tlT4nVQ5xxuUjLWgS4HSH3/ JhnNCqDERGAnYeMlIletqnFYK43s2ja8Ifie1PQVUmCUvhder3Xq3kUqa9xY5hEC ecRws82MHSZf391FnD5o2xSRAtFXUj2vwTKwr1Lc0HSm+hMJNwqteG+qaYjdf4gR DMQMvW8+wy0gBHhNedv1t/tyGaQuZh4jE6UREtxcy9rl7yZ79RgpOBYdvin+DrFy 3e0IS06yHGX/AOuoRKXvIfNx9oZRs44oXIVGf4NDA5E1nxlOpeBvUmUUhBD0yI9q THhshh94L2pOSD0c9bLE6ESjoZkkZCU= -----END CERTIFICATE-----Generated at Sat Sep 26 03:52:04 2026 by rpki-client