$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa File: 741259b8-470d-3e80-8df2-ca35db8344b2.roa (raw, json) Hash identifier: dmKqxfPdxIQZdV6CUQp32dM0eN9hb9DNrC/Np1Us7qE= Subject key identifier: 48:39:F5:87:9B:DD:71:F3:F2:F3:CF:70:C3:DA:99:04:82:7D:8D:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49732E55CC5CFCD3BED4F448 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396550 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2e:55:cc:5c:fc:d3:be:d4:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b25ceff8-966d-46d3-88d1-83181da4b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:61:83:fd:b5:eb:bd:90:f8:78:82:c8:d6: af:c1:29:29:4e:b9:d3:29:91:62:ca:71:b5:f9:12: 35:63:9b:a1:4c:f3:56:7f:83:b5:4e:6b:c5:f2:c6: ea:90:8b:58:ef:e9:eb:c9:4c:84:33:7f:e0:69:13: 8e:93:fc:0d:3b:81:13:c7:6a:a0:ed:0e:5e:18:b6: 39:6e:09:13:aa:13:9e:ff:99:ba:c3:e7:20:1e:c9: c9:b4:63:d8:e1:ba:e9:89:96:2b:18:d5:aa:7d:45: 71:fa:56:8e:57:37:74:0d:5f:5d:37:b5:b2:c4:6d: 73:0b:ba:31:77:17:b8:c7:b0:f9:56:af:58:65:77: 55:e1:8b:b9:d0:3d:8b:4e:32:70:1f:52:8e:8d:13: 95:49:4d:97:96:88:91:a2:52:61:3f:a4:a5:78:54: 1f:40:87:f3:a7:a5:c7:d9:12:76:f4:2e:2b:b6:42: 7c:cd:41:44:cb:de:3e:06:cb:ea:89:68:d2:39:43: 3a:48:d1:af:47:5a:24:9e:4f:8d:00:03:a8:dc:78: 94:09:73:78:80:82:48:f8:43:fc:7f:28:2f:ac:b7: d1:b5:1e:63:2a:f9:59:0f:69:17:36:be:df:be:02: 3b:a9:f9:af:b4:e7:c2:90:50:3f:e1:9f:ce:c3:be: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:39:F5:87:9B:DD:71:F3:F2:F3:CF:70:C3:DA:99:04:82:7D:8D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/741259b8-470d-3e80-8df2-ca35db8344b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c1:f5:d2:4e:78:c6:d3:03:63:8d:5f:6f:77:5f:1d:89:56: dd:f8:ed:95:7b:f8:ce:b1:13:77:08:94:9b:14:47:23:06:d0: 66:8b:a9:a0:e5:1e:39:65:12:da:14:8f:82:db:e1:84:0b:7c: f3:a7:dc:83:64:1e:1c:4d:63:2f:aa:34:09:05:92:3b:8b:05: cc:51:b1:ba:dd:4c:43:dd:6e:a6:82:2d:e3:e9:54:cd:16:71: 15:d2:73:6a:9d:b8:8c:ac:0c:52:9d:25:99:a4:46:ae:3f:31: 99:52:f4:04:c3:0b:e0:cc:9b:1c:0c:2b:b9:b0:ac:ca:cb:ec: 12:dc:56:9d:80:b2:11:7c:cd:3e:4d:f4:77:df:af:91:0b:b6: f7:9c:8a:2f:2e:a9:1a:4e:b9:70:83:f6:92:b5:cc:b6:fc:01: 8a:28:b8:17:34:3b:67:39:f1:8b:6e:12:4d:06:9a:31:e9:5b: 9a:ba:c1:f6:2e:2e:33:0d:4d:2b:ff:c4:8a:91:e0:3d:89:71: 40:48:6b:b3:77:f8:32:06:de:eb:c1:c6:b6:0e:c9:4f:5b:66: 87:1e:78:3b:03:d4:18:b3:b6:04:4e:42:64:c1:17:28:34:46: 91:fa:71:fd:3d:f5:44:97:62:ea:f6:51:9c:aa:27:6d:df:79: 35:e5:77:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jcy5VzFz8077U9EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjI1Y2VmZjgtOTY2ZC00NmQzLTg4ZDEtODMxODFkYTRiOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmhhg/21672Q+HiCyNavwSkpTrnTKZFiynG1 +RI1Y5uhTPNWf4O1TmvF8sbqkItY7+nryUyEM3/gaROOk/wNO4ETx2qg7Q5eGLY5 bgkTqhOe/5m6w+cgHsnJtGPY4brpiZYrGNWqfUVx+laOVzd0DV9dN7WyxG1zC7ox dxe4x7D5Vq9YZXdV4Yu50D2LTjJwH1KOjROVSU2XloiRolJhP6SleFQfQIfzp6XH 2RJ29C4rtkJ8zUFEy94+BsvqiWjSOUM6SNGvR1oknk+NAAOo3HiUCXN4gIJI+EP8 fygvrLfRtR5jKvlZD2kXNr7fvgI7qfmvtOfCkFA/4Z/Ow75a2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEg59Yeb3XHz8vPPcMPamQSCfY0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzQxMjU5YjgtNDcwZC0z ZTgwLThkZjItY2EzNWRiODM0NGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIwfXSTnjG0wNjjV9vd18diVbd+O2Ve/jOsRN3CJSbFEcjBtBmi6mg 5R45ZRLaFI+C2+GEC3zzp9yDZB4cTWMvqjQJBZI7iwXMUbG63UxD3W6mgi3j6VTN FnEV0nNqnbiMrAxSnSWZpEauPzGZUvQEwwvgzJscDCu5sKzKy+wS3FadgLIRfM0+ TfR336+RC7b3nIovLqkaTrlwg/aStcy2/AGKKLgXNDtnOfGLbhJNBpox6VuausH2 Li4zDU0r/8SKkeA9iXFASGuzd/gyBt7rwca2DslPW2aHHng7A9QYs7YETkJkwRco NEaR+nH9PfVEl2Lq9lGcqidt33k15Xcu -----END CERTIFICATE-----Generated at Fri Sep 25 13:05:03 2026 by rpki-client