$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f36f4e9-52d0-3472-8f5c-cc0c2d15c45e.roa File: 7f36f4e9-52d0-3472-8f5c-cc0c2d15c45e.roa (raw, json) Hash identifier: DR87U7QKcf54wQr85MXjv+L7so0lcS98Re1PIOAU9YY= Subject key identifier: D1:82:63:0F:65:FC:B9:DE:63:ED:AE:AD:8E:DE:44:60:48:84:9A:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498A07A085BC9E1317E3AF04 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f36f4e9-52d0-3472-8f5c-cc0c2d15c45e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396602 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:07:a0:85:bc:9e:13:17:e3:af:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24c8c975-1ffd-40c3-8c3e-0da6e3a7d7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:05:33:59:9d:98:e4:52:31:01:b8:47:31:ae: 77:8b:2f:a7:a4:03:61:8f:b3:4d:ef:b6:af:4d:94: c9:4d:77:a4:54:ba:2f:e4:c8:0c:46:c3:cb:d2:ad: cc:b8:cb:00:9a:b6:9c:27:99:61:96:b9:c6:18:e2: a9:ba:e8:d5:52:3f:be:8a:77:b0:70:47:43:65:3f: c3:79:f0:38:cd:48:ea:27:b4:e9:85:58:42:2f:da: af:56:de:d6:e4:4c:f8:a0:84:56:33:45:15:08:5c: e6:28:5c:a7:c7:87:88:a2:df:5a:10:1a:4d:c1:bd: 7c:7f:55:61:0d:83:68:ef:19:a6:6f:7b:0a:1a:20: af:1b:62:12:74:7e:fc:bc:90:a8:6d:14:92:48:36: 6e:47:19:c9:1a:4b:ac:f3:fd:54:df:dd:30:96:b0: 87:75:f2:0e:d7:13:58:8e:e2:40:6d:38:94:87:88: cd:4a:27:4b:12:ea:3b:f2:51:bf:be:d1:fa:40:a7: 1d:f4:d7:0c:88:12:1a:86:f2:1d:85:07:2c:81:96: 34:d7:78:c1:24:24:b2:d1:86:db:67:d8:08:e2:8b: af:9f:6e:ff:d3:a2:83:f8:94:db:5e:b2:93:13:12: 0c:1d:f5:80:21:18:ad:fe:4a:1d:da:c2:57:40:00: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:63:0F:65:FC:B9:DE:63:ED:AE:AD:8E:DE:44:60:48:84:9A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f36f4e9-52d0-3472-8f5c-cc0c2d15c45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:57:68:67:52:d9:49:48:50:c1:6a:8b:a2:85:c7:9d:a3:82: 6c:6b:94:1b:ca:88:a7:0f:b2:ab:28:61:0b:51:bb:39:87:fb: 89:e7:75:91:b5:a5:ef:6a:e5:64:5a:29:82:44:92:51:da:67: 10:90:81:0e:0a:ac:2d:b6:ae:e5:d7:ea:fe:c1:97:ac:bc:86: ca:f1:71:a4:0d:d2:d3:2c:04:a8:77:03:60:24:af:98:cf:e5: 07:16:d4:e2:a2:5f:7d:8a:9c:b8:45:10:38:d3:83:7c:3e:de: 6d:66:64:82:49:e3:72:fc:1a:37:dc:03:73:b8:0f:b4:40:5a: 33:d8:03:09:73:9a:64:d0:ef:73:6e:aa:97:46:92:fe:53:0b: 69:9d:6a:ac:0a:f7:73:d8:7c:9e:7f:b1:29:e7:59:0d:6a:3a: 82:da:d1:7c:64:00:12:ba:f6:b1:3e:32:95:b2:5c:fc:4e:57: 97:3c:71:d9:c4:45:a8:e2:fc:2c:62:02:a0:31:bd:5b:1f:79: 4f:06:26:25:62:fd:47:5b:d8:10:a2:0a:41:54:a0:c0:e5:b7: 88:c9:98:b3:25:54:33:cb:ed:ef:16:85:6b:7f:9f:23:49:63: 1f:d6:84:c6:88:ed:99:7e:4e:bf:2c:15:82:7b:db:86:98:18: ff:2d:7d:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JigeghbyeExfjrwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRjOGM5NzUtMWZmZC00MGMzLThjM2UtMGRhNmUzYTdkN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwUzWZ2Y5FIxAbhHMa53iy+npANhj7NN77av TZTJTXekVLov5MgMRsPL0q3MuMsAmracJ5lhlrnGGOKpuujVUj++inewcEdDZT/D efA4zUjqJ7TphVhCL9qvVt7W5Ez4oIRWM0UVCFzmKFynx4eIot9aEBpNwb18f1Vh DYNo7xmmb3sKGiCvG2ISdH78vJCobRSSSDZuRxnJGkus8/1U390wlrCHdfIO1xNY juJAbTiUh4jNSidLEuo78lG/vtH6QKcd9NcMiBIahvIdhQcsgZY013jBJCSy0Ybb Z9gI4ouvn27/06KD+JTbXrKTExIMHfWAIRit/kod2sJXQADaewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNGCYw9l/LneY+2urY7eRGBIhJojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2YzNmY0ZTktNTJkMC0z NDcyLThmNWMtY2MwYzJkMTVjNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALV2hnUtlJSFDBaouihcedo4Jsa5QbyoinD7KrKGELUbs5h/uJ53WR taXvauVkWimCRJJR2mcQkIEOCqwttq7l1+r+wZesvIbK8XGkDdLTLASodwNgJK+Y z+UHFtTiol99ipy4RRA404N8Pt5tZmSCSeNy/Bo33ANzuA+0QFoz2AMJc5pk0O9z bqqXRpL+UwtpnWqsCvdz2Hyef7Ep51kNajqC2tF8ZAASuvaxPjKVslz8TleXPHHZ xEWo4vwsYgKgMb1bH3lPBiYlYv1HW9gQogpBVKDA5beIyZizJVQzy+3vFoVrf58j SWMf1oTGiO2Zfk6/LBWCe9uGmBj/LX3R -----END CERTIFICATE-----Generated at Sat Sep 26 19:04:36 2026 by rpki-client