$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9662b0-a265-3094-bc76-f304dfbc9908.roa File: 7f9662b0-a265-3094-bc76-f304dfbc9908.roa (raw, json) Hash identifier: z16QLF3Yu2g0PkoVq1Lvzbkp37p0frLITdWRSiZaMXE= Subject key identifier: 6C:7C:FF:C9:D6:14:78:91:15:74:D5:1A:D5:28:CC:35:FC:8B:08:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498ABADEB33988AB984F2F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9662b0-a265-3094-bc76-f304dfbc9908.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397194 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:ba:de:b3:39:88:ab:98:4f:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=52e6faf5-3857-464d-88fa-d79fe27c71c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:5a:ed:1e:fb:c8:c0:a3:d9:5d:89:5c:25: ac:60:6d:ec:45:f9:5c:76:20:a1:ab:29:46:b8:5c: ad:3f:d2:4d:b3:6c:ec:57:dd:9a:5d:a0:e1:35:cd: 65:7f:39:c3:fb:a1:21:15:14:b9:57:8c:a9:18:6d: 22:2f:28:20:9d:71:1c:7f:f5:fa:d8:96:b6:cf:9e: 5d:bd:38:7c:9d:ba:9f:28:a1:9a:56:1e:e5:c7:0e: f8:e8:ae:2a:c5:bc:98:ff:08:1b:51:e8:fe:20:e2: 40:b1:cf:09:8b:99:f9:1f:20:d4:84:00:4d:62:e7: 47:d6:88:9e:2f:80:ee:15:ad:1f:9f:d4:99:25:aa: 82:8c:55:76:a2:ba:33:fe:6c:05:f0:c0:7b:72:e9: ba:91:ac:17:28:fd:81:74:14:23:7f:88:75:70:05: 0b:c4:5f:3f:d6:38:f1:48:96:18:19:65:96:31:a4: 72:ec:aa:34:e8:e7:79:25:29:a7:8c:6f:82:16:64: 13:cf:2c:c8:e5:f7:79:98:de:70:54:8f:91:a9:80: 8d:ce:93:cf:a6:b7:dd:92:e1:a8:f3:25:a0:c9:a6: 4d:8b:7f:76:3a:be:a9:c3:29:97:2f:87:6c:b3:38: 78:70:6e:c2:bf:a9:90:7c:ee:d7:ac:45:8c:ee:60: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7C:FF:C9:D6:14:78:91:15:74:D5:1A:D5:28:CC:35:FC:8B:08:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9662b0-a265-3094-bc76-f304dfbc9908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2e:e3:f4:79:c8:1c:08:91:b5:de:e5:bb:20:8c:03:d5:19: 7b:ad:6e:89:21:06:49:3c:62:b4:aa:53:36:81:d4:6e:d2:b5: 01:4c:8b:97:08:75:53:9c:8f:6a:bd:01:26:d0:6f:78:a2:63: 8f:1c:46:38:45:cf:97:5d:d2:d1:b8:6d:bb:3c:77:c3:41:c0: 41:15:ca:d1:47:05:2d:68:7f:b3:80:09:bf:0b:d6:dd:7b:8b: c8:8e:98:cd:ef:7e:40:3d:ab:b8:4d:fc:99:4d:2e:ce:18:e3: 91:9b:a5:3a:19:c5:32:77:b3:f9:0e:c0:04:90:76:62:d7:68: 4d:5b:b0:44:d0:c4:df:20:86:b7:47:98:83:13:d0:83:10:86: e5:17:ec:64:86:77:25:a5:d6:9b:da:ea:11:3f:72:a1:1a:07: 74:6d:76:e3:a4:03:78:f8:72:9e:f0:fd:7e:29:eb:6a:2d:a5: 5d:ae:d6:65:3f:e4:03:28:b5:8c:66:50:e1:0d:6f:04:79:1f: de:b5:40:bb:cf:04:f2:5b:78:e0:c5:83:15:c7:5b:55:78:ee: 79:3c:5f:83:aa:c7:39:a4:21:43:43:53:07:aa:40:1c:d9:31: d5:b4:dc:cb:5e:24:9e:9b:0c:e9:53:50:40:a2:f9:32:24:29: 32:fd:29:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JirreszmIq5hPL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTJlNmZhZjUtMzg1Ny00NjRkLTg4ZmEtZDc5ZmUyN2M3MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrpa7R77yMCj2V2JXCWsYG3sRflcdiChqylG uFytP9JNs2zsV92aXaDhNc1lfznD+6EhFRS5V4ypGG0iLyggnXEcf/X62Ja2z55d vTh8nbqfKKGaVh7lxw746K4qxbyY/wgbUej+IOJAsc8Ji5n5HyDUhABNYudH1oie L4DuFa0fn9SZJaqCjFV2oroz/mwF8MB7cum6kawXKP2BdBQjf4h1cAULxF8/1jjx SJYYGWWWMaRy7Ko06Od5JSmnjG+CFmQTzyzI5fd5mN5wVI+RqYCNzpPPprfdkuGo 8yWgyaZNi392Or6pwymXL4dsszh4cG7Cv6mQfO7XrEWM7mDi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx8/8nWFHiRFXTVGtUozDX8iwiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y5NjYyYjAtYTI2NS0z MDk0LWJjNzYtZjMwNGRmYmM5OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcu4/R5yBwIkbXe5bsgjAPVGXutbokhBkk8YrSqUzaB1G7StQFMi5cI dVOcj2q9ASbQb3iiY48cRjhFz5dd0tG4bbs8d8NBwEEVytFHBS1of7OACb8L1t17 i8iOmM3vfkA9q7hN/JlNLs4Y45GbpToZxTJ3s/kOwASQdmLXaE1bsETQxN8ghrdH mIMT0IMQhuUX7GSGdyWl1pva6hE/cqEaB3RtduOkA3j4cp7w/X4p62otpV2u1mU/ 5AMotYxmUOENbwR5H961QLvPBPJbeODFgxXHW1V47nk8X4OqxzmkIUNDUweqQBzZ MdW03MteJJ6bDOlTUECi+TIkKTL9KWs= -----END CERTIFICATE-----Generated at Tue Sep 29 15:41:10 2026 by rpki-client