$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa File: 8575475a-2a7f-3a02-8915-1d59f753fdc1.roa (raw, json) Hash identifier: tOkxdJ0870M1PsR0J9WAC4CAkYpVTWu2zMM/5feFU9Q= Subject key identifier: 44:59:B7:36:D0:6C:75:1A:86:5E:D3:B2:AA:03:5A:24:23:EB:59:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973387E4AB0A4CD89E1D780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:38:7e:4a:b0:a4:cd:89:e1:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0182625a-4052-4d29-aded-f67d6ed89d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:6c:40:d2:54:78:4e:b3:87:f3:1a:b1:d0: 51:d3:f7:56:50:28:fd:ed:c3:f0:60:df:50:59:0c: cc:a3:27:c7:b6:4f:e3:e7:a7:b5:13:be:ab:68:f4: f2:10:dd:f6:f5:35:5d:49:72:25:17:2b:58:e0:c3: 6f:0c:a6:83:15:fd:e8:c9:40:57:49:02:a1:e9:6a: 16:88:d1:52:96:a5:42:cc:d7:65:dc:cf:2e:9b:f3: 38:d8:b9:33:2f:0a:f4:ad:82:73:dd:d6:3d:dd:f0: 71:18:79:83:bb:8e:6a:39:58:b2:76:a6:c9:66:31: e5:8a:c0:f1:f2:2c:bf:34:6f:4e:e0:8c:29:4b:84: 2e:f6:a1:f2:27:ea:1e:51:8a:bf:cf:94:a9:ad:cc: fb:89:e3:56:09:b0:f7:ef:9b:fe:75:9d:e5:7a:80: 83:5e:4d:69:5e:65:a2:38:4a:50:0a:00:b3:4d:76: 57:28:dd:20:8f:86:a5:d8:0a:5a:d4:0c:e5:2c:d4: 59:8e:06:88:0e:4d:bf:33:7b:4c:20:64:f3:c9:b8: 65:20:22:62:42:da:59:f0:58:2a:ef:c9:54:a4:ca: d7:70:7b:2a:c6:d0:b6:42:28:46:06:1a:4e:71:9c: b9:04:b4:f5:f2:ce:d0:22:7e:fb:95:89:8c:fd:42: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:59:B7:36:D0:6C:75:1A:86:5E:D3:B2:AA:03:5A:24:23:EB:59:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575475a-2a7f-3a02-8915-1d59f753fdc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:47:b4:35:d8:56:d7:83:e1:f3:38:e6:6a:9a:bf:24:f9:b2: 07:e0:8b:53:c0:a7:88:82:b0:32:4a:a8:0d:e9:3e:fc:be:cf: f7:26:34:2d:98:14:d6:a8:1e:b3:e9:93:4d:51:f9:d6:f3:4f: 83:fc:93:8d:63:19:d7:9d:d4:b6:51:4f:33:fb:77:8e:da:66: 3d:da:14:81:57:f1:78:24:0b:f8:f0:fc:7b:5b:f1:b6:85:86: 9e:82:9d:4f:39:d8:c2:6a:b7:59:0f:19:f8:a9:ef:a3:9b:b1: a0:8d:75:4b:31:04:b3:1d:1f:67:19:10:c1:6d:e2:01:4f:3f: 43:61:76:5f:bd:99:a4:9a:da:f1:dc:28:cf:5b:13:56:fb:37: f9:06:dc:b5:f3:76:d4:d9:c6:78:4d:bd:b9:f7:c5:f6:28:d9: 87:ec:21:d3:d3:42:24:6e:3d:3f:3c:bb:76:17:4f:60:8d:03: 49:c9:51:97:c6:85:22:d8:32:32:ea:ef:a4:2b:28:16:55:0a: 71:4d:52:61:2f:5d:7d:61:8d:a4:54:a7:86:35:f0:98:34:dd: 63:7e:f4:35:b0:58:8c:10:b4:cb:a2:63:0b:5d:27:bc:2b:fe: 82:db:89:af:09:28:83:6a:b0:2f:d0:6d:23:a2:01:4b:18:18: e2:4b:c3:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jczh+SrCkzYnh14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDE4MjYyNWEtNDA1Mi00ZDI5LWFkZWQtZjY3ZDZlZDg5ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0FsQNJUeE6zh/MasdBR0/dWUCj97cPwYN9Q WQzMoyfHtk/j56e1E76raPTyEN329TVdSXIlFytY4MNvDKaDFf3oyUBXSQKh6WoW iNFSlqVCzNdl3M8um/M42LkzLwr0rYJz3dY93fBxGHmDu45qOViydqbJZjHlisDx 8iy/NG9O4IwpS4Qu9qHyJ+oeUYq/z5Sprcz7ieNWCbD375v+dZ3leoCDXk1pXmWi OEpQCgCzTXZXKN0gj4al2Apa1AzlLNRZjgaIDk2/M3tMIGTzybhlICJiQtpZ8Fgq 78lUpMrXcHsqxtC2QihGBhpOcZy5BLT18s7QIn77lYmM/ULtVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFERZtzbQbHUahl7TsqoDWiQj61lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3NTQ3NWEtMmE3Zi0z YTAyLTg5MTUtMWQ1OWY3NTNmZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZR7Q12FbXg+HzOOZqmr8k+bIH4ItTwKeIgrAySqgN6T78vs/3JjQt mBTWqB6z6ZNNUfnW80+D/JONYxnXndS2UU8z+3eO2mY92hSBV/F4JAv48Px7W/G2 hYaegp1POdjCardZDxn4qe+jm7GgjXVLMQSzHR9nGRDBbeIBTz9DYXZfvZmkmtrx 3CjPWxNW+zf5Bty183bU2cZ4Tb2598X2KNmH7CHT00Ikbj0/PLt2F09gjQNJyVGX xoUi2DIy6u+kKygWVQpxTVJhL119YY2kVKeGNfCYNN1jfvQ1sFiMELTLomMLXSe8 K/6C24mvCSiDarAv0G0jogFLGBjiS8Nr -----END CERTIFICATE-----Generated at Fri Sep 25 21:27:46 2026 by rpki-client