$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa File: 8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa (raw, json) Hash identifier: kEHUMSB+vmvkv6vpJbZgZnohU8XFSp+R/0JjBMLbNWw= Subject key identifier: A9:16:7B:30:CD:0B:23:3C:E7:EB:DC:99:6E:9C:B0:08:9B:63:E4:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497386C3F992CFC75F009880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396603 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:86:c3:f9:92:cf:c7:5f:00:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b739a7ed-c760-4fb3-ab0d-c783c1682b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:8d:34:cd:0d:b9:ed:06:3e:c5:e6:f1:47: d6:f4:b5:96:fc:87:b0:1d:b8:ec:20:af:9e:80:b5: cd:ee:75:66:39:76:9c:c9:d8:09:e0:46:7b:07:34: 7c:63:2f:c9:b2:99:48:48:ee:f2:73:ba:74:32:81: b6:b6:76:f1:6a:a6:49:b1:1b:71:e0:82:d0:fd:87: b1:1e:d7:e1:6c:23:a3:d9:77:b2:0e:54:c7:17:dd: 91:46:e1:b1:2f:63:a8:4d:4e:18:f2:54:21:eb:b6: 2d:02:56:1c:b7:db:1d:06:aa:92:a3:6d:ae:9c:ff: e5:d5:e8:b4:f0:cc:16:5b:15:9e:52:d2:2c:e4:5b: 82:21:8d:27:87:c2:43:ee:5a:30:d7:93:23:88:2e: c6:6b:9b:e2:13:53:76:90:44:56:95:84:2d:c4:cb: a0:26:5f:d2:89:b5:0b:d1:44:69:31:28:76:39:dc: c6:70:93:3a:d3:2e:f9:bd:bd:bd:d5:e2:db:c4:c4: e3:c8:aa:b2:b9:a6:74:25:a2:74:04:35:bb:b9:87: 70:6d:da:cc:79:02:bc:3e:bf:c8:5c:15:fa:8a:2d: 54:f5:ac:a5:68:33:f2:b3:08:ae:03:b6:72:e9:00: 66:83:5c:4e:81:46:0e:86:15:ec:38:55:e4:07:91: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:16:7B:30:CD:0B:23:3C:E7:EB:DC:99:6E:9C:B0:08:9B:63:E4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e1138a1-bd10-3393-85f3-9ffcd1ae5a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:08:8c:55:22:c0:06:e0:eb:07:5c:c3:c7:27:0f:e4:96:ec: 66:00:3f:7d:62:73:15:61:97:21:05:ac:bb:a0:d4:d8:01:3c: cd:5d:40:ec:89:a4:25:f0:6c:7b:36:27:31:8b:e9:ac:d8:78: 81:e3:96:3b:fa:55:0a:e1:8f:7a:2c:2b:e9:e1:11:49:59:0c: 15:13:d1:cb:34:cf:f4:9f:11:d5:c1:ca:11:51:7f:e1:93:2a: 83:d2:49:5f:1f:ea:d9:07:55:fb:57:0f:8f:37:fb:a3:51:7a: 1b:83:bb:a5:54:fa:b2:41:12:1d:64:3b:6a:00:c0:a8:94:99: 9e:ae:0f:3a:d1:ba:b5:6e:71:24:ef:31:49:40:a8:5d:bf:c5: 76:dc:e0:dd:5c:5a:e1:1a:b7:f6:07:8c:0e:2f:e2:94:35:c4: d8:e7:87:22:ee:cd:d0:23:58:84:3b:35:21:b1:f7:8a:d1:c4: 9b:bc:4c:7f:f0:10:d1:4e:b6:49:58:84:30:57:8e:48:13:01: 4e:78:e5:66:6b:07:a3:12:ee:97:9b:bb:10:d9:a8:56:4d:43: 94:bc:ba:6b:3f:7d:19:06:03:aa:dc:df:27:b0:4c:b9:13:a7: 3f:a0:d7:ae:d6:92:4c:47:74:8a:dd:34:c6:b9:1c:fd:92:75: ac:50:49:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4bD+ZLPx18AmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjczOWE3ZWQtYzc2MC00ZmIzLWFiMGQtYzc4M2MxNjgyYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQeNNM0Nue0GPsXm8UfW9LWW/IewHbjsIK+e gLXN7nVmOXacydgJ4EZ7BzR8Yy/JsplISO7yc7p0MoG2tnbxaqZJsRtx4ILQ/Yex HtfhbCOj2XeyDlTHF92RRuGxL2OoTU4Y8lQh67YtAlYct9sdBqqSo22unP/l1ei0 8MwWWxWeUtIs5FuCIY0nh8JD7low15MjiC7Ga5viE1N2kERWlYQtxMugJl/SibUL 0URpMSh2OdzGcJM60y75vb291eLbxMTjyKqyuaZ0JaJ0BDW7uYdwbdrMeQK8Pr/I XBX6ii1U9aylaDPyswiuA7Zy6QBmg1xOgUYOhhXsOFXkB5FHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkWezDNCyM85+vcmW6csAibY+QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUxMTM4YTEtYmQxMC0z MzkzLTg1ZjMtOWZmY2QxYWU1YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUIjFUiwAbg6wdcw8cnD+SW7GYAP31icxVhlyEFrLug1NgBPM1dQOyJ pCXwbHs2JzGL6azYeIHjljv6VQrhj3osK+nhEUlZDBUT0cs0z/SfEdXByhFRf+GT KoPSSV8f6tkHVftXD483+6NRehuDu6VU+rJBEh1kO2oAwKiUmZ6uDzrRurVucSTv MUlAqF2/xXbc4N1cWuEat/YHjA4v4pQ1xNjnhyLuzdAjWIQ7NSGx94rRxJu8TH/w ENFOtklYhDBXjkgTAU545WZrB6MS7pebuxDZqFZNQ5S8ums/fRkGA6rc3yewTLkT pz+g167WkkxHdIrdNMa5HP2SdaxQSWU= -----END CERTIFICATE-----Generated at Sat Sep 26 03:15:57 2026 by rpki-client