$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa File: 961a3609-d1f9-3024-912e-654f43f10735.roa (raw, json) Hash identifier: vViotGIocRMfF4DKHaSOnrf/8zjpko2NZTSx3CyXT+Y= Subject key identifier: 50:23:A3:94:CF:0D:78:A8:94:3E:1B:9F:2B:9A:F9:E9:77:50:C4:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988738BB78A345654124FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396603 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:73:8b:b7:8a:34:56:54:12:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=015b288c-1d5a-43a9-bd3b-6d5f6a8c6dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:56:4d:ad:3a:27:30:71:bc:a7:37:98:60: 96:d2:75:2a:ff:31:b7:cf:5e:89:f4:e6:31:a6:77: b1:c9:de:96:ec:93:c9:fc:cc:1c:ab:db:87:79:11: 3c:82:a9:32:a1:af:4f:11:38:30:ae:bb:63:f9:5b: 5e:7b:cb:31:3c:c2:1e:75:a1:2f:c6:99:f8:fa:d9: bd:f1:ea:ea:53:3d:aa:08:87:cb:d3:2f:30:36:f2: e2:18:3b:2f:c5:e6:1b:76:d9:57:84:58:10:54:91: ea:79:e3:b9:2d:31:95:44:61:2d:4e:0d:3a:67:07: 94:f0:19:37:65:21:de:b8:44:c9:9a:b0:7f:db:95: c1:ec:f3:2f:bc:de:64:df:5d:3a:29:a8:5c:02:58: fb:fd:c5:bf:c9:ac:a5:57:49:b2:e5:8a:ae:9e:88: 58:24:46:38:cb:63:9f:72:f0:4c:71:6b:d3:53:d7: 85:24:0b:e4:ba:bc:49:4e:e3:b2:fc:b1:fe:0b:44: 6c:25:78:99:0b:08:8a:5a:2e:5d:a8:82:72:64:6b: fd:87:21:29:3d:11:f5:a1:a3:a3:1f:bd:68:b3:1b: 27:1d:15:9a:fd:7c:70:9a:fb:1f:46:6b:46:00:6b: 24:8a:57:6f:a2:74:b4:b9:95:f5:63:34:20:ad:cb: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:23:A3:94:CF:0D:78:A8:94:3E:1B:9F:2B:9A:F9:E9:77:50:C4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/961a3609-d1f9-3024-912e-654f43f10735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:73:22:26:f1:4b:1e:a6:57:aa:cc:96:ce:56:56:35:22:a3: bc:19:34:59:1a:75:96:a1:6a:12:75:97:49:d6:20:58:04:4c: a7:ea:7b:90:a1:88:dd:cc:1d:92:39:f5:94:1d:9d:84:7c:23: 59:ee:1f:a5:2c:35:4e:b7:ef:33:16:bd:6d:02:40:13:80:46: ed:87:ab:5e:d2:b4:9d:62:aa:6d:b2:43:b7:7f:39:61:2c:9f: 64:ba:24:56:35:6c:4c:1c:ff:fb:8e:f6:8b:5d:5a:00:35:a1: ce:3d:b4:0a:32:7d:34:16:78:ce:59:3b:a7:1e:8a:3a:c8:3c: 32:77:5a:50:5c:3d:4a:a6:4e:d5:e9:fd:e3:d4:d0:14:9e:4d: 66:16:aa:e7:ce:cb:59:21:de:34:b3:6a:d6:b0:2d:a3:0b:a0: c9:1a:3c:2b:cc:e0:0b:ad:0e:d8:0e:13:01:77:7b:2e:8f:7a: e6:c0:27:74:b3:e4:3d:b4:2e:d0:f2:55:24:90:5f:2b:0b:10: 07:3f:98:13:86:74:09:30:8c:1b:56:0b:5c:74:51:e8:50:24: 5b:fa:a7:ac:28:db:60:27:66:44:16:be:b3:2b:ad:c2:d0:e6: 76:af:8c:05:e2:da:25:fd:97:1d:a9:e6:41:22:a6:04:11:4c: b8:28:19:c7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiHOLt4o0VlQST8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDE1YjI4OGMtMWQ1YS00M2E5LWJkM2ItNmQ1ZjZhOGM2ZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRhWTa06JzBxvKc3mGCW0nUq/zG3z16J9OYx pnexyd6W7JPJ/Mwcq9uHeRE8gqkyoa9PETgwrrtj+Vtee8sxPMIedaEvxpn4+tm9 8erqUz2qCIfL0y8wNvLiGDsvxeYbdtlXhFgQVJHqeeO5LTGVRGEtTg06ZweU8Bk3 ZSHeuETJmrB/25XB7PMvvN5k3106KahcAlj7/cW/yaylV0my5YqunohYJEY4y2Of cvBMcWvTU9eFJAvkurxJTuOy/LH+C0RsJXiZCwiKWi5dqIJyZGv9hyEpPRH1oaOj H71osxsnHRWa/XxwmvsfRmtGAGskildvonS0uZX1YzQgrcuj5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFAjo5TPDXiolD4bnyua+el3UMQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTYxYTM2MDktZDFmOS0z MDI0LTkxMmUtNjU0ZjQzZjEwNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqcyIm8UsepleqzJbOVlY1IqO8GTRZGnWWoWoSdZdJ1iBYBEyn6nuQ oYjdzB2SOfWUHZ2EfCNZ7h+lLDVOt+8zFr1tAkATgEbth6te0rSdYqptskO3fzlh LJ9kuiRWNWxMHP/7jvaLXVoANaHOPbQKMn00FnjOWTunHoo6yDwyd1pQXD1Kpk7V 6f3j1NAUnk1mFqrnzstZId40s2rWsC2jC6DJGjwrzOALrQ7YDhMBd3suj3rmwCd0 s+Q9tC7Q8lUkkF8rCxAHP5gThnQJMIwbVgtcdFHoUCRb+qesKNtgJ2ZEFr6zK63C 0OZ2r4wF4tol/ZcdqeZBIqYEEUy4KBnH -----END CERTIFICATE-----Generated at Sat Sep 26 22:22:44 2026 by rpki-client