$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa File: 9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa (raw, json) Hash identifier: VaN00rX8EKaN0aatg7BhUIAq5Gp2FRVE9k9jbficZ4k= Subject key identifier: B3:76:85:88:1F:A3:9C:D1:E5:C3:62:A8:71:34:16:8F:27:43:B2:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988482D840B376749F91680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397209 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:48:2d:84:0b:37:67:49:f9:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=363b3ed1-c836-4828-97ea-06d58f8bf684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:91:38:74:bb:e3:90:a0:25:6f:8e:84:d7: 29:85:c7:f1:c4:68:bc:7d:10:57:ce:94:8b:e9:36: d6:e4:2f:dc:d1:88:1b:f4:d3:31:23:d2:c8:71:12: 97:aa:f6:56:8a:89:1d:aa:c0:4c:40:34:ce:9b:60: c1:b5:1e:46:f0:af:c4:71:5d:00:c0:e2:95:64:64: 71:14:9e:b9:f3:0a:2b:a3:bf:f2:5a:56:9a:61:ea: e7:9d:b6:ac:b3:f7:13:ba:f3:68:a1:22:41:17:d6: 2e:90:13:c7:7c:b8:77:1c:5f:4e:51:32:b7:f9:ec: 13:aa:7d:ed:01:72:33:96:11:bf:96:83:a2:55:d9: 3d:22:23:20:95:c2:95:cd:38:94:d8:3b:db:60:83: b3:84:9a:69:d9:4f:94:81:65:8b:62:cf:8f:3f:7f: 11:11:db:4e:dc:a6:f8:cc:26:b2:ce:b2:b4:71:6b: 21:3b:4a:ee:10:8e:e1:55:45:b4:a5:2b:45:6a:b4: d7:13:70:4c:97:b6:88:5b:7d:8e:32:79:bb:55:97: dd:55:08:3b:a1:81:1f:b3:aa:eb:42:7c:53:b7:8c: f0:68:6b:fb:2a:1f:14:12:10:11:07:92:b5:9b:65: 6e:95:df:91:3e:80:33:1d:ba:2c:47:fc:e9:3c:90: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:76:85:88:1F:A3:9C:D1:E5:C3:62:A8:71:34:16:8F:27:43:B2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b5689a5-1ca4-329e-a156-00c4b82d99c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:38:83:e2:66:87:e4:0a:6c:91:c5:52:20:e4:a7:fd:9a:21: 61:62:fd:08:27:28:e7:04:69:6b:d3:85:9c:d3:d3:f6:a2:6a: 52:8b:c9:30:04:1f:eb:d7:95:18:e8:1c:4a:1f:c0:2b:ec:08: c7:61:27:7f:ee:3a:7e:f1:6f:9d:14:a7:c9:ce:52:9c:a9:00: d8:07:7c:5b:44:5f:d6:e5:af:d9:9a:d6:53:01:6e:54:d5:16: 97:0f:42:cc:af:a8:b0:39:ab:3b:67:73:d5:e9:53:4c:fd:dc: 16:55:0c:73:3c:83:a9:70:30:74:4a:c6:48:6e:56:ec:56:59: 96:85:0f:bb:a9:8c:6d:b5:41:cc:2d:b1:2e:f3:30:1f:e1:57: 64:cc:e2:03:74:48:d7:5b:e9:b5:c3:5a:a5:38:f0:c8:28:16: e2:07:f3:81:f2:19:22:58:57:83:8a:a9:47:1d:a2:dc:dc:e7: 0a:3a:aa:bf:f0:48:5a:5f:05:b0:07:ff:86:2f:13:28:48:6b: 8b:75:06:59:bc:42:ab:f9:b5:b4:7b:41:b7:f7:b6:7b:e1:18: e0:d8:a5:a9:e2:c7:83:e1:80:e7:ac:25:af:18:bb:6a:81:a9: 95:86:04:44:50:e6:82:8c:ff:77:16:11:5a:9f:33:8b:05:50: 11:1d:83:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEgthAs3Z0n5FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzYzYjNlZDEtYzgzNi00ODI4LTk3ZWEtMDZkNThmOGJmNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYWROHS745CgJW+OhNcphcfxxGi8fRBXzpSL 6TbW5C/c0Ygb9NMxI9LIcRKXqvZWiokdqsBMQDTOm2DBtR5G8K/EcV0AwOKVZGRx FJ658woro7/yWlaaYernnbass/cTuvNooSJBF9YukBPHfLh3HF9OUTK3+ewTqn3t AXIzlhG/loOiVdk9IiMglcKVzTiU2DvbYIOzhJpp2U+UgWWLYs+PP38REdtO3Kb4 zCayzrK0cWshO0ruEI7hVUW0pStFarTXE3BMl7aIW32OMnm7VZfdVQg7oYEfs6rr QnxTt4zwaGv7Kh8UEhARB5K1m2Vuld+RPoAzHbosR/zpPJCWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN2hYgfo5zR5cNiqHE0Fo8nQ7LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI1Njg5YTUtMWNhNC0z MjllLWExNTYtMDBjNGI4MmQ5OWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC84g+Jmh+QKbJHFUiDkp/2aIWFi/QgnKOcEaWvThZzT0/aialKLyTAE H+vXlRjoHEofwCvsCMdhJ3/uOn7xb50Up8nOUpypANgHfFtEX9blr9ma1lMBblTV FpcPQsyvqLA5qztnc9XpU0z93BZVDHM8g6lwMHRKxkhuVuxWWZaFD7upjG21Qcwt sS7zMB/hV2TM4gN0SNdb6bXDWqU48MgoFuIH84HyGSJYV4OKqUcdotzc5wo6qr/w SFpfBbAH/4YvEyhIa4t1Blm8Qqv5tbR7Qbf3tnvhGODYpanix4PhgOesJa8Yu2qB qZWGBERQ5oKM/3cWEVqfM4sFUBEdg/I= -----END CERTIFICATE-----Generated at Sat Sep 26 04:40:46 2026 by rpki-client