$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa File: 9d19bf96-c01d-3102-8066-d9ae826a6e76.roa (raw, json) Hash identifier: 8MoDEn9ZuwKxj/PX1W/5nxB7a6v9uBFgUfids2tRJXQ= Subject key identifier: 8E:B3:E5:62:CC:E8:BF:84:8D:8F:94:C0:06:10:39:E1:8C:84:13:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989E7D1AC319925C072AD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396600 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:e7:d1:ac:31:99:25:c0:72:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b97bbd8c-07cd-487e-a890-131a2435d717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:c1:b9:7c:43:1f:9f:84:9f:49:d0:75:27: c0:04:89:64:2b:b6:e3:11:d3:f8:73:94:68:3f:a5: 9a:1c:35:14:0e:cb:2e:cc:ec:45:96:d0:b8:1f:fa: 66:4a:c3:3b:cb:10:bd:f3:4e:97:50:62:6b:65:a0: b5:9f:55:74:82:dc:f1:d7:09:ea:bb:2f:ec:5d:97: 54:5b:7d:ee:86:0c:57:e4:9c:85:1d:92:23:71:3f: 61:00:18:dc:71:7d:79:88:ec:51:fc:51:9a:70:a6: 0c:14:99:67:d8:19:56:e3:24:5f:77:4f:52:50:f3: 20:a3:62:0a:0b:3f:c3:6b:0c:46:b2:34:a5:86:b2: 4e:58:3e:c8:5b:2e:4c:bc:42:bf:ee:7a:2d:e1:35: ef:73:90:ff:04:a6:78:55:60:07:99:e7:3c:a7:3e: 9b:2a:a7:84:0a:67:11:34:f9:81:fc:fa:21:e4:e3: c7:be:81:57:cf:be:ed:e4:b3:5c:ec:85:c2:5f:b7: bc:5e:31:b9:ff:3f:04:72:ff:5b:84:6c:16:d3:7a: 30:84:3e:b5:00:b4:96:76:5d:bc:dd:a8:16:2a:0c: a1:9a:b2:ba:a6:5a:14:20:f7:70:5b:11:db:55:34: 69:61:dc:41:b6:28:2b:3b:96:82:83:cc:7b:1c:79: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B3:E5:62:CC:E8:BF:84:8D:8F:94:C0:06:10:39:E1:8C:84:13:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d19bf96-c01d-3102-8066-d9ae826a6e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:60:79:62:7f:77:2d:c3:73:b5:49:15:ee:11:5d:4f:0d:85: 83:2e:62:43:be:4e:97:01:57:e0:07:28:6a:6a:1f:6b:2f:b0: 64:16:02:32:86:f3:87:39:42:1e:c7:ed:fe:99:5d:3e:35:41: e7:93:b7:4c:9d:fa:db:57:0d:cb:28:b7:1d:72:17:d7:6a:99: ff:74:6f:09:43:39:4b:4c:5e:bc:64:36:3b:d2:73:44:77:29: 03:85:8d:df:bf:af:86:67:0c:d0:c0:4e:64:95:72:c6:83:fe: 04:75:34:46:0e:5e:18:28:fc:ae:c1:23:16:58:25:17:4f:a5: 2e:35:9e:d8:12:fa:ed:d7:4b:26:d9:11:cf:e7:50:c5:95:02: 1a:49:77:e5:aa:82:9e:d4:0b:d1:ee:45:c9:a6:27:f2:89:47: 04:3e:f6:39:68:75:75:c5:75:81:5a:84:f0:ba:0f:83:4c:14: ed:a2:95:66:7f:fa:fa:4f:e7:f0:69:3c:82:ad:1b:6f:ba:5b: 85:04:95:29:4e:4b:48:30:8c:25:71:62:85:46:f4:6b:d7:8e: 2c:71:dc:3c:71:f9:8b:d3:6c:37:e9:17:35:53:1d:01:e0:1c: d4:e0:7f:ac:32:23:b9:33:22:3c:fe:69:bb:3b:26:6f:93:7a: ae:25:45:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiefRrDGZJcByrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk3YmJkOGMtMDdjZC00ODdlLWE4OTAtMTMxYTI0MzVkNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/DBuXxDH5+En0nQdSfABIlkK7bjEdP4c5Ro P6WaHDUUDssuzOxFltC4H/pmSsM7yxC9806XUGJrZaC1n1V0gtzx1wnquy/sXZdU W33uhgxX5JyFHZIjcT9hABjccX15iOxR/FGacKYMFJln2BlW4yRfd09SUPMgo2IK Cz/DawxGsjSlhrJOWD7IWy5MvEK/7not4TXvc5D/BKZ4VWAHmec8pz6bKqeECmcR NPmB/Poh5OPHvoFXz77t5LNc7IXCX7e8XjG5/z8Ecv9bhGwW03owhD61ALSWdl28 3agWKgyhmrK6ploUIPdwWxHbVTRpYdxBtigrO5aCg8x7HHl9ewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI6z5WLM6L+EjY+UwAYQOeGMhBPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQxOWJmOTYtYzAxZC0z MTAyLTgwNjYtZDlhZTgyNmE2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASYHlif3ctw3O1SRXuEV1PDYWDLmJDvk6XAVfgByhqah9rL7BkFgIy hvOHOUIex+3+mV0+NUHnk7dMnfrbVw3LKLcdchfXapn/dG8JQzlLTF68ZDY70nNE dykDhY3fv6+GZwzQwE5klXLGg/4EdTRGDl4YKPyuwSMWWCUXT6UuNZ7YEvrt10sm 2RHP51DFlQIaSXflqoKe1AvR7kXJpifyiUcEPvY5aHV1xXWBWoTwug+DTBTtopVm f/r6T+fwaTyCrRtvuluFBJUpTktIMIwlcWKFRvRr144scdw8cfmL02w36Rc1Ux0B 4BzU4H+sMiO5MyI8/mm7OyZvk3quJUWx -----END CERTIFICATE-----Generated at Sun Sep 27 09:54:14 2026 by rpki-client