$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa File: affea73b-0180-3ae1-b688-f6f004b73e14.roa (raw, json) Hash identifier: l8hVSi/GlGHHT63dAsu1CelyfFclJbDpLhjuQsUnjCc= Subject key identifier: 6B:9A:B9:A9:75:38:F6:41:3A:D3:EC:AE:6D:54:47:BA:7C:A6:F5:5F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B90D38629E1FA57BED400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396593 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:90:d3:86:29:e1:fa:57:be:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e660162-5045-4638-b43c-6812304bef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f5:84:54:5d:af:7d:be:94:6e:ce:26:b7:02: 61:5b:cf:e5:d5:e2:28:5c:dc:fd:62:d6:d7:a2:5a: 4d:ef:31:7f:82:50:a3:46:fe:a4:8d:89:e3:77:8f: e7:d1:b3:b8:da:42:fe:1d:82:26:01:f4:7b:2f:76: af:64:dc:eb:3a:07:95:98:0e:81:c3:d3:03:10:30: 3f:4e:4f:97:39:e5:61:6e:9a:a0:be:87:c7:a4:bc: 4b:98:e5:3e:87:63:7a:a1:b3:14:01:4e:1d:89:57: 82:91:c3:87:c2:d8:b3:bf:6e:6a:6b:b1:09:14:74: 14:69:88:55:c4:85:53:32:55:16:1b:90:d8:10:6c: 81:06:bc:3d:51:c7:66:be:7e:7d:3c:5a:6e:c1:53: b5:92:79:66:c7:e7:d6:b6:c0:4f:46:bc:04:46:61: 0a:8d:2f:b7:b6:93:cb:ba:e2:2b:dd:31:cc:7f:3e: 53:c6:12:db:0f:39:53:d2:54:a2:ad:d7:f3:d8:9d: ee:40:bf:24:9a:65:96:f6:6d:1b:e7:f3:14:cf:2c: 6e:05:3d:03:ab:ae:3e:91:96:b6:65:ec:e7:27:b2: ce:2b:ca:2b:56:ac:fe:6c:29:95:b7:77:25:a0:06: 46:f6:3f:5c:8f:f5:c0:ea:4b:c1:8b:47:c0:29:05: 1d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9A:B9:A9:75:38:F6:41:3A:D3:EC:AE:6D:54:47:BA:7C:A6:F5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:39:b8:e0:86:c9:18:85:39:a0:34:56:87:d7:3d:16:6c:c7: f0:29:c0:d5:ea:e8:93:ad:11:56:d8:95:0d:91:c9:b3:68:c0: 89:f5:22:68:11:e6:59:f3:f7:1e:b2:ab:39:88:8a:2a:2b:cb: ae:25:6a:12:19:24:dd:3e:59:35:c9:1e:af:77:6f:d9:fc:cf: e2:70:6a:49:8b:3a:0c:7a:a3:96:a8:9e:e4:b9:49:53:51:85: 73:5a:8a:bf:b5:49:c4:a8:34:6a:6f:bb:79:2a:0f:20:76:16: e6:58:96:48:72:e6:a7:ee:21:4e:91:15:a6:7c:97:b9:17:e2: e1:a6:54:89:2d:d9:63:29:a7:72:ac:ed:8a:44:04:3d:4d:89: cd:f3:6c:cc:c4:35:61:df:24:f6:42:ab:4f:c9:0e:62:a4:90: 7e:25:ea:64:40:c3:d7:18:49:03:d3:b0:a0:ac:39:59:31:91: b1:86:0a:9a:c7:38:0d:b7:af:7a:80:23:88:e6:24:6e:9d:51: 28:ab:55:8a:af:2b:00:64:a2:d8:cf:4e:5f:79:b6:9a:a8:a5: 6c:34:2c:b1:63:2a:9a:cd:04:d2:15:fe:e1:41:58:fb:bd:43: 8e:e6:03:a6:96:f5:58:e8:db:5f:4d:07:1a:05:48:7a:72:6e: 54:7e:66:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji5DThinh+le+1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U2NjAxNjItNTA0NS00NjM4LWI0M2MtNjgxMjMwNGJlZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfWEVF2vfb6Ubs4mtwJhW8/l1eIoXNz9YtbX olpN7zF/glCjRv6kjYnjd4/n0bO42kL+HYImAfR7L3avZNzrOgeVmA6Bw9MDEDA/ Tk+XOeVhbpqgvofHpLxLmOU+h2N6obMUAU4diVeCkcOHwtizv25qa7EJFHQUaYhV xIVTMlUWG5DYEGyBBrw9Ucdmvn59PFpuwVO1knlmx+fWtsBPRrwERmEKjS+3tpPL uuIr3THMfz5TxhLbDzlT0lSirdfz2J3uQL8kmmWW9m0b5/MUzyxuBT0Dq64+kZa2 ZeznJ7LOK8orVqz+bCmVt3cloAZG9j9cj/XA6kvBi0fAKQUd0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGuaual1OPZBOtPsrm1UR7p8pvVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmZWE3M2ItMDE4MC0z YWUxLWI2ODgtZjZmMDA0YjczZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFObjghskYhTmgNFaH1z0WbMfwKcDV6uiTrRFW2JUNkcmzaMCJ9SJo EeZZ8/cesqs5iIoqK8uuJWoSGSTdPlk1yR6vd2/Z/M/icGpJizoMeqOWqJ7kuUlT UYVzWoq/tUnEqDRqb7t5Kg8gdhbmWJZIcuan7iFOkRWmfJe5F+LhplSJLdljKady rO2KRAQ9TYnN82zMxDVh3yT2QqtPyQ5ipJB+JepkQMPXGEkD07CgrDlZMZGxhgqa xzgNt696gCOI5iRunVEoq1WKrysAZKLYz05febaaqKVsNCyxYyqazQTSFf7hQVj7 vUOO5gOmlvVY6NtfTQcaBUh6cm5UfmYf -----END CERTIFICATE-----Generated at Mon Sep 28 02:55:44 2026 by rpki-client