$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa File: b1497223-c948-3974-90be-6e423973b2da.roa (raw, json) Hash identifier: QeWAkEIlNFpiYlNh+KqpzCa65rwWjyTGmLQ8s44VpFI= Subject key identifier: EA:89:CB:FF:D7:84:97:F3:6F:86:41:A7:8C:49:A9:F9:9A:C1:C6:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988C1458891461DF19D26D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36628 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:c1:45:88:91:46:1d:f1:9d:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7b143267-9b80-4646-9202-825dd8f2a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:6f:be:16:eb:dd:97:6a:ad:ad:35:40:d3: 9c:24:76:88:bf:76:8a:1f:44:10:09:31:74:d6:4a: bf:d5:51:06:8e:5f:bb:94:83:2a:02:1c:8b:1a:87: 34:30:1f:60:93:c9:3c:40:3e:ee:8a:6c:26:bf:c4: fb:a3:6b:b2:44:d6:c8:24:2b:f0:a7:2f:9a:57:42: 2e:87:db:3a:63:c2:3d:c2:d5:8d:7b:a1:cf:91:3b: 46:39:ae:89:7a:09:d5:dc:7b:51:12:02:d2:cb:f2: 2f:20:2c:ef:ef:c9:49:a7:95:5d:7e:ff:9a:b7:ce: 00:0f:cc:5e:c3:40:c0:4b:64:5e:73:ad:22:b6:5f: 9b:61:a7:e8:cd:30:9c:60:4c:3b:b1:3a:7b:bc:02: 34:1f:2a:51:45:db:77:44:6d:03:e3:42:78:d6:43: 6b:96:59:5d:d3:2e:97:96:94:5f:db:26:bb:ad:9e: 64:df:4c:80:94:87:ed:2b:0a:f6:d7:d3:ba:69:6d: 7a:d4:c2:65:0e:81:3e:a8:51:3c:e2:09:e5:7a:b2: 87:a0:6b:cf:dd:2e:22:fa:19:ea:4a:44:93:95:32: 19:c9:70:36:97:6f:56:69:ce:52:f3:54:ad:b0:a2: 1f:a5:c6:6e:c3:0d:77:b0:4d:eb:93:56:b5:3c:c1: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:89:CB:FF:D7:84:97:F3:6F:86:41:A7:8C:49:A9:F9:9A:C1:C6:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b1497223-c948-3974-90be-6e423973b2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c3:31:2b:09:23:08:1f:60:29:e8:47:be:2e:67:fe:9c:22: db:d4:c6:f5:29:d3:cc:e7:0c:17:70:da:87:2d:12:de:0d:b9: 8f:9a:60:c4:5a:ef:83:f9:72:fe:77:a8:22:cc:72:2c:ee:95: 24:34:2f:39:39:f9:ec:36:c4:fc:ce:9c:b3:e1:41:ba:e7:2b: ec:b7:7a:e0:12:57:9d:ee:ee:1e:1c:55:1c:13:c6:8e:06:ee: 8c:dd:d4:76:e1:30:a2:fd:f7:21:5c:b7:a1:8e:0b:af:9b:3d: 51:8a:1c:92:f3:b2:2e:5f:1b:26:b5:40:75:54:40:86:11:0b: f8:17:29:a1:46:84:a2:80:0f:10:9d:f5:0f:c7:93:ed:87:c1: 21:85:23:c8:ea:82:79:d1:ba:c7:77:3e:aa:86:6b:94:9f:12: 18:a2:17:5f:96:bd:7d:f1:4a:6c:5d:6c:22:03:93:6c:27:12: b0:c1:9e:69:53:34:66:e5:a6:6e:53:db:b8:7b:87:36:57:95: a8:83:df:6d:92:b2:6c:20:1b:f3:5e:00:a1:10:45:a8:80:94: ff:d8:ba:50:e4:b1:a2:e1:9b:5e:a6:a5:be:7f:30:f7:6c:4e: 16:09:69:4f:0b:b8:c2:b4:bf:9c:8d:52:d8:fa:cc:b8:75:c1: 3c:e1:21:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiMFFiJFGHfGdJtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2IxNDMyNjctOWI4MC00NjQ2LTkyMDItODI1ZGQ4ZjJhNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp1vvhbr3Zdqra01QNOcJHaIv3aKH0QQCTF0 1kq/1VEGjl+7lIMqAhyLGoc0MB9gk8k8QD7uimwmv8T7o2uyRNbIJCvwpy+aV0Iu h9s6Y8I9wtWNe6HPkTtGOa6JegnV3HtREgLSy/IvICzv78lJp5Vdfv+at84AD8xe w0DAS2Rec60itl+bYafozTCcYEw7sTp7vAI0HypRRdt3RG0D40J41kNrllld0y6X lpRf2ya7rZ5k30yAlIftKwr219O6aW161MJlDoE+qFE84gnlerKHoGvP3S4i+hnq SkSTlTIZyXA2l29Wac5S81StsKIfpcZuww13sE3rk1a1PMGm+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOqJy//XhJfzb4ZBp4xJqfmawcbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjE0OTcyMjMtYzk0OC0z OTc0LTkwYmUtNmU0MjM5NzNiMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0wzErCSMIH2Ap6Ee+Lmf+nCLb1Mb1KdPM5wwXcNqHLRLeDbmPmmDE Wu+D+XL+d6gizHIs7pUkNC85OfnsNsT8zpyz4UG65yvst3rgEled7u4eHFUcE8aO Bu6M3dR24TCi/fchXLehjguvmz1RihyS87IuXxsmtUB1VECGEQv4FymhRoSigA8Q nfUPx5Pth8EhhSPI6oJ50brHdz6qhmuUnxIYohdflr198UpsXWwiA5NsJxKwwZ5p UzRm5aZuU9u4e4c2V5Wog99tkrJsIBvzXgChEEWogJT/2LpQ5LGi4ZtepqW+fzD3 bE4WCWlPC7jCtL+cjVLY+sy4dcE84SHd -----END CERTIFICATE-----Generated at Sun Sep 27 07:05:45 2026 by rpki-client