$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa File: b942e58f-d211-36ad-886c-6c16451f8f09.roa (raw, json) Hash identifier: b8CjG9ykncFZs6qailXHp2VBupXKHtNAwoweLSnJPz4= Subject key identifier: 2E:3B:AB:78:E3:E9:C8:CD:77:38:FC:FB:AD:A7:A7:6A:EC:EC:BC:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972B61EC1D101DE608F4380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397210 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b6:1e:c1:d1:01:de:60:8f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41f4ab38-2a77-40d6-b2f8-9d1c5b24d0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:83:14:6b:9f:38:00:36:ea:3a:a0:c9:a2: bd:1d:e9:0b:44:dc:bf:bd:10:50:40:0f:b4:27:9e: 8a:00:d5:31:b4:79:c7:98:a0:ed:a9:3b:f9:9a:cc: 73:25:89:8b:4b:d5:60:58:e2:84:c4:79:6a:b3:b8: 82:29:ae:30:b6:4d:cc:52:ba:c5:c5:59:13:61:25: 69:81:e6:60:91:09:b5:c6:eb:b2:ac:08:a5:7f:11: c6:19:18:29:42:a6:0e:1c:e2:21:18:af:25:06:31: 07:3d:8c:0c:b8:c8:2d:e0:b5:7d:2b:09:5d:93:b6: 93:63:43:a2:df:ce:50:4f:65:d0:49:1c:da:ca:64: 23:71:ba:27:dc:2b:e5:23:77:c0:51:36:c7:75:e7: ec:3e:76:75:b3:d6:10:07:95:8a:7f:09:09:0d:5e: 9f:15:75:2f:4c:85:66:30:62:a1:60:83:62:e5:3f: 3f:f0:dc:7a:60:b0:d1:bd:27:c7:ca:60:88:04:35: 90:b0:ae:0c:c2:f3:5b:6c:72:93:9b:08:f2:1a:8e: c0:6b:32:1b:93:0b:31:b1:9d:53:2d:aa:40:e9:01: 55:a0:39:06:70:eb:2a:66:34:65:2e:2e:de:04:67: c0:4a:07:c7:ef:5c:65:2a:85:ae:0c:d7:0d:e6:a6: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3B:AB:78:E3:E9:C8:CD:77:38:FC:FB:AD:A7:A7:6A:EC:EC:BC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:65:80:b4:4f:1f:ec:5d:98:a7:f6:63:a8:bf:69:26:aa:1e: 71:50:72:e8:81:12:83:4a:f9:17:cb:06:00:1b:1b:ea:89:23: f7:6b:f2:dd:b8:e3:92:bc:dc:f0:af:1f:34:db:df:30:89:4f: 3d:f2:05:30:4e:1b:49:c2:2c:79:f0:05:2c:08:02:3f:f0:f6: 65:79:b5:a1:4b:7a:bc:64:e6:68:66:36:b9:70:88:99:5e:0e: 00:f4:0b:44:11:1f:a4:07:bd:f8:eb:63:a8:a1:18:c1:2a:89: 08:3e:59:5e:49:e9:e6:42:5f:a5:10:50:1c:4a:d6:88:0e:2e: b9:4e:8f:d9:51:70:db:49:0b:da:a8:3c:ae:10:d9:01:90:ce: ab:48:cf:d7:0f:d3:b2:5c:1e:07:49:2a:0f:e6:3f:82:74:11: 0f:3f:68:bf:86:c7:c0:1f:7d:90:a6:58:13:5b:ee:95:94:89: b5:90:c2:28:06:7b:99:cc:65:5e:9d:ff:37:ed:b9:6e:8e:1b: 27:82:5e:a2:ab:1b:4e:7e:50:f3:30:0e:f7:68:82:e9:86:4a: 30:09:37:19:0f:94:94:cf:84:b3:89:a5:cb:57:32:5f:9a:0b: 08:f1:eb:3d:1c:13:70:bb:bf:16:fd:61:c5:d6:a8:5f:c7:3b: b6:b4:12:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrYewdEB3mCPQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDFmNGFiMzgtMmE3Ny00MGQ2LWIyZjgtOWQxYzViMjRkMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrODFGufOAA26jqgyaK9HekLRNy/vRBQQA+0 J56KANUxtHnHmKDtqTv5msxzJYmLS9VgWOKExHlqs7iCKa4wtk3MUrrFxVkTYSVp geZgkQm1xuuyrAilfxHGGRgpQqYOHOIhGK8lBjEHPYwMuMgt4LV9Kwldk7aTY0Oi 385QT2XQSRzaymQjcbon3CvlI3fAUTbHdefsPnZ1s9YQB5WKfwkJDV6fFXUvTIVm MGKhYINi5T8/8Nx6YLDRvSfHymCIBDWQsK4MwvNbbHKTmwjyGo7AazIbkwsxsZ1T LapA6QFVoDkGcOsqZjRlLi7eBGfASgfH71xlKoWuDNcN5qbrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC47q3jj6cjNdzj8+62np2rs7LyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk0MmU1OGYtZDIxMS0z NmFkLTg4NmMtNmMxNjQ1MWY4ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNlgLRPH+xdmKf2Y6i/aSaqHnFQcuiBEoNK+RfLBgAbG+qJI/dr8t24 45K83PCvHzTb3zCJTz3yBTBOG0nCLHnwBSwIAj/w9mV5taFLerxk5mhmNrlwiJle DgD0C0QRH6QHvfjrY6ihGMEqiQg+WV5J6eZCX6UQUBxK1ogOLrlOj9lRcNtJC9qo PK4Q2QGQzqtIz9cP07JcHgdJKg/mP4J0EQ8/aL+Gx8AffZCmWBNb7pWUibWQwigG e5nMZV6d/zftuW6OGyeCXqKrG05+UPMwDvdogumGSjAJNxkPlJTPhLOJpctXMl+a Cwjx6z0cE3C7vxb9YcXWqF/HO7a0Ei4= -----END CERTIFICATE-----Generated at Sat Sep 26 18:46:46 2026 by rpki-client