$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa File: b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa (raw, json) Hash identifier: QOSfNGBnpvnOJmbLBk+qhc8ajpPxi7ncZhWb00lUyI4= Subject key identifier: CB:CD:12:41:AD:89:36:09:64:E1:44:3C:AB:4E:0D:CD:D9:5E:64:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49729D1D17DBBD9146809880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:9d:1d:17:db:bd:91:46:80:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67de9e80-acdf-4193-b93b-679881b1c619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:c5:f5:8c:31:89:b6:82:4c:d1:7d:3b:1a: 8a:f4:c9:94:7d:e3:63:a4:05:89:88:9c:ad:0b:e4: bd:63:7a:fc:b7:02:a1:10:74:60:73:82:24:5b:bd: 92:5a:96:f7:d1:27:3b:42:29:a0:eb:58:ef:b9:27: 55:d8:b5:27:93:23:d2:1d:cc:d6:9d:d7:ff:58:0d: 38:96:a8:87:25:fe:b8:f8:e3:3c:50:22:1a:f9:91: e3:9b:c7:8e:8a:00:4c:71:55:8e:80:7d:32:77:94: e1:2a:00:4d:cd:37:15:a2:25:5f:2f:34:6e:6f:a7: 78:34:e7:b8:cd:7f:cb:47:0e:75:e1:26:61:cd:b1: 02:69:ab:b3:34:8b:33:83:64:64:56:76:7c:51:11: 68:24:b4:aa:f1:13:b2:57:e6:d4:3b:1b:c5:aa:52: c0:9e:58:db:68:e2:fc:5c:38:31:ea:a6:62:81:a5: 27:72:38:64:50:50:19:ff:dc:f0:41:60:ac:f3:1c: b2:f3:e1:8b:f7:ca:c5:a0:75:26:a1:ce:17:94:d7: c2:86:91:d9:de:f5:2d:a4:ac:23:20:ce:df:14:31: bd:1b:f6:e2:45:bc:f9:ce:4e:27:7e:03:09:6c:ce: f3:c8:8c:d6:df:e9:ac:06:da:9f:4f:1a:a0:ea:99: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CD:12:41:AD:89:36:09:64:E1:44:3C:AB:4E:0D:CD:D9:5E:64:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c2620d-ad7d-3df8-9358-88b0cdf05f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:04:78:b8:87:75:b7:16:37:0d:bf:a3:18:25:09:d9:f1:0b: 9d:3a:44:45:5f:2a:ac:91:23:9f:a5:7c:ac:31:59:70:6b:11: aa:df:a4:4c:e4:ce:b8:e8:37:2b:36:03:ab:65:12:d4:55:e3: ab:4c:c1:f6:45:cc:b3:da:6e:54:7d:21:9d:01:d4:c1:cf:e9: 2b:91:fe:aa:90:7b:78:1e:c5:37:ac:aa:8d:a7:64:e2:ea:9d: c6:8c:66:bd:67:14:46:b4:5c:4e:e3:3f:84:90:55:82:e0:e8: 46:30:8d:58:4f:dd:4a:01:5d:93:d4:05:21:f7:b5:6d:05:c7: a3:93:8b:e7:8a:84:a2:f1:4f:02:b3:d2:ba:fc:38:37:85:15: 02:a6:67:3f:70:f5:bc:22:db:2f:fe:7d:7c:4e:96:d6:52:fa: f8:36:e8:8f:56:57:3b:ad:29:18:c6:1f:4b:42:c7:d6:db:e0: 71:9a:99:e4:f8:3b:90:33:54:45:cc:ba:7a:c0:bf:4a:cd:c8: 91:42:62:5f:74:f5:b7:ad:e5:38:26:ee:b4:a2:29:d3:d7:b2: 1b:bf:ba:27:e7:b4:73:04:5d:69:27:ed:e8:c8:f1:8d:8f:e7: b4:68:25:b7:9f:d2:7a:57:cf:54:ee:73:bc:e7:8d:d5:a9:37: b3:66:85:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jcp0dF9u9kUaAmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdkZTllODAtYWNkZi00MTkzLWI5M2ItNjc5ODgxYjFjNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJDF9YwxibaCTNF9OxqK9MmUfeNjpAWJiJyt C+S9Y3r8twKhEHRgc4IkW72SWpb30Sc7Qimg61jvuSdV2LUnkyPSHczWndf/WA04 lqiHJf64+OM8UCIa+ZHjm8eOigBMcVWOgH0yd5ThKgBNzTcVoiVfLzRub6d4NOe4 zX/LRw514SZhzbECaauzNIszg2RkVnZ8URFoJLSq8ROyV+bUOxvFqlLAnljbaOL8 XDgx6qZigaUncjhkUFAZ/9zwQWCs8xyy8+GL98rFoHUmoc4XlNfChpHZ3vUtpKwj IM7fFDG9G/biRbz5zk4nfgMJbM7zyIzW3+msBtqfTxqg6pnzbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMvNEkGtiTYJZOFEPKtODc3ZXmRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjljMjYyMGQtYWQ3ZC0z ZGY4LTkzNTgtODhiMGNkZjA1ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRBHi4h3W3FjcNv6MYJQnZ8QudOkRFXyqskSOfpXysMVlwaxGq36RM 5M646DcrNgOrZRLUVeOrTMH2Rcyz2m5UfSGdAdTBz+krkf6qkHt4HsU3rKqNp2Ti 6p3GjGa9ZxRGtFxO4z+EkFWC4OhGMI1YT91KAV2T1AUh97VtBcejk4vnioSi8U8C s9K6/Dg3hRUCpmc/cPW8Itsv/n18TpbWUvr4NuiPVlc7rSkYxh9LQsfW2+Bxmpnk +DuQM1RFzLp6wL9KzciRQmJfdPW3reU4Ju60oinT17Ibv7on57RzBF1pJ+3oyPGN j+e0aCW3n9J6V89U7nO8543VqTezZoXp -----END CERTIFICATE-----Generated at Sat Sep 26 06:08:38 2026 by rpki-client