$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0efb819-7c86-3c2a-a73a-ad5a4d8e5d43.roa File: c0efb819-7c86-3c2a-a73a-ad5a4d8e5d43.roa (raw, json) Hash identifier: gzHCaE0tAm4emfQIo0+dXBfPhq0F32vOHce8J7Vmeg8= Subject key identifier: 69:2A:97:A9:38:30:09:FA:AD:03:E9:D2:E4:08:AF:C2:99:22:6F:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987D5CD8C04D93B51DF5A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0efb819-7c86-3c2a-a73a-ad5a4d8e5d43.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396578 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d5:cd:8c:04:d9:3b:51:df:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b4f39fd-1b66-4684-843d-93d78a73446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f7:0c:b8:0d:21:69:ed:86:26:00:e3:55:9c: 44:f5:d3:bc:0c:4a:48:04:f7:a7:1e:62:0e:ed:0d: e6:e0:e5:45:22:04:ea:54:71:01:ce:85:4c:f5:77: ec:cc:bc:79:47:6f:fc:36:d6:4f:9b:4c:ba:ad:2e: e0:69:37:62:4b:2c:35:72:ca:61:ab:88:78:54:93: 37:53:7f:f2:43:de:f1:e4:5c:13:a6:88:5f:62:e2: ac:d1:76:2b:4d:23:a4:44:c0:90:e4:98:1a:72:6d: 6d:82:3a:fc:34:63:01:ff:f8:6d:2f:82:54:b8:46: b1:27:db:c3:bf:85:84:87:1e:ed:7e:ec:95:9c:27: aa:19:09:04:b9:f4:a1:91:57:fb:5e:a6:5e:05:3d: 89:40:47:71:f0:bc:2a:c8:cd:75:7e:0f:ec:b5:12: 99:d7:15:17:46:c6:cb:07:74:a5:4c:71:f1:7c:fe: ec:a7:07:6a:d0:91:9c:ed:a1:f0:fd:31:09:ff:26: 58:b1:3c:55:b6:bc:6b:db:f3:11:95:05:cf:b2:07: ed:09:24:7c:da:06:47:d2:95:60:62:5c:9e:2e:2b: fb:08:af:be:7a:e7:f0:18:2b:3c:31:4f:84:a5:7b: 46:1f:c2:8c:71:7b:d3:60:01:be:c5:34:9f:9d:4c: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:97:A9:38:30:09:FA:AD:03:E9:D2:E4:08:AF:C2:99:22:6F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0efb819-7c86-3c2a-a73a-ad5a4d8e5d43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:26:d0:ab:eb:a1:63:93:66:81:2e:9f:36:72:fd:42:15:2b: f5:e2:c4:6b:42:06:3c:e6:08:29:68:81:aa:51:38:e8:b8:11: 3d:62:cd:d1:3d:93:06:13:6b:01:a8:60:81:63:1d:8c:56:a2: e1:b8:31:e6:c9:26:5e:42:9c:9e:4e:8d:cd:f2:54:fd:d6:3f: 0a:69:77:0a:2f:e8:5f:a4:94:d6:f9:36:6b:3c:14:8d:19:ba: 1c:86:5b:86:c6:61:f3:c1:29:34:2b:d6:96:72:ab:2b:f0:35: 3d:38:eb:58:92:eb:3b:7f:88:6b:ad:05:f8:6e:14:20:b1:f1: 94:b4:ad:d0:3d:b4:e2:99:00:6b:46:91:b2:9f:10:d3:60:19: 2b:e0:cf:2c:c1:aa:18:c4:19:3e:93:b7:44:15:9a:24:41:92: ea:3f:d7:ec:b1:23:85:13:31:c6:e3:88:da:70:85:34:6d:5a: 01:d2:de:4c:a1:0a:e0:e1:a2:d1:cf:e1:f1:85:8a:b1:a8:d2: e1:f3:7f:ca:8d:61:f5:c2:70:9a:6c:5b:fb:a3:a1:d3:b9:4f: 09:ca:3d:1e:b9:00:68:f1:87:41:bb:97:c1:df:b5:c2:f4:ea: 71:4a:a2:a0:71:c7:42:ff:a2:c7:e4:de:11:6d:0f:23:49:db: dc:28:5e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9XNjATZO1HfWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI0ZjM5ZmQtMWI2Ni00Njg0LTg0M2QtOTNkNzhhNzM0NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vcMuA0hae2GJgDjVZxE9dO8DEpIBPenHmIO 7Q3m4OVFIgTqVHEBzoVM9XfszLx5R2/8NtZPm0y6rS7gaTdiSyw1csphq4h4VJM3 U3/yQ97x5FwTpohfYuKs0XYrTSOkRMCQ5Jgacm1tgjr8NGMB//htL4JUuEaxJ9vD v4WEhx7tfuyVnCeqGQkEufShkVf7XqZeBT2JQEdx8LwqyM11fg/stRKZ1xUXRsbL B3SlTHHxfP7spwdq0JGc7aHw/TEJ/yZYsTxVtrxr2/MRlQXPsgftCSR82gZH0pVg YlyeLiv7CK++eufwGCs8MU+EpXtGH8KMcXvTYAG+xTSfnUyDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkql6k4MAn6rQPp0uQIr8KZIm8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzBlZmI4MTktN2M4Ni0z YzJhLWE3M2EtYWQ1YTRkOGU1ZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwm0KvroWOTZoEunzZy/UIVK/XixGtCBjzmCClogapROOi4ET1izdE9 kwYTawGoYIFjHYxWouG4MebJJl5CnJ5Ojc3yVP3WPwppdwov6F+klNb5Nms8FI0Z uhyGW4bGYfPBKTQr1pZyqyvwNT0461iS6zt/iGutBfhuFCCx8ZS0rdA9tOKZAGtG kbKfENNgGSvgzyzBqhjEGT6Tt0QVmiRBkuo/1+yxI4UTMcbjiNpwhTRtWgHS3kyh CuDhotHP4fGFirGo0uHzf8qNYfXCcJpsW/ujodO5TwnKPR65AGjxh0G7l8HftcL0 6nFKoqBxx0L/osfk3hFtDyNJ29woXgc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:15:43 2026 by rpki-client