$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa File: c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa (raw, json) Hash identifier: fonSSVRATh78fJFfi7IGfGZRKvQaETXc/2hWmcZ8o0M= Subject key identifier: E5:DE:3B:A9:F5:18:F8:65:E3:B0:8D:C3:7D:E3:4D:5D:E1:9F:E4:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989AE2354C75647A4D250A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396592 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:ae:23:54:c7:56:47:a4:d2:50:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a74dd58-447d-43c8-a98a-05efc276ad87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:91:63:6a:4a:6e:92:8e:00:42:1b:23:0a: 58:12:0c:25:35:4d:e0:1d:d9:9f:d5:1d:ec:47:64: 53:86:8e:40:d5:1f:79:c6:23:06:58:a9:ef:80:e4: 01:86:59:c6:cc:09:5f:be:0b:c8:2e:2d:c7:4d:cb: 33:6a:86:29:b6:c8:4a:62:a3:2d:b2:92:76:a8:19: f5:95:5b:08:8f:7d:10:b3:9f:6f:83:0d:b5:9f:03: a3:f3:b3:85:f6:45:95:f6:27:40:78:3d:87:23:60: 34:71:2b:a4:ea:72:54:3a:7f:c1:8f:e0:07:cf:27: c1:74:fd:39:cd:c0:be:8a:c0:06:02:5f:61:dc:3e: a0:c6:06:30:bf:47:c3:29:0c:40:7d:57:89:f3:36: 57:01:18:b3:c7:81:3d:97:6a:b0:4d:34:c3:5d:6f: 8c:b4:24:d0:9e:99:1d:fc:7c:9e:de:5c:33:d7:dd: 07:2d:15:ed:29:03:20:28:4f:f9:39:df:df:a7:a7: d8:72:6a:96:6f:a9:5c:d4:51:9d:0d:b8:fa:aa:9b: f4:4e:59:22:2f:2e:59:fe:2e:29:4c:0b:e7:96:d1: 30:b7:a1:d5:5e:b4:c9:18:18:5b:fb:f0:fe:ac:bf: d6:98:1e:32:0b:ba:b3:b0:23:96:96:30:2d:45:9d: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DE:3B:A9:F5:18:F8:65:E3:B0:8D:C3:7D:E3:4D:5D:E1:9F:E4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:97:fe:fc:bd:c6:f8:28:97:95:63:59:57:c7:25:95:dd:59: d1:20:8a:5f:d6:ea:62:cf:aa:62:ab:ac:33:e8:f6:5c:5f:b8: 14:a5:30:72:86:32:a0:e5:b4:6e:83:7e:15:3c:bf:ab:89:2a: 93:9f:52:09:50:65:c5:98:07:38:3f:2a:69:da:aa:8a:1f:c1: f4:19:f9:93:25:e7:84:fd:23:2f:9e:52:16:93:65:76:45:e1: c2:bf:be:46:56:c4:94:60:a5:25:42:c2:01:95:fa:e3:a1:23: d5:41:22:38:2a:ba:9d:b5:00:f4:e3:f3:42:24:fc:aa:82:fb: 39:78:da:c0:65:b0:c3:ff:ea:c2:4a:90:c8:d4:e8:cf:66:9e: 74:70:5d:26:45:18:11:ae:f3:1f:64:23:50:61:14:67:fd:d8: cd:9c:25:82:0b:36:09:68:ab:76:43:11:6e:41:87:e8:8d:8d: 48:1b:c2:b7:b6:54:13:2a:12:ec:4a:0b:9f:2a:f7:84:2e:0e: b0:9b:0a:bd:0c:40:1a:a6:de:13:03:b1:26:35:16:cc:31:5a: 10:14:bb:0f:70:89:1e:81:ee:14:ea:a1:6e:9e:c8:1c:0e:99: 53:eb:5d:cb:d2:b9:98:2a:62:1b:b5:1c:79:c1:5c:40:c2:81: e4:93:6f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jia4jVMdWR6TSUKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2E3NGRkNTgtNDQ3ZC00M2M4LWE5OGEtMDVlZmMyNzZhZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9uRY2pKbpKOAEIbIwpYEgwlNU3gHdmf1R3s R2RTho5A1R95xiMGWKnvgOQBhlnGzAlfvgvILi3HTcszaoYptshKYqMtspJ2qBn1 lVsIj30Qs59vgw21nwOj87OF9kWV9idAeD2HI2A0cSuk6nJUOn/Bj+AHzyfBdP05 zcC+isAGAl9h3D6gxgYwv0fDKQxAfVeJ8zZXARizx4E9l2qwTTTDXW+MtCTQnpkd /Hye3lwz190HLRXtKQMgKE/5Od/fp6fYcmqWb6lc1FGdDbj6qpv0TlkiLy5Z/i4p TAvnltEwt6HVXrTJGBhb+/D+rL/WmB4yC7qzsCOWljAtRZ1jBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXeO6n1GPhl47CNw33jTV3hn+TeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1NzBkYTYtM2EwNy0z NTZiLWE1YmEtMDhhZGFhMjllM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGX/vy9xvgol5VjWVfHJZXdWdEgil/W6mLPqmKrrDPo9lxfuBSlMHKG MqDltG6DfhU8v6uJKpOfUglQZcWYBzg/KmnaqoofwfQZ+ZMl54T9Iy+eUhaTZXZF 4cK/vkZWxJRgpSVCwgGV+uOhI9VBIjgqup21APTj80Ik/KqC+zl42sBlsMP/6sJK kMjU6M9mnnRwXSZFGBGu8x9kI1BhFGf92M2cJYILNgloq3ZDEW5Bh+iNjUgbwre2 VBMqEuxKC58q94QuDrCbCr0MQBqm3hMDsSY1FswxWhAUuw9wiR6B7hTqoW6eyBwO mVPrXcvSuZgqYhu1HHnBXEDCgeSTbzI= -----END CERTIFICATE-----Generated at Sun Sep 27 17:17:58 2026 by rpki-client