$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa File: c94d6964-346a-351b-80d6-bc38161ce464.roa (raw, json) Hash identifier: ftr81bIJotmCetuaa14d+kkZQw4VHBZZpB4qDIGw914= Subject key identifier: D7:D6:06:ED:DF:A3:F5:09:EA:A2:3F:AC:4B:A2:69:BA:79:39:51:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49732C1508603782D6657080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396602 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2c:15:08:60:37:82:d6:65:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fc70d79f-a089-4f77-abd6-27415d07ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:42:c2:a3:f7:8b:f4:c7:ee:3d:ad:e5:12: 7b:5c:ad:c1:5b:66:a1:f2:a7:48:ee:df:75:8b:6a: ac:67:92:e9:60:9f:07:0a:4d:b8:c2:a3:e1:1c:db: f5:ae:c8:4e:fe:f5:cd:d2:60:1e:e7:3b:32:eb:c9: 3a:a3:54:fc:fe:b5:5a:15:06:5c:1b:49:90:ed:c3: ca:44:a9:44:f8:7d:67:9c:d7:9f:85:ed:92:56:10: 42:be:63:7e:f5:d4:cf:e5:b4:95:f6:a7:42:be:15: 93:ce:68:c6:a5:ae:48:76:52:4b:4a:6e:28:13:17: c1:59:58:b1:48:7e:3b:04:cc:58:30:a1:77:4f:9c: 0d:cb:44:5d:e2:29:16:d0:18:42:8a:a3:5d:7e:cc: 4b:33:e7:2c:29:ba:b0:26:2e:04:48:64:82:7e:53: cc:be:cc:cd:2a:58:b5:93:f2:4b:94:5d:b2:8f:b0: dd:f0:85:19:8f:fd:af:03:71:3e:d0:72:44:a2:29: 59:45:44:fb:7c:b0:57:56:78:a5:a4:b2:78:38:e3: 95:a1:07:2f:31:2a:6d:f9:a3:15:e9:0e:c2:f6:ba: 25:66:2d:48:89:6c:58:3d:de:db:6d:7a:98:19:d7: 27:64:bb:63:b7:12:1e:ee:bf:e1:0b:23:1b:c5:ca: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D6:06:ED:DF:A3:F5:09:EA:A2:3F:AC:4B:A2:69:BA:79:39:51:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c94d6964-346a-351b-80d6-bc38161ce464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:30:e2:49:28:be:bb:f9:7b:66:67:87:61:b7:e9:d2:f3:ab: 01:29:2c:4c:f7:50:7a:f2:4c:8c:6a:62:f8:71:3b:df:e3:01: 00:83:89:54:f5:3a:68:89:8b:d9:f0:20:da:a0:d6:7c:d7:df: 8b:52:41:0d:73:63:f9:97:dc:10:4a:f5:a0:3c:27:16:75:8a: 3e:ec:54:6c:a5:32:eb:3a:1e:85:d2:7b:43:df:70:8a:17:e8: af:f4:c2:17:36:48:fc:9b:72:f4:83:e1:5c:34:f7:85:b5:35: a0:10:ba:08:14:e2:67:26:de:cd:77:d1:24:1a:84:31:f4:90: 8b:d3:cf:e6:12:72:66:fa:8f:1a:6f:39:7c:04:0b:32:05:05: 25:8d:b5:27:44:e4:48:f8:be:70:6e:52:cb:75:b9:af:e6:bc: 3b:80:8c:c8:15:a4:e6:ea:79:a5:52:7c:94:d1:f6:fc:cc:28: 64:d8:43:5f:0d:15:d1:11:c1:31:e8:ed:53:84:da:27:33:bd: f6:83:d2:bd:2f:b3:d8:86:1e:72:73:70:75:9b:6b:40:95:94: ae:cf:59:2f:33:9d:19:e4:8a:61:90:aa:09:49:7a:f7:7e:8f: 6d:5b:09:51:96:6d:de:17:bb:de:46:55:09:19:06:93:23:ad: 81:d1:51:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JcywVCGA3gtZlcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM3MGQ3OWYtYTA4OS00Zjc3LWFiZDYtMjc0MTVkMDdhZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQNCwqP3i/TH7j2t5RJ7XK3BW2ah8qdI7t91 i2qsZ5LpYJ8HCk24wqPhHNv1rshO/vXN0mAe5zsy68k6o1T8/rVaFQZcG0mQ7cPK RKlE+H1nnNefhe2SVhBCvmN+9dTP5bSV9qdCvhWTzmjGpa5IdlJLSm4oExfBWVix SH47BMxYMKF3T5wNy0Rd4ikW0BhCiqNdfsxLM+csKbqwJi4ESGSCflPMvszNKli1 k/JLlF2yj7Dd8IUZj/2vA3E+0HJEoilZRUT7fLBXVnilpLJ4OOOVoQcvMSpt+aMV 6Q7C9rolZi1IiWxYPd7bbXqYGdcnZLtjtxIe7r/hCyMbxcqGhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNfWBu3fo/UJ6qI/rEuiabp5OVGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk0ZDY5NjQtMzQ2YS0z NTFiLTgwZDYtYmMzODE2MWNlNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAzMOJJKL67+XtmZ4dht+nS86sBKSxM91B68kyMamL4cTvf4wEAg4lU 9TpoiYvZ8CDaoNZ819+LUkENc2P5l9wQSvWgPCcWdYo+7FRspTLrOh6F0ntD33CK F+iv9MIXNkj8m3L0g+FcNPeFtTWgELoIFOJnJt7Nd9EkGoQx9JCL08/mEnJm+o8a bzl8BAsyBQUljbUnRORI+L5wblLLdbmv5rw7gIzIFaTm6nmlUnyU0fb8zChk2ENf DRXREcEx6O1ThNonM732g9K9L7PYhh5yc3B1m2tAlZSuz1kvM50Z5IphkKoJSXr3 fo9tWwlRlm3eF7veRlUJGQaTI62B0VGC -----END CERTIFICATE-----Generated at Fri Sep 25 16:22:02 2026 by rpki-client