$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa File: d22d31e4-dc77-3911-b319-38170ae00070.roa (raw, json) Hash identifier: gFNvahHl0pZJ9FC2RNrgoVpF/OeT0Ft7Ww0DnTyvtzo= Subject key identifier: 87:01:F4:B1:AF:5A:E6:8B:94:24:45:3A:56:75:3D:C4:58:40:81:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974DA6A4265D0422F393C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397205 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:da:6a:42:65:d0:42:2f:39:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5be9c030-7ef2-493e-8ffa-bf52ef06c7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:4c:7c:3a:6e:26:8a:06:e1:5e:af:5f:18: b3:0c:8c:a6:e2:ec:e1:87:91:3f:31:88:65:4f:05: 94:65:8e:89:96:aa:2b:9a:f0:e4:c2:6a:65:e4:4f: 20:fb:12:a3:bf:36:06:ac:22:e7:ff:41:ee:e9:2a: 1c:74:22:e7:9d:60:48:47:b5:88:5f:84:b1:11:50: 92:40:36:a8:b7:9f:8b:49:ba:4b:31:16:8f:a5:e2: 80:0a:d4:74:bc:78:cc:9a:a3:93:ca:ff:3c:6e:c0: f0:a6:67:ed:d1:fa:af:b5:82:41:c3:b1:89:37:06: b1:74:a5:4a:25:d1:4e:cf:1f:ad:d7:bc:f9:f4:88: 01:51:e1:10:f2:97:74:85:06:dc:f9:73:dd:78:3e: b7:73:90:6c:cb:c9:83:27:67:98:bd:0a:b6:dc:1f: 7c:8b:1d:02:68:a3:ce:24:2f:fa:bf:8b:8a:4e:a0: fc:6a:dc:bf:7b:3c:28:d1:5b:12:5b:03:fe:46:c1: e6:21:cf:2b:c8:2e:64:7d:d1:0f:99:89:8c:36:c2: cb:48:0f:37:b0:86:d5:c3:12:4b:b1:af:29:b6:f5: 3b:b3:2c:7c:d5:ef:e2:60:0b:7c:3a:43:9d:b5:88: 65:9c:3a:76:d2:e6:70:20:d6:f9:e0:46:ab:e8:92: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:F4:B1:AF:5A:E6:8B:94:24:45:3A:56:75:3D:C4:58:40:81:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d22d31e4-dc77-3911-b319-38170ae00070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:36:d8:7f:b7:f6:59:be:9b:0f:b0:02:81:2f:02:c9:30:01: c5:57:61:3b:3c:67:63:1d:7a:96:db:1e:63:62:a2:bc:c4:76: 10:7b:13:8f:7c:74:36:90:71:d0:f9:7f:1a:cc:49:42:93:6a: 1e:ea:b9:5a:22:aa:9e:98:db:2d:cc:fa:96:72:1d:9c:e1:f3: 8a:b4:f9:bf:b4:24:d4:f9:fa:d8:6b:62:79:5b:19:9d:92:b0: 88:54:1e:74:36:7e:67:5a:08:d3:e6:f9:9d:d1:7f:bc:77:8f: 60:be:ec:01:41:94:fe:08:fe:49:03:ed:11:f5:d8:a4:d1:d0: ee:aa:71:c9:36:53:9e:1c:9b:db:c8:4a:63:31:35:e6:db:f3: 74:f6:7b:5c:62:9a:73:b0:75:f9:52:a4:3d:2e:1b:32:cf:a3: 6e:08:51:e5:d0:6b:dd:19:0e:45:7c:ff:76:3c:7d:03:cb:06: 2c:31:2b:f9:1f:93:89:93:57:ca:66:31:37:86:5c:d0:9a:cc: 4d:19:ee:ca:e5:17:f1:b4:e4:fc:73:17:d7:8e:a8:b1:b2:d8: 60:7c:2d:1f:40:ea:71:50:72:ee:d5:dc:b2:6c:e2:79:5d:a9: ea:f6:c6:b2:2c:3a:f3:1e:c8:17:8e:01:12:94:4d:cb:f4:cd: df:c8:3e:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdNpqQmXQQi85PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWJlOWMwMzAtN2VmMi00OTNlLThmZmEtYmY1MmVmMDZjN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r1MfDpuJooG4V6vXxizDIym4uzhh5E/MYhl TwWUZY6JlqormvDkwmpl5E8g+xKjvzYGrCLn/0Hu6SocdCLnnWBIR7WIX4SxEVCS QDaot5+LSbpLMRaPpeKACtR0vHjMmqOTyv88bsDwpmft0fqvtYJBw7GJNwaxdKVK JdFOzx+t17z59IgBUeEQ8pd0hQbc+XPdeD63c5Bsy8mDJ2eYvQq23B98ix0CaKPO JC/6v4uKTqD8aty/ezwo0VsSWwP+RsHmIc8ryC5kfdEPmYmMNsLLSA83sIbVwxJL sa8ptvU7syx81e/iYAt8OkOdtYhlnDp20uZwINb54Ear6JJ8PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIcB9LGvWuaLlCRFOlZ1PcRYQIFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDIyZDMxZTQtZGM3Ny0z OTExLWIzMTktMzgxNzBhZTAwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCENth/t/ZZvpsPsAKBLwLJMAHFV2E7PGdjHXqW2x5jYqK8xHYQexOP fHQ2kHHQ+X8azElCk2oe6rlaIqqemNstzPqWch2c4fOKtPm/tCTU+frYa2J5Wxmd krCIVB50Nn5nWgjT5vmd0X+8d49gvuwBQZT+CP5JA+0R9dik0dDuqnHJNlOeHJvb yEpjMTXm2/N09ntcYppzsHX5UqQ9Lhsyz6NuCFHl0GvdGQ5FfP92PH0DywYsMSv5 H5OJk1fKZjE3hlzQmsxNGe7K5RfxtOT8cxfXjqixsthgfC0fQOpxUHLu1dyybOJ5 Xanq9sayLDrzHsgXjgESlE3L9M3fyD7D -----END CERTIFICATE-----Generated at Fri Sep 25 17:57:51 2026 by rpki-client