$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa File: d2eb248e-d864-39df-ad59-05847a5e4be4.roa (raw, json) Hash identifier: XKw5PznNbbe+J9suVxLIKQCANTB3WmZVv63u9GBj1zM= Subject key identifier: 02:73:FA:E5:F1:9E:8A:AB:5A:A0:05:AA:6E:92:FB:11:41:05:B1:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974201CBDFF5B548A0A5BE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:20:1c:bd:ff:5b:54:8a:0a:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bcbafa04-8a51-42c4-8858-9559bf1711b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:a2:a1:6c:65:94:ad:84:d6:b1:2e:f6:6f: 81:b8:1f:f7:89:3f:2e:04:be:1b:c5:f1:62:64:2f: a0:25:68:a3:0c:af:d2:b8:cb:38:03:34:f5:ef:0e: 47:29:b3:ed:2a:50:3a:7e:de:78:93:a0:b4:96:62: 5f:75:cd:f5:a4:da:2e:03:b9:43:30:19:eb:46:12: 70:e4:4d:c6:d9:4d:8f:f9:2b:05:fd:7a:3c:a3:f7: 89:b8:ef:3a:46:a0:92:7b:cf:dc:db:63:88:33:4e: f2:8c:13:f8:b7:93:db:15:ee:86:2e:7d:20:eb:73: b4:13:70:cf:68:b0:92:d5:92:09:49:99:aa:1f:79: 2c:69:e4:91:8f:f6:9c:99:d6:8e:64:d1:ad:bf:ca: bb:83:15:37:7d:30:b8:0f:63:67:d3:bd:bf:76:6b: 9a:9f:7a:81:11:68:0a:cc:b0:08:e0:0a:90:e0:3f: 3a:d0:c0:c9:f4:0a:b2:28:c3:6b:b9:da:b9:d3:b5: e9:56:06:d4:25:f4:0a:aa:f0:f0:b0:4c:95:00:1a: 78:a8:72:9b:64:5f:8d:ab:aa:7d:85:e5:1f:19:97: d0:8a:5a:fd:07:43:2d:46:2e:03:80:4d:94:01:dc: bb:27:8d:25:c8:12:12:c0:03:30:4c:11:3f:8c:8b: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:73:FA:E5:F1:9E:8A:AB:5A:A0:05:AA:6E:92:FB:11:41:05:B1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2eb248e-d864-39df-ad59-05847a5e4be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:30:af:4c:37:a5:2f:48:bd:04:c4:9d:0d:76:80:e7:93:46: 33:c3:fd:30:98:63:0a:e4:92:b7:be:a6:01:67:9e:5d:a9:76: 55:02:dd:9f:c2:bb:4a:8e:ce:fb:45:1d:cc:3a:e4:14:44:4d: 68:63:7b:af:7f:ba:7b:95:de:47:39:57:53:08:c1:28:e6:2d: d8:16:ec:aa:35:93:76:44:cc:1d:d4:16:4d:38:d9:e1:22:94: 2b:8e:a0:d6:2c:a7:85:3b:de:09:6b:de:71:01:52:d0:09:69: d5:b1:e3:2b:29:d7:e6:c0:e3:e1:b6:1d:8d:9d:69:08:60:92: 09:66:a2:af:4d:cc:05:8b:b4:9f:32:34:01:10:76:ad:c5:93: a9:44:e2:fa:cd:67:48:50:8b:22:4a:cf:b6:50:6d:b5:6e:c0: 0d:ca:f8:e6:1d:c7:57:33:af:c7:b2:d5:57:e2:bd:6a:8d:60: 78:7c:00:2d:f1:2f:c0:72:56:69:2b:4e:4c:19:55:99:16:0f: 8e:d3:54:5d:71:9a:e1:2f:f9:b6:df:97:a4:23:11:9f:d6:3d: 13:49:15:1e:1d:f9:10:d9:91:40:7c:ac:65:e9:b5:cf:96:1d: 25:e4:e8:f7:a9:3a:3e:4e:15:1c:e9:3c:49:45:d6:bd:24:8a: 20:55:6b:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdCAcvf9bVIoKW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmNiYWZhMDQtOGE1MS00MmM0LTg4NTgtOTU1OWJmMTcxMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaCioWxllK2E1rEu9m+BuB/3iT8uBL4bxfFi ZC+gJWijDK/SuMs4AzT17w5HKbPtKlA6ft54k6C0lmJfdc31pNouA7lDMBnrRhJw 5E3G2U2P+SsF/Xo8o/eJuO86RqCSe8/c22OIM07yjBP4t5PbFe6GLn0g63O0E3DP aLCS1ZIJSZmqH3ksaeSRj/acmdaOZNGtv8q7gxU3fTC4D2Nn072/dmuan3qBEWgK zLAI4AqQ4D860MDJ9AqyKMNrudq507XpVgbUJfQKqvDwsEyVABp4qHKbZF+Nq6p9 heUfGZfQilr9B0MtRi4DgE2UAdy7J40lyBISwAMwTBE/jItIvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAJz+uXxnoqrWqAFqm6S+xFBBbEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJlYjI0OGUtZDg2NC0z OWRmLWFkNTktMDU4NDdhNWU0YmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNMK9MN6UvSL0ExJ0NdoDnk0Yzw/0wmGMK5JK3vqYBZ55dqXZVAt2f wrtKjs77RR3MOuQURE1oY3uvf7p7ld5HOVdTCMEo5i3YFuyqNZN2RMwd1BZNONnh IpQrjqDWLKeFO94Ja95xAVLQCWnVseMrKdfmwOPhth2NnWkIYJIJZqKvTcwFi7Sf MjQBEHatxZOpROL6zWdIUIsiSs+2UG21bsANyvjmHcdXM6/HstVX4r1qjWB4fAAt 8S/AclZpK05MGVWZFg+O01RdcZrhL/m235ekIxGf1j0TSRUeHfkQ2ZFAfKxl6bXP lh0l5Oj3qTo+ThUc6TxJRda9JIogVWsJ -----END CERTIFICATE-----Generated at Sat Sep 26 01:55:15 2026 by rpki-client