$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d791869b-4633-312f-aae0-d70d0619c3ff.roa File: d791869b-4633-312f-aae0-d70d0619c3ff.roa (raw, json) Hash identifier: hNAGYv/GIEW3jk1faFKKdbIP9KpbGMS8cUCblesEsuk= Subject key identifier: 09:2D:77:F3:77:B0:B3:6D:24:13:FE:33:DA:67:52:34:DF:A8:2B:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B6F140AF48AAB4538E500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d791869b-4633-312f-aae0-d70d0619c3ff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10515 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:6f:14:0a:f4:8a:ab:45:38:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7dbecf53-e1a8-4a51-b123-97782a63c3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:d7:c0:e8:6a:c5:9a:b1:32:90:57:4d:23: 67:ed:11:95:86:f3:e4:04:81:17:9e:82:65:78:09: 93:8f:7f:d3:6f:70:cf:bc:19:34:73:26:9d:c9:ec: 76:2f:aa:29:c8:dd:62:16:35:b3:1b:54:fd:f9:99: cd:c0:a0:81:2a:a6:ff:fa:62:43:9d:e3:e7:ba:84: 3c:b8:b7:01:b5:78:94:cc:9e:09:9f:bc:ad:c1:ef: 02:8c:21:81:cd:41:02:cf:5c:75:f4:4b:54:43:21: bc:04:31:dd:fd:62:d8:0c:55:ec:42:45:28:e5:8a: 63:5b:d7:e8:a8:81:34:ca:df:d0:9b:7d:77:5d:07: e0:27:ca:83:a4:d0:c2:60:c7:bf:c2:a2:56:98:72: 97:a8:10:19:ca:58:94:4d:19:65:aa:ee:3b:75:7d: f2:c6:19:ba:63:3c:52:40:2e:91:a4:93:2d:b6:be: 95:83:b2:85:ec:45:11:5b:12:37:41:9e:ac:89:e5: d7:b2:0d:ed:90:27:e1:29:cf:72:71:7c:87:c1:5c: 52:90:b9:21:e2:d7:38:af:2a:d1:03:14:c1:17:6a: cb:46:d0:c0:7b:ae:6a:9d:ac:49:8e:b9:9b:0a:f0: 11:5f:a8:d4:5a:46:87:8a:05:45:b7:39:c8:4d:4d: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2D:77:F3:77:B0:B3:6D:24:13:FE:33:DA:67:52:34:DF:A8:2B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d791869b-4633-312f-aae0-d70d0619c3ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:da:fe:ac:10:32:c2:ff:59:d7:73:65:ca:ed:57:f3:79:8f: f0:64:36:be:1b:21:17:50:68:22:9e:3b:dc:9d:d6:be:ec:e5: 01:5f:be:03:15:73:9e:9c:86:30:cc:0e:f8:82:5f:b9:9f:00: 9e:b0:6d:50:6c:67:b5:45:41:76:67:f4:58:0b:19:15:20:3f: 63:6a:8c:c7:25:10:9b:ca:aa:9c:02:00:8d:fa:d0:92:62:aa: 5c:d4:6a:f3:3f:f9:ad:af:60:4e:f9:00:c7:4d:ef:28:2c:1c: fd:08:53:d8:ec:29:17:61:fa:c7:cf:bc:33:02:e1:79:c3:b1: 75:b6:be:62:85:ea:b4:f9:94:71:48:ba:8b:1b:7d:91:9a:f7: d6:95:1a:2f:66:a2:57:50:06:0a:f6:db:25:7f:e9:1a:61:66: 76:83:07:4b:64:9d:5a:a0:fc:35:8e:fe:ef:f9:c3:23:c4:d8: ab:11:bc:7f:39:20:db:53:49:e1:bb:6e:1f:64:13:7f:c7:d1: 31:f0:ba:92:a9:53:96:d8:38:a7:cf:71:3b:c3:b3:6d:f5:02: 91:94:4f:fe:17:a8:f7:7b:0a:18:02:18:6f:c8:93:21:aa:ce: e8:44:24:91:84:60:42:25:f3:60:e4:d9:76:08:a6:64:4d:cc: 30:70:2d:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji28UCvSKq0U45QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RiZWNmNTMtZTFhOC00YTUxLWIxMjMtOTc3ODJhNjNjM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwfXwOhqxZqxMpBXTSNn7RGVhvPkBIEXnoJl eAmTj3/Tb3DPvBk0cyadyex2L6opyN1iFjWzG1T9+ZnNwKCBKqb/+mJDnePnuoQ8 uLcBtXiUzJ4Jn7ytwe8CjCGBzUECz1x19EtUQyG8BDHd/WLYDFXsQkUo5YpjW9fo qIE0yt/Qm313XQfgJ8qDpNDCYMe/wqJWmHKXqBAZyliUTRllqu47dX3yxhm6YzxS QC6RpJMttr6Vg7KF7EURWxI3QZ6sieXXsg3tkCfhKc9ycXyHwVxSkLkh4tc4ryrR AxTBF2rLRtDAe65qnaxJjrmbCvARX6jUWkaHigVFtznITU327wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAktd/N3sLNtJBP+M9pnUjTfqCsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDc5MTg2OWItNDYzMy0z MTJmLWFhZTAtZDcwZDA2MTljM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN2v6sEDLC/1nXc2XK7VfzeY/wZDa+GyEXUGginjvcnda+7OUBX74D FXOenIYwzA74gl+5nwCesG1QbGe1RUF2Z/RYCxkVID9jaozHJRCbyqqcAgCN+tCS Yqpc1GrzP/mtr2BO+QDHTe8oLBz9CFPY7CkXYfrHz7wzAuF5w7F1tr5iheq0+ZRx SLqLG32RmvfWlRovZqJXUAYK9tslf+kaYWZ2gwdLZJ1aoPw1jv7v+cMjxNirEbx/ OSDbU0nhu24fZBN/x9Ex8LqSqVOW2Dinz3E7w7Nt9QKRlE/+F6j3ewoYAhhvyJMh qs7oRCSRhGBCJfNg5Nl2CKZkTcwwcC27 -----END CERTIFICATE-----Generated at Fri Sep 25 06:53:02 2026 by rpki-client