$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa File: d9df40ab-642c-3d6c-9c68-188c8debb70e.roa (raw, json) Hash identifier: 0nht6KiUB7p19dPUkH6RUbFodT8ZK2MbQDH7XBQIYII= Subject key identifier: EA:0F:49:C6:29:DA:A0:92:9D:5D:06:36:1B:9F:A3:A6:71:76:84:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49888BEF1FE8677CF52BEF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396584 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:8b:ef:1f:e8:67:7c:f5:2b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0eae5f5f-1228-45d3-a271-fa64d5ba8aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:57:96:ed:f8:c6:f5:5c:e3:40:6f:12:da: 39:9b:78:c0:ed:e5:94:2b:7c:d7:ac:7a:9a:54:43: 18:f5:10:08:b2:42:07:98:b4:9d:b4:6d:92:e6:6b: 12:9a:c8:6b:55:07:45:d9:dc:82:39:7d:a6:26:03: a5:8e:d4:c6:44:7b:15:bf:15:0c:a2:22:06:fa:ff: 63:1d:21:d3:68:ec:be:da:52:bf:59:27:74:fe:b4: 85:a3:d9:8e:2e:de:c0:a2:f1:b6:bf:15:ce:06:53: 36:00:9d:36:1f:bd:d0:0d:89:a3:78:46:d5:cb:e1: a5:2e:09:1f:12:8f:f0:75:75:23:b8:eb:f2:52:43: 51:09:08:d4:38:2e:49:bc:82:10:71:a3:1f:9b:71: ef:ee:fb:76:15:f0:0e:83:ed:68:d0:3d:24:fd:2e: 6c:71:07:a5:92:bc:35:d0:e5:35:40:58:04:70:f7: 07:b4:83:81:6c:03:4a:d9:cf:16:bf:ac:f4:0c:22: 05:2d:c5:42:78:30:16:60:8f:1f:b1:4f:87:26:ae: 27:87:7d:99:0b:01:d6:84:fd:53:4e:f8:d5:5d:7d: 29:59:c9:ed:af:51:69:b7:02:0d:aa:38:02:c2:e3: 4d:f8:af:9a:72:22:5b:ca:19:ee:b8:88:b1:b9:49: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0F:49:C6:29:DA:A0:92:9D:5D:06:36:1B:9F:A3:A6:71:76:84:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:32:00:98:83:fc:5e:e7:2c:c0:ad:95:19:15:d1:f3:2f:a3: b5:00:96:d2:f1:9e:2a:8d:39:7c:b0:bc:59:a2:99:a5:02:f5: 51:04:ae:56:65:52:24:a6:ff:7a:61:7b:62:b5:bf:bf:d9:1f: 17:eb:17:3b:0e:7e:b5:63:c0:37:ae:ba:dc:93:7a:f8:7b:b0: 41:be:14:74:b3:ac:c0:fb:7a:c0:9d:5c:79:58:d1:8d:83:1d: 7c:08:ad:26:9d:14:29:df:5c:c7:14:6c:ab:85:e5:09:00:0a: 4a:b0:67:81:91:b9:6a:64:38:67:89:c0:d7:79:7b:d6:a6:60: 2e:50:f1:6a:d1:16:f3:1b:99:7c:7b:0f:5e:8e:e0:0d:7f:4d: c7:5c:80:c5:6e:08:c8:f8:e7:ec:c5:3e:31:25:a9:35:ae:bf: c0:8a:ae:a4:ae:33:a4:59:83:f3:d7:a3:b6:94:ec:22:0a:22: 8e:9b:bd:8b:21:e1:98:9b:c6:b0:f1:c4:f6:26:ef:ef:ad:14: e1:66:2d:22:36:3c:a6:8a:e9:25:c7:8a:f9:b6:75:43:31:71: e1:fc:46:ee:ef:dc:40:3d:f4:65:8b:a7:1d:9c:8a:5c:b8:66: e5:36:b9:6e:7b:c5:15:0d:c8:af:3f:f1:1e:c1:f7:b9:5c:20: bd:c2:f0:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiIvvH+hnfPUr74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVhZTVmNWYtMTIyOC00NWQzLWEyNzEtZmE2NGQ1YmE4YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpXlu34xvVc40BvEto5m3jA7eWUK3zXrHqa VEMY9RAIskIHmLSdtG2S5msSmshrVQdF2dyCOX2mJgOljtTGRHsVvxUMoiIG+v9j HSHTaOy+2lK/WSd0/rSFo9mOLt7AovG2vxXOBlM2AJ02H73QDYmjeEbVy+GlLgkf Eo/wdXUjuOvyUkNRCQjUOC5JvIIQcaMfm3Hv7vt2FfAOg+1o0D0k/S5scQelkrw1 0OU1QFgEcPcHtIOBbANK2c8Wv6z0DCIFLcVCeDAWYI8fsU+HJq4nh32ZCwHWhP1T TvjVXX0pWcntr1FptwINqjgCwuNN+K+aciJbyhnuuIixuUnj6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOoPScYp2qCSnV0GNhufo6ZxdoSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlkZjQwYWItNjQyYy0z ZDZjLTljNjgtMTg4YzhkZWJiNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqMgCYg/xe5yzArZUZFdHzL6O1AJbS8Z4qjTl8sLxZopmlAvVRBK5W ZVIkpv96YXtitb+/2R8X6xc7Dn61Y8A3rrrck3r4e7BBvhR0s6zA+3rAnVx5WNGN gx18CK0mnRQp31zHFGyrheUJAApKsGeBkblqZDhnicDXeXvWpmAuUPFq0RbzG5l8 ew9ejuANf03HXIDFbgjI+OfsxT4xJak1rr/Aiq6krjOkWYPz16O2lOwiCiKOm72L IeGYm8aw8cT2Ju/vrRThZi0iNjymiuklx4r5tnVDMXHh/Ebu79xAPfRli6cdnIpc uGblNrlue8UVDcivP/Eewfe5XCC9wvCN -----END CERTIFICATE-----Generated at Sat Sep 26 13:29:55 2026 by rpki-client