$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa File: ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa (raw, json) Hash identifier: JU/+hvqAMg1iYo+sh1SUSe72i8qN68t7Zi0W88KMQV0= Subject key identifier: 9D:90:33:72:0B:7D:AF:D0:42:1C:B1:A6:42:23:8B:80:8A:3B:CD:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974ADCF75C4612375A84400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397197 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ad:cf:75:c4:61:23:75:a8:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb1e84c2-81a1-4663-9423-3552e89463f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:cf:30:95:d7:f7:02:03:b6:c6:7d:e9:48: e4:15:dd:cb:16:a3:70:41:22:8c:1b:df:94:55:63: 1f:29:2b:29:1b:38:f5:95:f8:cc:a4:92:f3:0f:60: 26:e7:c0:7b:a3:28:c9:48:15:a2:3f:54:f4:22:92: 94:6b:7b:7b:69:c1:34:b7:25:91:17:af:7e:9f:40: a7:0e:c7:35:c7:a9:5c:b7:40:c9:9b:d3:b8:da:9f: c1:89:18:3f:36:7d:f5:9e:df:2b:ee:6e:b6:d5:d6: 06:9b:5f:b1:97:b8:b4:e7:a8:09:19:b5:88:9c:71: fe:ef:13:63:20:29:d5:7a:fe:16:f8:eb:ce:7e:00: e1:21:68:4f:df:bf:67:21:2e:36:fd:36:99:ae:8a: 30:e8:f0:e0:b9:3c:98:4a:20:ce:9b:04:22:02:29: a2:b9:cc:17:27:19:00:8a:cd:42:04:db:70:84:73: 0b:c7:ab:f0:5f:9a:53:1c:f8:17:39:56:ab:20:f9: 3f:07:de:c6:a2:65:b9:56:57:b2:1d:9d:24:62:7c: 1c:7a:40:bc:80:48:88:1f:7e:ad:bc:20:fc:be:38: 6c:f1:32:3e:56:53:4b:af:82:dc:78:85:79:f9:a2: b7:05:47:b2:71:62:3c:07:52:03:51:05:f5:b8:55: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:90:33:72:0B:7D:AF:D0:42:1C:B1:A6:42:23:8B:80:8A:3B:CD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5c:63:0c:77:6b:af:bf:77:9d:66:23:d3:24:e7:36:4b:86: 89:72:f2:d3:80:35:73:96:10:96:10:ec:80:d4:ba:02:c2:b4: 7f:33:d2:c8:4a:47:c6:8f:5c:63:55:de:9d:ce:b0:0e:5e:88: f5:0b:7c:06:fd:be:b9:ac:63:ca:ba:7e:45:55:f5:19:94:77: 58:09:4e:93:35:cb:b7:3e:d1:87:fc:bf:50:d9:1d:6a:30:e7: 63:2a:b3:47:89:9e:b3:64:90:0f:81:41:0f:35:f2:97:12:5b: d4:37:3f:06:31:7c:73:5b:7b:4c:a6:dc:db:e8:8c:43:3f:02: 5e:b1:05:68:3c:d7:ba:f6:1b:69:f7:e6:11:b1:28:07:7b:ad: 3b:e0:50:87:25:5d:99:03:3e:9f:83:d1:99:04:0a:b3:80:da: 10:ba:fa:93:01:07:d4:a9:91:3c:ca:0a:98:16:b2:57:01:7e: 8e:54:6b:cb:82:6c:b4:2a:c0:4b:46:d9:bb:60:f1:36:a8:48: ed:4e:19:4a:82:f9:d8:63:3d:d3:5d:8b:16:ca:81:22:ce:57: f9:a6:e7:a1:98:e7:67:0a:f4:51:67:c6:a9:ae:32:5c:7a:d4: 34:a7:00:fb:fb:73:20:f8:86:b1:3b:fb:16:c5:b0:8a:ba:7c: f6:bd:9d:d1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdK3PdcRhI3WoRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmIxZTg0YzItODFhMS00NjYzLTk0MjMtMzU1MmU4OTQ2M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjPMJXX9wIDtsZ96UjkFd3LFqNwQSKMG9+U VWMfKSspGzj1lfjMpJLzD2Am58B7oyjJSBWiP1T0IpKUa3t7acE0tyWRF69+n0Cn Dsc1x6lct0DJm9O42p/BiRg/Nn31nt8r7m621dYGm1+xl7i056gJGbWInHH+7xNj ICnVev4W+OvOfgDhIWhP379nIS42/TaZroow6PDguTyYSiDOmwQiAimiucwXJxkA is1CBNtwhHMLx6vwX5pTHPgXOVarIPk/B97GomW5VleyHZ0kYnwcekC8gEiIH36t vCD8vjhs8TI+VlNLr4LceIV5+aK3BUeycWI8B1IDUQX1uFWaewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ2QM3ILfa/QQhyxpkIji4CKO81/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM5YWUyYmUtNTZmNy0z NTJjLWIzZmQtZTM0OTY2OGMxMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGXGMMd2uvv3edZiPTJOc2S4aJcvLTgDVzlhCWEOyA1LoCwrR/M9LI SkfGj1xjVd6dzrAOXoj1C3wG/b65rGPKun5FVfUZlHdYCU6TNcu3PtGH/L9Q2R1q MOdjKrNHiZ6zZJAPgUEPNfKXElvUNz8GMXxzW3tMptzb6IxDPwJesQVoPNe69htp 9+YRsSgHe6074FCHJV2ZAz6fg9GZBAqzgNoQuvqTAQfUqZE8ygqYFrJXAX6OVGvL gmy0KsBLRtm7YPE2qEjtThlKgvnYYz3TXYsWyoEizlf5puehmOdnCvRRZ8aprjJc etQ0pwD7+3Mg+IaxO/sWxbCKunz2vZ3R -----END CERTIFICATE-----Generated at Sun Sep 27 07:50:13 2026 by rpki-client