$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa File: f150fec7-3078-3cd8-8458-add28adfb037.roa (raw, json) Hash identifier: Cfff5kQLmnjrwP57zXdwTxVPir8NmbsgbO408wZt4u4= Subject key identifier: 28:48:6A:FE:F6:6F:AD:76:7B:A9:D6:E9:36:A8:71:8E:93:E6:E5:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974F1182EFEFAEE7D026780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396582 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f1:18:2e:fe:fa:ee:7d:02:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7bd6cba-fa23-4eb1-8a74-bf5243e6fa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:5b:9a:70:04:0d:ec:19:5b:7f:c5:6f:f0: f6:15:1c:f9:6f:87:6e:5f:d5:26:ec:6e:95:ea:32: 61:22:b7:cd:36:b1:5e:32:05:97:e7:01:4f:63:fa: 93:25:61:2d:fa:6a:39:1d:bb:0a:86:1c:c4:15:9c: 80:f3:76:64:d7:74:ed:72:90:8d:ee:64:3b:80:cc: a9:05:40:0d:1c:06:40:68:88:ae:d2:e1:29:5f:58: 91:b7:30:8f:cb:0f:9b:65:db:1c:c7:80:2e:6d:f1: be:b7:e3:f1:d2:ba:03:d9:98:f2:00:2f:cb:a1:82: 38:54:63:57:4c:1a:fa:c1:1a:f7:02:d8:40:9f:80: e7:9b:dd:6a:7d:2e:7d:25:ee:d7:31:aa:eb:5b:e6: 18:24:be:cb:41:54:d4:03:9e:42:d1:0f:bc:40:52: c4:71:73:2e:d8:45:8d:da:bc:7e:f4:78:cf:b8:52: f6:6b:c3:da:91:cb:7b:c7:1d:b8:1c:77:43:2f:61: f9:15:16:68:9a:4e:2b:12:93:e6:3d:94:b1:83:dc: c6:b2:28:e5:4c:55:8d:2c:90:74:2b:35:c6:89:79: a7:d7:18:dd:48:8e:ca:fb:6d:12:8d:5b:e0:63:62: 40:ea:c4:aa:b2:62:47:a6:db:0a:70:ee:0b:89:ee: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:6A:FE:F6:6F:AD:76:7B:A9:D6:E9:36:A8:71:8E:93:E6:E5:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5c:62:4c:67:c3:98:39:02:56:0f:92:2e:6a:2f:20:3b:01: fe:bc:45:0e:4a:7a:13:2a:87:b8:d0:1d:de:fe:de:0d:2b:78: 3d:9d:d9:12:b7:d6:4e:41:a5:1c:3e:28:5d:0f:0b:18:37:f0: 76:f2:72:12:dc:33:ff:76:12:74:f1:09:fe:dc:eb:89:a0:f8: 5b:68:df:85:7f:86:ca:6f:f3:ab:d6:73:e9:2e:0f:98:6d:13: a4:0c:2f:42:75:03:5c:67:02:30:7d:42:4b:c7:4f:96:c1:2d: 62:a3:1c:fe:a4:e8:6a:46:8b:0b:75:0a:62:8e:9f:94:80:db: 03:c5:70:15:eb:63:48:30:a1:83:d2:9e:dc:c6:1a:6b:1c:e0: 95:b2:36:08:7e:e2:1b:b7:c4:68:30:2c:32:55:9d:bc:33:d0: fb:90:26:c0:ec:4f:ad:b6:87:e4:bd:04:25:60:8b:2b:e4:2b: 9d:30:9f:b0:7d:89:83:f1:62:93:75:b7:2b:aa:ec:4d:ea:9a: ad:7f:70:f7:d1:3f:67:1f:a5:f2:a4:b6:81:dd:79:21:39:df: b4:0e:66:a9:cc:89:3c:cd:c9:4a:21:df:d6:26:39:6e:92:c2: 05:4c:03:c6:a5:61:39:09:e0:97:1e:3d:71:d1:fa:b5:98:ec: f1:04:6c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPEYLv767n0CZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdiZDZjYmEtZmEyMy00ZWIxLThhNzQtYmY1MjQzZTZmYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsllbmnAEDewZW3/Fb/D2FRz5b4duX9Um7G6V 6jJhIrfNNrFeMgWX5wFPY/qTJWEt+mo5HbsKhhzEFZyA83Zk13TtcpCN7mQ7gMyp BUANHAZAaIiu0uEpX1iRtzCPyw+bZdscx4AubfG+t+Px0roD2ZjyAC/LoYI4VGNX TBr6wRr3AthAn4Dnm91qfS59Je7XMarrW+YYJL7LQVTUA55C0Q+8QFLEcXMu2EWN 2rx+9HjPuFL2a8Pakct7xx24HHdDL2H5FRZomk4rEpPmPZSxg9zGsijlTFWNLJB0 KzXGiXmn1xjdSI7K+20SjVvgY2JA6sSqsmJHptsKcO4Lie5VrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChIav72b612e6nW6TaocY6T5uXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE1MGZlYzctMzA3OC0z Y2Q4LTg0NTgtYWRkMjhhZGZiMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdcYkxnw5g5AlYPki5qLyA7Af68RQ5KehMqh7jQHd7+3g0reD2d2RK3 1k5BpRw+KF0PCxg38HbychLcM/92EnTxCf7c64mg+Fto34V/hspv86vWc+kuD5ht E6QML0J1A1xnAjB9QkvHT5bBLWKjHP6k6GpGiwt1CmKOn5SA2wPFcBXrY0gwoYPS ntzGGmsc4JWyNgh+4hu3xGgwLDJVnbwz0PuQJsDsT622h+S9BCVgiyvkK50wn7B9 iYPxYpN1tyuq7E3qmq1/cPfRP2cfpfKktoHdeSE537QOZqnMiTzNyUoh39YmOW6S wgVMA8alYTkJ4JcePXHR+rWY7PEEbDs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:13:59 2026 by rpki-client