$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f42827b0-a132-34c5-81fe-7363c9bc248f.roa File: f42827b0-a132-34c5-81fe-7363c9bc248f.roa (raw, json) Hash identifier: iM5SOMVl04HApvAVf4DPZnBqi8F4RCSyF4XFCgRsvJQ= Subject key identifier: 71:41:8E:98:50:D5:5F:CB:7E:67:B4:7D:B1:B8:1B:81:9A:AF:20:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49891A64687B353B9D8CEA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f42827b0-a132-34c5-81fe-7363c9bc248f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397205 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:1a:64:68:7b:35:3b:9d:8c:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9a9cc708-456f-476e-ae7b-5fff22fc3d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:d5:72:8d:ca:81:0b:91:e4:88:26:8e:81: 02:e0:9e:a5:17:15:53:1d:5d:65:82:b2:ce:81:04: ec:22:63:a7:87:04:ab:ae:97:bd:9d:2a:4c:1f:81: c5:af:a2:6d:d7:c3:ec:d5:76:93:80:a8:e0:62:cf: 57:87:58:3d:61:31:40:ae:94:01:dd:71:1a:56:1d: c8:1d:a6:da:5e:90:7f:3f:4b:1b:a4:66:7c:f3:2a: 9f:a4:93:2c:f6:41:0a:95:ec:c7:54:2e:a7:93:4f: 62:02:25:a6:76:53:49:87:20:08:a3:27:f6:cc:96: 47:7e:92:97:0d:f6:e4:9b:b9:0c:ac:70:fb:d0:35: e7:18:d8:ec:b8:d1:7c:cb:e7:6d:85:b6:f9:9d:e8: 86:0c:7c:32:6b:74:9a:a4:bb:d0:8a:de:fa:8a:99: ba:3d:8e:52:e6:6d:cc:14:28:f1:2a:52:98:61:3b: c7:10:fc:78:82:4b:e5:04:fc:ae:6a:4b:52:24:08: 70:22:b1:cc:3b:b6:e5:c8:b5:0e:75:7b:cc:30:f1: f3:59:a9:72:a2:69:d8:e4:8f:0a:c4:20:b9:f8:5c: 51:5f:e6:c9:87:ec:51:e9:06:d3:56:c7:ab:34:ed: a9:29:6f:a3:1e:be:26:3a:f2:fa:a5:85:6c:d7:13: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:8E:98:50:D5:5F:CB:7E:67:B4:7D:B1:B8:1B:81:9A:AF:20:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f42827b0-a132-34c5-81fe-7363c9bc248f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:74:8a:fb:b5:dc:3f:c7:32:31:d9:3e:92:6c:b0:38:ce:0f: fb:85:20:fa:f4:14:03:b8:fe:ff:ca:cc:e9:c7:5e:26:2c:b7: 50:1a:44:36:7a:fd:4c:71:0b:3f:39:ab:81:50:9d:98:d3:88: 56:07:30:a3:80:6a:80:1f:9a:85:d2:f0:a9:42:31:82:5a:8b: d0:14:b7:c9:80:4a:23:c4:52:bd:65:5c:5c:d1:04:35:48:61: 85:45:22:45:74:3d:e8:7d:4b:73:a3:d4:8e:41:53:b0:be:30: 1b:ce:82:99:15:3e:a2:e4:2b:65:3b:39:55:56:4c:6e:b9:06: 94:df:4b:9b:80:ac:5d:ec:58:fb:75:64:dc:c4:bd:04:45:12: 0f:0f:cb:cb:7a:88:c7:20:89:d1:16:17:16:70:6b:9f:64:16: 3d:5c:a4:9e:da:23:62:6b:0e:47:97:25:76:84:5d:8e:2e:6a: 6b:b0:54:c3:68:29:f6:89:93:0c:05:a3:64:9f:48:e7:1e:1e: 25:14:03:e1:0e:eb:ca:fc:5e:8c:42:b3:c2:08:93:2c:d1:28: 29:f9:34:11:a2:93:99:b4:3b:28:86:24:3b:5c:a9:36:04:6b: 29:90:91:58:72:37:41:5d:77:dc:3d:07:3e:7b:11:35:e0:9b: 28:c9:56:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiRpkaHs1O52M6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWE5Y2M3MDgtNDU2Zi00NzZlLWFlN2ItNWZmZjIyZmMzZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv/Vco3KgQuR5IgmjoEC4J6lFxVTHV1lgrLO gQTsImOnhwSrrpe9nSpMH4HFr6Jt18Ps1XaTgKjgYs9Xh1g9YTFArpQB3XEaVh3I HabaXpB/P0sbpGZ88yqfpJMs9kEKlezHVC6nk09iAiWmdlNJhyAIoyf2zJZHfpKX Dfbkm7kMrHD70DXnGNjsuNF8y+dthbb5neiGDHwya3SapLvQit76ipm6PY5S5m3M FCjxKlKYYTvHEPx4gkvlBPyuaktSJAhwIrHMO7blyLUOdXvMMPHzWalyomnY5I8K xCC5+FxRX+bJh+xR6QbTVserNO2pKW+jHr4mOvL6pYVs1xMbxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFBjphQ1V/Lfme0fbG4G4GaryDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjQyODI3YjAtYTEzMi0z NGM1LTgxZmUtNzM2M2M5YmMyNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ0ivu13D/HMjHZPpJssDjOD/uFIPr0FAO4/v/KzOnHXiYst1AaRDZ6 /UxxCz85q4FQnZjTiFYHMKOAaoAfmoXS8KlCMYJai9AUt8mASiPEUr1lXFzRBDVI YYVFIkV0Peh9S3Oj1I5BU7C+MBvOgpkVPqLkK2U7OVVWTG65BpTfS5uArF3sWPt1 ZNzEvQRFEg8Py8t6iMcgidEWFxZwa59kFj1cpJ7aI2JrDkeXJXaEXY4uamuwVMNo KfaJkwwFo2SfSOceHiUUA+EO68r8XoxCs8IIkyzRKCn5NBGik5m0OyiGJDtcqTYE aymQkVhyN0Fdd9w9Bz57ETXgmyjJVk4= -----END CERTIFICATE-----Generated at Sat Sep 26 12:44:22 2026 by rpki-client