$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa File: f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa (raw, json) Hash identifier: qdqR/BQDeD8PSWgtKbD6ZVwb1yx0TMakmGh2lFWLpK4= Subject key identifier: 4A:97:4B:88:FD:77:74:2C:0B:4E:AE:44:B7:0B:FE:78:37:DC:0D:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BD7AE37DE2BB76BD15F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396599 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d7:ae:37:de:2b:b7:6b:d1:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c3bf3ca-d942-47a1-a490-4092cb383b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:61:40:14:c5:4c:ad:74:de:08:82:29:2f: f2:49:c4:e8:70:fd:6d:7e:21:0f:0a:4e:40:ec:86: 70:48:75:0b:88:97:4f:e0:5e:ac:e3:4c:e5:53:41: f4:76:51:b8:cd:eb:30:63:ba:91:d9:25:ab:49:aa: 94:6a:5d:a6:10:24:11:d1:9f:59:39:5e:d8:44:59: 07:5f:51:ff:c3:cb:1a:3d:c4:0c:52:9f:45:3f:af: 6c:e0:35:31:9c:a7:86:2f:34:bc:c7:b7:6a:e6:76: ac:c7:5c:c1:19:ed:ff:20:db:5e:f5:5b:c7:68:98: 16:2b:2a:63:e3:d4:d1:04:f7:ef:74:de:ea:f5:86: c9:1b:2f:b4:70:00:a2:3e:9b:4f:31:58:c9:97:90: c8:bd:49:0d:0e:f4:6a:84:8e:20:97:fc:eb:82:b6: fb:a4:3a:e2:2c:2a:cf:92:65:d2:81:43:23:a8:2f: 15:b2:f2:10:ed:06:f5:4a:69:40:2f:8c:3a:fd:68: b7:34:75:35:e0:3c:43:2c:c4:00:eb:c1:75:88:28: d6:87:43:fa:dc:d3:32:53:15:c2:79:f6:20:3a:2f: 67:01:21:07:6a:91:cb:87:f5:52:08:76:42:41:9a: 73:d4:b1:6c:8d:f2:31:ab:cf:2f:9b:ae:c4:e6:43: fc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:4B:88:FD:77:74:2C:0B:4E:AE:44:B7:0B:FE:78:37:DC:0D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:79:69:21:e6:74:22:f3:12:66:65:f9:3c:12:8b:81:47:34: 94:1e:45:31:90:6a:d7:3e:77:c7:70:9b:1d:0a:a9:cb:77:f0: 50:92:11:db:97:47:d8:70:98:53:95:53:ca:e8:61:1b:d3:7d: bc:e5:e4:38:61:3f:45:8f:29:0b:ee:3e:d1:b1:4c:5c:62:81: 30:b5:0b:eb:7b:0f:dd:06:76:40:62:b0:de:5f:31:85:4e:4b: 18:4f:fd:c8:3f:86:10:3f:00:45:b9:24:d0:58:78:de:5e:56: a8:d2:66:d2:2f:8c:39:1b:db:c3:e7:7e:11:af:cf:94:e9:ef: 24:84:0f:8a:f7:a9:ea:be:27:f2:80:b9:ad:08:9d:a2:0c:f6: c3:c4:c0:25:e4:5b:93:83:67:74:08:f3:73:b4:0b:41:45:cb: 46:c4:96:06:93:44:93:41:31:84:db:8b:d4:c0:68:71:3e:a5: 51:4b:f9:1f:95:df:a7:35:08:6e:79:ba:36:15:f7:5d:8b:e4: 5b:9a:95:f8:c5:fd:4b:0c:f7:6c:bb:20:17:c3:60:30:ab:48: 40:65:18:e3:38:4b:de:ab:d1:50:4f:37:1f:ac:e9:bf:a5:25: 63:fa:92:eb:d3:a2:03:dd:96:7b:59:79:66:5e:ff:fe:4b:ee: 36:fc:39:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji9euN94rt2vRXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGMzYmYzY2EtZDk0Mi00N2ExLWE0OTAtNDA5MmNiMzgzYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjhhQBTFTK103giCKS/yScTocP1tfiEPCk5A 7IZwSHULiJdP4F6s40zlU0H0dlG4zeswY7qR2SWrSaqUal2mECQR0Z9ZOV7YRFkH X1H/w8saPcQMUp9FP69s4DUxnKeGLzS8x7dq5nasx1zBGe3/INte9VvHaJgWKypj 49TRBPfvdN7q9YbJGy+0cACiPptPMVjJl5DIvUkNDvRqhI4gl/zrgrb7pDriLCrP kmXSgUMjqC8VsvIQ7Qb1SmlAL4w6/Wi3NHU14DxDLMQA68F1iCjWh0P63NMyUxXC efYgOi9nASEHapHLh/VSCHZCQZpz1LFsjfIxq88vm67E5kP8uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEqXS4j9d3QsC06uRLcL/ng33A0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU0ZTVhYTgtMzQwMi0z ZWIwLTg0YzAtYzliOWQ1MmY5ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfeWkh5nQi8xJmZfk8EouBRzSUHkUxkGrXPnfHcJsdCqnLd/BQkhHb l0fYcJhTlVPK6GEb03285eQ4YT9FjykL7j7RsUxcYoEwtQvrew/dBnZAYrDeXzGF TksYT/3IP4YQPwBFuSTQWHjeXlao0mbSL4w5G9vD534Rr8+U6e8khA+K96nqvify gLmtCJ2iDPbDxMAl5FuTg2d0CPNztAtBRctGxJYGk0STQTGE24vUwGhxPqVRS/kf ld+nNQhuebo2Ffddi+RbmpX4xf1LDPdsuyAXw2Awq0hAZRjjOEveq9FQTzcfrOm/ pSVj+pLr06ID3ZZ7WXlmXv/+S+42/Dlt -----END CERTIFICATE-----Generated at Fri Sep 25 13:58:08 2026 by rpki-client