$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa File: fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa (raw, json) Hash identifier: Av1L41A9Ri4iSAQrJ7flxhlZaPY6AH6M5b4qAjsCzsk= Subject key identifier: 05:81:2E:02:81:6E:12:C2:CC:F8:D7:BB:34:93:B5:AF:82:EC:22:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498892C58FA37FC7D20D2B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40647 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:92:c5:8f:a3:7f:c7:d2:0d:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1fce9f38-f60e-4c01-82c0-fffc2b04ed34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c5:67:df:96:38:a6:8f:2d:62:e8:46:05:92: 3d:ea:e3:d6:97:af:b4:ce:10:d8:f4:bb:74:33:cd: b0:10:87:d9:5d:54:73:01:aa:cc:ab:da:a6:18:1f: 60:26:2c:03:d0:f2:30:45:68:b6:54:13:2a:a2:a7: 42:3b:c6:e1:80:f6:48:db:97:97:b9:db:08:15:1c: f5:25:6d:ea:33:62:8b:9b:f4:46:43:cc:c8:d8:43: 42:3c:24:94:34:b2:32:d1:bb:43:f3:df:af:4a:1e: cc:5b:be:01:9e:7a:c9:f3:28:16:3f:17:33:04:ee: 71:62:46:ba:02:4a:5d:50:d3:6d:6b:e1:95:b4:83: 92:2f:f3:6d:1b:2a:e5:c1:2a:4c:2f:87:06:01:76: c9:69:81:a9:71:f8:9e:3b:5c:a4:41:cc:92:31:6e: ff:aa:1f:88:af:87:af:75:77:1b:d4:d6:a8:41:b9: c6:2e:d8:88:56:3c:fa:70:41:c8:59:b6:3c:30:aa: ac:94:d5:78:a9:73:ea:09:84:fa:b5:ff:cc:d0:33: 50:5e:e3:ba:26:33:a1:f6:24:71:80:73:7f:a2:97: 06:1b:15:d7:8f:f4:dc:bb:6b:55:e3:71:0e:23:6c: 41:6d:e8:e3:e4:9f:81:67:c1:26:ff:b2:3d:7f:46: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:81:2E:02:81:6E:12:C2:CC:F8:D7:BB:34:93:B5:AF:82:EC:22:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb50c96d-742f-30cb-b08b-a7d40fab69c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b5:a4:b0:ad:3d:5c:53:8f:fd:e3:4b:51:c7:59:f1:dc:75: 2f:5d:9e:41:60:73:ad:18:a1:79:6a:32:26:a7:2d:73:b8:bb: 93:86:a1:b4:84:98:0b:0d:28:f5:2e:7e:3f:17:18:af:58:da: 23:9f:de:f8:1d:90:ba:93:eb:56:c6:23:47:90:ed:c8:18:22: 10:ac:af:b0:45:73:5d:9d:7c:a0:25:1b:b9:11:7c:6a:66:13: 45:83:31:31:ac:1f:5e:42:0e:9b:83:26:6d:82:54:a3:43:8b: 0b:79:4e:f2:c0:44:ce:e2:87:6d:20:2f:b1:c9:2f:ed:4b:a9: c5:33:b0:12:d7:5b:66:44:1a:87:e8:2a:49:ef:19:7e:b9:bd: 63:5f:1d:f1:06:a7:c0:73:a1:f1:bf:69:03:c7:69:19:71:02: 6a:a2:a4:6e:84:63:f0:42:51:f3:f8:04:5b:c4:18:c2:89:9c: df:23:8f:f4:bf:e1:f5:99:11:bf:8e:2e:f6:15:76:d2:e5:d4: d1:5f:b4:57:cf:5d:12:f9:35:8c:82:ee:47:5f:78:a8:0a:d5: 18:d0:ea:40:fb:8f:7f:bf:94:1a:53:ba:80:3d:41:09:44:f1: 42:23:05:62:a7:a5:49:7d:05:cd:d3:11:ac:b3:3f:ac:db:7e: 27:0e:78:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiJLFj6N/x9INKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZjZTlmMzgtZjYwZS00YzAxLTgyYzAtZmZmYzJiMDRlZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cVn35Y4po8tYuhGBZI96uPWl6+0zhDY9Lt0 M82wEIfZXVRzAarMq9qmGB9gJiwD0PIwRWi2VBMqoqdCO8bhgPZI25eXudsIFRz1 JW3qM2KLm/RGQ8zI2ENCPCSUNLIy0btD89+vSh7MW74BnnrJ8ygWPxczBO5xYka6 AkpdUNNta+GVtIOSL/NtGyrlwSpML4cGAXbJaYGpcfieO1ykQcySMW7/qh+Ir4ev dXcb1NaoQbnGLtiIVjz6cEHIWbY8MKqslNV4qXPqCYT6tf/M0DNQXuO6JjOh9iRx gHN/opcGGxXXj/Tcu2tV43EOI2xBbejj5J+BZ8Em/7I9f0a1BQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAWBLgKBbhLCzPjXuzSTta+C7CKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI1MGM5NmQtNzQyZi0z MGNiLWIwOGItYTdkNDBmYWI2OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAKtaSwrT1cU4/940tRx1nx3HUvXZ5BYHOtGKF5ajImpy1zuLuThqG0 hJgLDSj1Ln4/FxivWNojn974HZC6k+tWxiNHkO3IGCIQrK+wRXNdnXygJRu5EXxq ZhNFgzExrB9eQg6bgyZtglSjQ4sLeU7ywETO4odtIC+xyS/tS6nFM7AS11tmRBqH 6CpJ7xl+ub1jXx3xBqfAc6Hxv2kDx2kZcQJqoqRuhGPwQlHz+ARbxBjCiZzfI4/0 v+H1mRG/ji72FXbS5dTRX7RXz10S+TWMgu5HX3ioCtUY0OpA+49/v5QaU7qAPUEJ RPFCIwVip6VJfQXN0xGssz+s234nDngp -----END CERTIFICATE-----Generated at Fri Sep 25 18:32:08 2026 by rpki-client