$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa File: fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa (raw, json) Hash identifier: BcZ40QnS+u4iZYvhU96pAQuXgYotvKjloU13CzVsZow= Subject key identifier: 3B:0F:68:8C:EF:D8:FC:6E:CB:3C:D4:7E:59:74:94:DC:A3:CD:3A:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497490A8E78CB49ADAC8D400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396573 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:90:a8:e7:8c:b4:9a:da:c8:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fe0c714a-d01c-4c2d-a561-18b03b35e825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:01:b1:70:05:9a:27:7f:c7:5a:09:6e:35: 61:85:b4:a7:7f:64:7e:76:ea:ce:ad:cd:bc:1b:3c: 94:56:b9:55:aa:1e:34:59:3d:82:4c:5d:46:a4:7f: f6:c1:a7:a2:09:4b:37:e3:04:06:27:ff:1f:b9:13: 79:4b:57:0e:c8:66:bf:48:00:89:da:09:f0:59:79: 68:4b:a8:b9:87:23:ba:53:93:30:8c:bf:c8:b3:0c: 39:12:9e:af:fa:41:18:54:02:f6:73:d3:38:74:6f: 83:11:60:3b:1e:c5:b6:b1:03:05:7b:b5:32:61:75: e2:6f:e8:cf:29:1b:7e:b4:c1:60:2a:b3:54:a2:96: a2:fb:12:ce:e3:81:18:e8:6d:0b:25:f5:2d:a9:c0: 21:07:e1:c3:e1:26:67:75:3a:ca:b4:ed:5b:fa:74: d4:81:7f:b2:0b:58:a2:7a:7f:90:12:42:df:59:62: b8:e8:49:8e:34:73:3c:36:fd:4b:3e:ce:27:9b:75: 2e:4d:c1:0a:55:53:7b:23:38:ed:5a:a2:b9:f3:90: 09:61:3e:35:21:52:fb:b3:60:b6:0b:94:8b:51:06: 33:dc:9d:5c:fb:01:f8:22:fb:fa:43:25:b2:8b:0a: ea:4e:e2:9d:1c:9a:2a:b6:b1:29:6d:f5:78:e7:b3: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:68:8C:EF:D8:FC:6E:CB:3C:D4:7E:59:74:94:DC:A3:CD:3A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:dd:d1:50:ec:a9:7a:42:7f:77:0c:c0:ea:dc:21:c7:93:c2: 3f:65:e4:b9:df:4e:c2:06:62:7a:ba:34:0f:4b:f7:d0:07:c9: b9:08:09:98:95:74:86:20:61:bd:e2:c9:86:a0:ca:f3:77:a4: 74:da:cb:00:1c:de:95:0e:10:38:11:47:f4:1b:71:6a:bd:23: 4d:07:65:da:da:ae:69:8f:eb:ef:03:84:de:b3:e1:e4:07:5f: fc:31:f0:88:50:41:09:94:c6:4d:0f:7d:b0:12:6b:42:69:ee: 7a:42:63:a8:8a:6f:ab:33:ab:eb:69:e1:f9:54:4b:44:72:a9: ac:30:0f:34:0a:48:a9:1f:33:8a:58:9b:1c:5b:0c:0d:f6:9d: f2:81:22:a8:c8:b8:c6:ed:ec:67:5e:bf:10:1a:df:8d:54:00: 81:5f:e6:71:28:ad:68:a3:d3:3c:86:c4:02:81:15:b0:ed:df: a8:75:ab:f3:23:d2:e1:59:55:4c:e5:7b:76:cf:4e:ec:5c:ed: fc:da:e7:48:c0:31:e9:b6:e4:cb:f2:fd:23:08:e0:c7:46:e2: 03:82:a5:e6:0b:fc:a9:c9:e3:84:e1:86:a9:09:de:2e:be:d8: a1:c9:df:df:9b:36:a9:4e:53:df:d1:27:3d:84:97:81:71:2c: 76:4e:ff:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJCo54y0mtrI1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmUwYzcxNGEtZDAxYy00YzJkLWE1NjEtMThiMDNiMzVlODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouIBsXAFmid/x1oJbjVhhbSnf2R+durOrc28 GzyUVrlVqh40WT2CTF1GpH/2waeiCUs34wQGJ/8fuRN5S1cOyGa/SACJ2gnwWXlo S6i5hyO6U5MwjL/Isww5Ep6v+kEYVAL2c9M4dG+DEWA7HsW2sQMFe7UyYXXib+jP KRt+tMFgKrNUopai+xLO44EY6G0LJfUtqcAhB+HD4SZndTrKtO1b+nTUgX+yC1ii en+QEkLfWWK46EmONHM8Nv1LPs4nm3UuTcEKVVN7IzjtWqK585AJYT41IVL7s2C2 C5SLUQYz3J1c+wH4Ivv6QyWyiwrqTuKdHJoqtrEpbfV457OyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsPaIzv2PxuyzzUfll0lNyjzTo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM3MjhjYTUtZmU0Zi0z ODc5LWIzYWItZjMwMGE1ZjBlM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbd0VDsqXpCf3cMwOrcIceTwj9l5LnfTsIGYnq6NA9L99AHybkICZiV dIYgYb3iyYagyvN3pHTaywAc3pUOEDgRR/QbcWq9I00HZdrarmmP6+8DhN6z4eQH X/wx8IhQQQmUxk0PfbASa0Jp7npCY6iKb6szq+tp4flUS0RyqawwDzQKSKkfM4pY mxxbDA32nfKBIqjIuMbt7GdevxAa341UAIFf5nEorWij0zyGxAKBFbDt36h1q/Mj 0uFZVUzle3bPTuxc7fza50jAMem25Mvy/SMI4MdG4gOCpeYL/KnJ44ThhqkJ3i6+ 2KHJ39+bNqlOU9/RJz2El4FxLHZO/84= -----END CERTIFICATE-----Generated at Sun Sep 27 09:56:21 2026 by rpki-client