$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa File: fc9d0554-14cc-3f05-8a60-2fb32042582f.roa (raw, json) Hash identifier: GBvVxyYFs/CEoRrQOACk6ZwNAl/QpLKJoSUhHVbtotU= Subject key identifier: EE:50:E5:65:F7:4F:10:8E:B1:7A:FA:FE:88:CD:EC:70:17:DF:06:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B6BDFDD0AF5A926006280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:6b:df:dd:0a:f5:a9:26:00:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a92e6d2-621f-4e22-b3ff-e15014beba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:e2:c2:45:67:e2:ee:0e:66:db:12:41:9c: f5:f9:ca:a1:f0:34:1e:d4:a8:46:14:f2:1b:e1:2d: 94:f0:2f:96:d6:14:62:fd:1f:78:42:40:20:b4:9f: 45:d0:cb:e1:c3:cb:85:88:dd:b6:f7:02:fa:5a:17: ea:cb:1f:59:14:7a:6c:21:ab:40:d8:97:46:3e:12: 34:10:5b:55:aa:95:e4:f1:d9:3a:d9:5f:a1:b7:e8: cc:3d:2e:3e:e0:81:51:0b:c1:d6:f3:94:25:d4:ee: 8d:10:10:c0:92:5f:99:b4:b6:80:88:87:f0:5b:bf: 77:89:7b:0b:88:9f:3a:da:81:5c:b9:6b:bc:db:4d: 66:4c:51:a3:ac:16:0a:cc:b2:a3:50:a2:6e:a2:75: 1f:83:4d:2c:b2:7a:61:8f:d0:b1:28:65:13:ac:4d: e5:fa:74:20:bb:b9:9c:a4:a7:e8:1b:96:87:2e:ba: 2c:64:50:7e:2a:37:97:ec:c7:19:d5:5e:a9:83:5b: e7:81:11:5e:6e:6f:e2:d9:16:3e:a6:02:0a:ec:2c: 87:17:3d:d0:0d:de:62:ff:b5:da:c6:17:91:7d:ed: 0a:a6:80:54:64:dd:ae:45:2a:d7:f3:7b:10:c3:59: b9:54:e3:8d:84:02:08:bd:c1:7c:67:7d:40:36:af: 06:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:50:E5:65:F7:4F:10:8E:B1:7A:FA:FE:88:CD:EC:70:17:DF:06:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc9d0554-14cc-3f05-8a60-2fb32042582f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e3:da:9d:38:c3:2b:56:44:ad:b3:ef:2a:ba:11:da:58:56: 7a:50:1c:13:70:40:cf:a3:35:28:10:60:64:a9:03:eb:a1:48: 47:bc:9c:d5:12:59:2b:ea:39:77:25:5b:63:d9:30:a6:80:36: 79:19:e9:52:c2:c5:6d:66:0c:dd:58:97:95:87:24:11:74:8e: 04:61:36:94:38:1d:dc:b8:69:5f:75:36:80:00:82:14:e2:4e: d6:c8:60:b3:17:0a:06:54:14:dc:96:ce:81:e8:76:02:04:b6: da:bc:34:09:a1:94:e0:30:57:39:ca:ba:c6:7a:db:12:6e:01: 3b:c8:ff:07:70:76:4a:bc:85:ea:ea:cf:f3:27:4c:72:ad:db: 6e:25:4c:36:03:a4:cd:ab:fa:1b:77:e3:59:62:6d:48:fa:99: 58:e1:d6:03:47:74:f9:89:8f:65:77:d1:d3:35:1d:e0:b2:5b: e3:fd:4b:66:98:fa:10:be:c6:31:5e:4c:59:ce:d8:fd:f9:e4: a4:0a:cf:0f:a6:28:2b:f1:25:ba:63:1f:71:f0:18:71:d9:59: d1:8d:fd:fc:bc:af:b5:d7:52:9e:31:f9:66:47:56:c0:e4:5e: 0f:ad:b5:d1:ee:35:4b:43:74:d1:f9:7b:25:7d:e5:67:8f:a4: 45:f1:e6:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji2vf3Qr1qSYAYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE5MmU2ZDItNjIxZi00ZTIyLWIzZmYtZTE1MDE0YmViYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwviwkVn4u4OZtsSQZz1+cqh8DQe1KhGFPIb 4S2U8C+W1hRi/R94QkAgtJ9F0Mvhw8uFiN229wL6Whfqyx9ZFHpsIatA2JdGPhI0 EFtVqpXk8dk62V+ht+jMPS4+4IFRC8HW85Ql1O6NEBDAkl+ZtLaAiIfwW793iXsL iJ862oFcuWu8201mTFGjrBYKzLKjUKJuonUfg00ssnphj9CxKGUTrE3l+nQgu7mc pKfoG5aHLrosZFB+KjeX7McZ1V6pg1vngRFebm/i2RY+pgIK7CyHFz3QDd5i/7Xa xheRfe0KpoBUZN2uRSrX83sQw1m5VOONhAIIvcF8Z31ANq8GUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO5Q5WX3TxCOsXr6/ojN7HAX3wYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM5ZDA1NTQtMTRjYy0z ZjA1LThhNjAtMmZiMzIwNDI1ODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAk49qdOMMrVkSts+8quhHaWFZ6UBwTcEDPozUoEGBkqQProUhHvJzV Elkr6jl3JVtj2TCmgDZ5GelSwsVtZgzdWJeVhyQRdI4EYTaUOB3cuGlfdTaAAIIU 4k7WyGCzFwoGVBTcls6B6HYCBLbavDQJoZTgMFc5yrrGetsSbgE7yP8HcHZKvIXq 6s/zJ0xyrdtuJUw2A6TNq/obd+NZYm1I+plY4dYDR3T5iY9ld9HTNR3gslvj/Utm mPoQvsYxXkxZztj9+eSkCs8Ppigr8SW6Yx9x8Bhx2VnRjf38vK+111KeMflmR1bA 5F4PrbXR7jVLQ3TR+XslfeVnj6RF8eal -----END CERTIFICATE-----Generated at Sun Sep 27 08:03:04 2026 by rpki-client