$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa File: 0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa (raw, json) Hash identifier: Z7tregfmBN1+y6wFsypM6QRLMIyGVCXH1yPeZgxEwLg= Subject key identifier: AD:F7:B1:13:DC:3E:38:95:FD:E1:F7:84:73:3A:E1:37:23:D9:01:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974C59B0DB8C27E2A24AC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c5:9b:0d:b8:c2:7e:2a:24:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb086e7f-33d8-424e-974b-2445e449002a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:96:34:21:b4:1d:73:a5:c3:3c:59:78:1a: 74:8f:99:ac:50:14:c7:79:a9:77:cd:81:03:51:34: 6a:b1:70:ba:17:f4:fc:d7:1c:4d:39:37:d0:ee:e0: aa:e6:f5:fc:55:14:94:06:9b:1d:bc:8a:3b:79:66: 9c:82:1b:e8:4e:40:de:78:9b:7d:1e:6b:3b:0a:e8: 6a:91:f2:99:ef:60:b2:a3:34:04:c4:f4:cd:d8:ad: 0c:25:9b:bc:16:eb:36:dd:df:54:6d:40:2f:f6:3e: 1a:38:b3:bd:d9:bb:50:48:62:fc:91:d1:81:11:ce: e7:44:6e:7f:a8:15:04:d9:dd:8b:6b:15:98:3d:61: dc:69:c7:65:b7:10:02:02:6e:b5:6a:0e:02:ab:30: 59:dd:f2:40:f2:bc:17:21:06:41:b7:cb:be:e1:04: 8f:33:66:53:42:f2:ad:78:04:b4:b1:c1:d1:ac:80: 21:37:64:a4:36:25:da:01:0e:c5:53:5c:0f:bb:3b: e5:08:1b:4a:0d:bd:31:4a:23:c6:bf:ac:4f:0d:57: 6a:aa:b1:c4:69:bf:df:cb:20:de:9d:bc:aa:a6:eb: ed:ec:3c:60:4a:6a:65:73:1f:12:04:04:a9:d4:5a: c4:86:b2:9f:fb:83:77:43:21:4d:33:4b:84:27:ec: db:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F7:B1:13:DC:3E:38:95:FD:E1:F7:84:73:3A:E1:37:23:D9:01:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3f:ca:fd:ac:ba:d0:54:07:6c:85:12:62:18:ce:2a:fa:96: 94:31:c8:dd:a2:21:4a:b4:15:6f:67:cc:a1:77:91:e1:9c:0a: ed:1b:77:3c:74:5b:1e:10:9a:02:44:bd:e2:05:b4:f4:0a:82: 58:d3:35:85:a7:a5:93:91:52:e5:e2:59:88:db:61:be:7e:d6: 5f:3b:b6:22:67:d1:24:6c:94:fb:a7:eb:e8:11:44:44:17:3c: bd:3a:a2:5c:45:6f:69:b8:4a:35:21:48:c8:bd:b7:a1:5c:73: 9a:79:79:c0:4d:fa:cb:6c:7f:b8:36:34:ec:ee:af:85:94:30: f9:2f:a6:60:e7:ab:0c:35:07:07:e5:cb:e6:db:a6:05:c0:2c: 60:d5:72:99:95:6f:0f:79:e9:81:96:27:0f:64:d6:c8:3b:a8: ab:ca:e7:5e:de:e0:6b:a1:d5:1f:14:92:49:ab:3e:07:62:24: 52:e7:3f:a7:b2:0c:17:94:e0:fa:1a:fe:a6:77:0d:56:17:c0: 72:aa:52:41:9d:07:19:91:10:31:9d:d0:9c:6a:09:24:b5:ed: 57:98:b4:88:e0:09:17:b2:75:c7:0d:15:05:62:af:90:1b:24: 59:bb:39:ba:e6:2a:02:97:b0:c9:05:f1:66:b9:83:5e:b6:a5: 8f:14:ff:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMWbDbjCfiokrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmIwODZlN2YtMzNkOC00MjRlLTk3NGItMjQ0NWU0NDkwMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhASWNCG0HXOlwzxZeBp0j5msUBTHeal3zYED UTRqsXC6F/T81xxNOTfQ7uCq5vX8VRSUBpsdvIo7eWacghvoTkDeeJt9Hms7Cuhq kfKZ72CyozQExPTN2K0MJZu8Fus23d9UbUAv9j4aOLO92btQSGL8kdGBEc7nRG5/ qBUE2d2LaxWYPWHcacdltxACAm61ag4CqzBZ3fJA8rwXIQZBt8u+4QSPM2ZTQvKt eAS0scHRrIAhN2SkNiXaAQ7FU1wPuzvlCBtKDb0xSiPGv6xPDVdqqrHEab/fyyDe nbyqpuvt7DxgSmplcx8SBASp1FrEhrKf+4N3QyFNM0uEJ+zb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK33sRPcPjiV/eH3hHM64Tcj2QFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQ1NmRjZGUtODZjMC0z ZWYwLWE3MmYtNTlmZmNjNDUyZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU/yv2sutBUB2yFEmIYzir6lpQxyN2iIUq0FW9nzKF3keGcCu0bdzx0 Wx4QmgJEveIFtPQKgljTNYWnpZORUuXiWYjbYb5+1l87tiJn0SRslPun6+gRREQX PL06olxFb2m4SjUhSMi9t6Fcc5p5ecBN+stsf7g2NOzur4WUMPkvpmDnqww1Bwfl y+bbpgXALGDVcpmVbw956YGWJw9k1sg7qKvK517e4Guh1R8UkkmrPgdiJFLnP6ey DBeU4Poa/qZ3DVYXwHKqUkGdBxmREDGd0JxqCSS17VeYtIjgCReydccNFQVir5Ab JFm7ObrmKgKXsMkF8Wa5g162pY8U/yk= -----END CERTIFICATE-----Generated at Wed Oct 7 21:46:04 2026 by rpki-client