$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa File: 0794eaf1-85e9-34a1-a33e-365cf7de1078.roa (raw, json) Hash identifier: m9T4ya6ijZ+xlsGkQVOn0CE26o2h2V3Iuy9bLarnkCw= Subject key identifier: DF:98:98:7F:35:F2:DD:35:E7:06:1A:E5:C7:EF:B5:40:28:C7:56:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972EF03E8B07D4CF3558A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396609 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ef:03:e8:b0:7d:4c:f3:55:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b72722a-e8df-42c6-bfd3-58bc20e225b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:e4:42:61:ae:a0:b1:47:d8:af:96:1a:1c: 5f:1e:23:03:30:2d:70:81:e0:d7:aa:e7:eb:de:ee: d3:1f:29:94:28:82:48:62:09:65:a2:6f:86:3f:ed: 27:06:1e:21:9b:3c:e6:61:76:7a:ca:68:3f:ae:87: bd:67:5a:43:68:b1:da:2c:3d:b9:9b:dc:6c:7a:df: 9a:51:ae:05:78:99:32:ec:f5:d1:a9:3b:63:f1:ff: fe:e7:2a:e1:ec:f9:b3:53:64:3c:87:0f:8c:64:1e: 55:70:95:23:0a:d1:72:1e:d0:b9:e9:9d:38:95:5c: 72:a6:a4:64:34:86:9b:4b:02:b1:27:81:97:50:cd: bc:55:d7:36:50:76:5c:87:d2:80:76:af:a8:c7:13: ff:49:2c:7e:3a:44:31:84:cd:ff:5b:90:fd:d1:ae: ec:1a:6a:ae:bf:ae:e7:4d:d9:76:2a:c9:b6:a3:30: 9f:1f:2c:d2:fd:27:36:a2:8a:b1:d7:52:81:7e:75: 64:4a:6f:3c:af:69:af:e6:81:7d:a5:07:ad:0e:fd: 7b:a4:a8:f6:a3:ee:33:43:37:e0:ef:dd:6d:e2:7c: bd:9f:fd:a2:f1:b2:41:90:ae:dc:1c:f3:9e:8a:4b: 60:d6:ec:2d:2e:8c:fe:44:21:f7:8e:1f:8f:d8:55: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:98:98:7F:35:F2:DD:35:E7:06:1A:E5:C7:EF:B5:40:28:C7:56:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0794eaf1-85e9-34a1-a33e-365cf7de1078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:80:a1:63:fe:87:07:58:9a:7a:a7:7e:1a:1e:8e:a8:49:5b: 02:a5:49:2e:68:58:e9:fb:34:02:15:53:2a:66:52:1d:7b:76: 1d:da:23:9d:3a:86:b7:91:ba:7f:31:ae:63:4a:68:5d:06:b9: 9b:26:40:14:c7:b3:99:c8:2c:3f:18:58:37:6b:91:d6:96:ef: 1f:13:13:a4:db:9b:9a:98:6b:c5:a9:30:72:5a:92:ee:d0:87: 8b:07:13:1e:bb:46:f8:f9:b4:b1:cf:0e:9a:6b:a0:a7:d4:5d: 59:df:0f:e5:ee:ea:89:d2:05:04:31:62:e6:f1:19:52:4a:8d: 9f:b6:b4:83:80:c1:02:49:da:9d:bd:1a:c7:7d:00:6a:0f:64: 84:42:a8:46:f4:ef:ce:e2:06:8b:40:57:c8:e3:e8:38:36:60: b1:dd:7b:86:77:2f:e6:25:cc:b1:1a:42:94:df:a8:73:f1:3c: 54:c8:db:54:3c:9f:19:b4:49:1b:ec:19:04:de:b0:6b:7f:a7: 23:8b:5b:91:38:3b:d3:88:d9:de:9d:01:55:77:e3:62:6c:01: 98:b8:d8:7b:eb:79:93:00:06:ec:d2:1a:6e:a7:77:41:11:2d: e6:06:00:24:21:82:5e:e6:0a:c4:a4:89:e1:eb:d8:b3:42:8d: 63:28:84:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jcu8D6LB9TPNVioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI3MjcyMmEtZThkZi00MmM2LWJmZDMtNThiYzIwZTIyNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLjkQmGuoLFH2K+WGhxfHiMDMC1wgeDXqufr 3u7THymUKIJIYgllom+GP+0nBh4hmzzmYXZ6ymg/roe9Z1pDaLHaLD25m9xset+a Ua4FeJky7PXRqTtj8f/+5yrh7PmzU2Q8hw+MZB5VcJUjCtFyHtC56Z04lVxypqRk NIabSwKxJ4GXUM28Vdc2UHZch9KAdq+oxxP/SSx+OkQxhM3/W5D90a7sGmquv67n Tdl2Ksm2ozCfHyzS/Sc2ooqx11KBfnVkSm88r2mv5oF9pQetDv17pKj2o+4zQzfg 791t4ny9n/2i8bJBkK7cHPOeiktg1uwtLoz+RCH3jh+P2FWzXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN+YmH818t015wYa5cfvtUAox1YQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDc5NGVhZjEtODVlOS0z NGExLWEzM2UtMzY1Y2Y3ZGUxMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsgKFj/ocHWJp6p34aHo6oSVsCpUkuaFjp+zQCFVMqZlIde3Yd2iOd Ooa3kbp/Ma5jSmhdBrmbJkAUx7OZyCw/GFg3a5HWlu8fExOk25uamGvFqTByWpLu 0IeLBxMeu0b4+bSxzw6aa6Cn1F1Z3w/l7uqJ0gUEMWLm8RlSSo2ftrSDgMECSdqd vRrHfQBqD2SEQqhG9O/O4gaLQFfI4+g4NmCx3XuGdy/mJcyxGkKU36hz8TxUyNtU PJ8ZtEkb7BkE3rBrf6cji1uRODvTiNnenQFVd+NibAGYuNh763mTAAbs0hpup3dB ES3mBgAkIYJe5grEpInh69izQo1jKITK -----END CERTIFICATE-----Generated at Tue Oct 6 11:41:58 2026 by rpki-client