$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa File: 193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa (raw, json) Hash identifier: /9IZMLzVciLiGGqPD05RFQwwRlkff13Gz38J1LjKdvQ= Subject key identifier: 19:8B:89:5C:76:6A:52:3C:9C:97:D3:68:51:83:8C:6C:3B:4C:9A:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49894AB1344216AC4FC1CDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396583 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:4a:b1:34:42:16:ac:4f:c1:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c88a2e10-e81a-435b-9f46-7779f0a8ac08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:34:ae:10:a5:74:43:5f:05:13:e0:32:3e: ea:9f:2d:b1:b7:7c:ad:ec:1d:69:58:2e:b3:ae:5e: c3:b9:71:b1:c2:03:69:6c:69:36:75:1e:7a:b2:72: c3:31:a4:2d:2b:96:1a:40:34:b8:c3:35:d6:cc:bb: fb:6b:90:74:f9:93:a7:77:7f:82:cb:1f:98:51:f5: 7b:fa:1d:39:18:e3:fd:54:e5:07:5c:b2:c6:15:fe: 5a:27:07:59:dd:aa:02:72:e4:41:2a:c7:83:8c:cc: a1:25:18:45:de:47:10:84:6f:88:ad:ce:0c:a8:5e: 42:9b:a7:5d:50:21:7e:00:d0:45:f5:56:44:43:46: 9d:e7:bd:32:39:53:bf:e4:3e:35:42:48:95:4e:f6: f6:63:bd:0f:21:74:bb:cf:7f:72:88:62:c3:8b:04: 5c:8c:ab:87:13:f1:eb:ef:d2:2a:df:0b:5e:e1:6c: a2:31:ed:0d:77:46:b6:7f:20:ae:ea:5b:ce:f0:fd: 8c:47:3d:fd:c0:a3:fe:26:55:a9:76:67:3e:63:2f: 0e:88:34:b6:bf:1f:4b:81:48:b9:20:cb:34:51:dc: f1:84:b2:f6:32:f5:53:05:a0:8f:70:3b:a5:c9:a5: ff:d2:76:82:58:e8:77:46:5d:49:9d:cb:b6:42:b9: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:89:5C:76:6A:52:3C:9C:97:D3:68:51:83:8C:6C:3B:4C:9A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/193f9a73-859c-38a7-ad84-bf7b7cd3a450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2e:ca:3b:d1:73:9a:d0:0b:b5:58:38:5b:d1:1c:3e:f2:82: 03:65:ca:ad:d5:aa:ee:a6:73:c5:3e:e3:ac:0b:76:f0:38:79: 00:86:3c:5f:61:5f:1a:5d:63:cc:34:74:e0:b1:33:c3:9b:33: 13:17:20:7a:a3:80:56:30:dd:f0:39:0f:75:06:52:78:c9:0b: cf:c8:90:31:31:5c:49:6e:93:97:f6:8f:a1:80:44:4a:47:c3: ff:40:87:2e:c4:62:4b:c3:ef:1e:84:06:88:d6:ca:54:9d:d7: c5:bc:a7:f0:f3:62:d1:53:5d:36:69:f0:98:9f:88:31:e3:87: 62:92:89:3b:73:26:64:7c:c4:65:0f:d0:43:61:b1:6a:97:01: 40:9f:b0:b3:25:39:00:3d:d6:76:1b:97:2c:ad:3b:11:53:7c: a9:40:11:0c:59:99:de:6c:57:2d:5e:d6:02:b9:c8:79:c2:c2: b4:1d:6f:38:5f:b2:4b:2e:ba:a5:cf:0c:c3:f1:97:7e:a1:8e: a4:f7:5c:44:d4:41:38:c6:45:67:38:40:8b:18:48:91:8e:0f: 92:ff:f9:c6:1c:80:d0:3a:79:e0:26:b7:bf:b7:6f:1d:36:ac: 75:d5:69:b1:a1:b9:84:69:57:de:a0:15:82:39:2a:35:c1:16: 87:c4:85:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiUqxNEIWrE/BzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg4YTJlMTAtZTgxYS00MzViLTlmNDYtNzc3OWYwYThhYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvo0rhCldENfBRPgMj7qny2xt3yt7B1pWC6z rl7DuXGxwgNpbGk2dR56snLDMaQtK5YaQDS4wzXWzLv7a5B0+ZOnd3+Cyx+YUfV7 +h05GOP9VOUHXLLGFf5aJwdZ3aoCcuRBKseDjMyhJRhF3kcQhG+Irc4MqF5Cm6dd UCF+ANBF9VZEQ0ad570yOVO/5D41QkiVTvb2Y70PIXS7z39yiGLDiwRcjKuHE/Hr 79Iq3wte4WyiMe0Nd0a2fyCu6lvO8P2MRz39wKP+JlWpdmc+Yy8OiDS2vx9LgUi5 IMs0UdzxhLL2MvVTBaCPcDulyaX/0naCWOh3Rl1Jncu2QrlaVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBmLiVx2alI8nJfTaFGDjGw7TJrnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkzZjlhNzMtODU5Yy0z OGE3LWFkODQtYmY3YjdjZDNhNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjLso70XOa0Au1WDhb0Rw+8oIDZcqt1arupnPFPuOsC3bwOHkAhjxf YV8aXWPMNHTgsTPDmzMTFyB6o4BWMN3wOQ91BlJ4yQvPyJAxMVxJbpOX9o+hgERK R8P/QIcuxGJLw+8ehAaI1spUndfFvKfw82LRU102afCYn4gx44dikok7cyZkfMRl D9BDYbFqlwFAn7CzJTkAPdZ2G5csrTsRU3ypQBEMWZnebFctXtYCuch5wsK0HW84 X7JLLrqlzwzD8Zd+oY6k91xE1EE4xkVnOECLGEiRjg+S//nGHIDQOnngJre/t28d Nqx11WmxobmEaVfeoBWCOSo1wRaHxIWf -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:36 2026 by rpki-client