$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa File: 1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa (raw, json) Hash identifier: 0Yb7yxK2C7DUFvPAluEPfsofyh7qbnF4G+jtSNdbzXo= Subject key identifier: F4:98:3D:D7:DE:6F:82:C3:EF:E0:8C:DA:F8:F3:02:6B:71:5A:BA:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49880CC194ABE9E356B8B73C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:0c:c1:94:ab:e9:e3:56:b8:b7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f675b05a-5f10-4737-8407-7a1636193287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:9a:87:94:5e:e1:83:c2:68:5b:83:b5:b2: 9a:be:10:7e:5d:0d:8d:f1:00:e2:c5:10:d8:34:33: 6c:5d:66:4f:8c:35:3d:c6:fa:94:18:9d:6e:7c:70: e5:b9:57:72:d4:0d:52:96:bc:e0:d2:91:94:09:f7: 7b:f3:6c:1b:b9:bf:04:91:00:6c:f5:1d:b9:18:22: 7c:59:f8:b7:20:7c:95:6c:40:13:b8:10:ab:c9:99: 0c:e7:f1:2e:4e:59:97:9c:3f:8c:1a:5f:34:0d:1b: a2:6b:33:fb:80:91:f1:63:c5:0c:4e:3c:dc:08:99: 21:72:13:7a:6d:c9:51:a9:5c:81:84:f8:14:32:95: 81:2e:24:f0:1f:68:49:85:bd:17:55:5f:f2:60:e2: 3b:bd:bb:f0:36:7f:47:ba:c0:8f:6a:2e:dc:25:fe: 32:88:07:40:5e:24:2c:4c:95:0e:6c:ba:3c:6e:ba: 08:5b:7a:cd:e4:d1:91:75:04:27:f5:02:8b:f7:77: 62:d5:01:0c:54:4c:f3:34:cd:8e:dd:d6:56:6d:8a: f7:03:fe:e6:5a:08:82:bc:60:96:c1:41:5d:e2:fd: 43:f8:95:eb:bc:99:15:bc:ef:95:f6:5b:7e:22:f8: 96:4a:4a:01:71:c4:08:db:38:3a:92:a0:a7:2f:ff: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:3D:D7:DE:6F:82:C3:EF:E0:8C:DA:F8:F3:02:6B:71:5A:BA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f9:67:55:8b:b4:ff:c5:0d:91:33:e5:62:e1:0c:44:eb:45: dd:a2:93:cb:84:9f:85:79:91:19:91:a5:e3:b2:d6:6f:e0:d2: a7:17:44:f4:9a:50:53:7d:3e:65:49:01:96:29:b8:4c:02:83: dc:c6:03:6a:32:02:ed:84:cf:ab:82:c8:99:73:ef:94:5f:3b: c4:e7:e1:9d:f1:93:c1:55:47:54:ac:c3:08:35:cd:ea:03:ed: b0:da:2f:38:96:47:83:d0:97:6e:d3:28:8d:05:f2:cf:2f:1e: b0:9c:fb:d6:86:c3:ee:81:37:5e:11:a9:c2:e7:03:ac:f8:28: 83:66:23:47:de:8d:2d:d3:ea:7b:3e:16:a7:85:98:90:7d:cb: 6b:78:7b:83:78:9b:13:4b:6e:7b:8d:95:11:26:72:62:b2:39: 64:88:b9:4e:c6:0e:3c:f8:e2:df:e8:cd:eb:f7:07:ca:3c:6f: d7:9c:1a:44:18:eb:e6:f1:b2:04:5e:12:e0:a7:ac:ed:41:73: 36:0c:c4:4a:01:04:7b:59:8f:3b:d4:bc:69:7d:a7:19:1c:be: 1c:32:83:b5:da:f3:d2:ea:ce:1f:98:36:8d:9d:8d:85:4e:da: 3a:af:3e:36:ee:ce:e2:36:9f:26:f1:74:cf:dc:d1:12:1b:54: 8e:2a:01:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiAzBlKvp41a4tzwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY3NWIwNWEtNWYxMC00NzM3LTg0MDctN2ExNjM2MTkzMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdiah5Re4YPCaFuDtbKavhB+XQ2N8QDixRDY NDNsXWZPjDU9xvqUGJ1ufHDluVdy1A1Slrzg0pGUCfd782wbub8EkQBs9R25GCJ8 Wfi3IHyVbEATuBCryZkM5/EuTlmXnD+MGl80DRuiazP7gJHxY8UMTjzcCJkhchN6 bclRqVyBhPgUMpWBLiTwH2hJhb0XVV/yYOI7vbvwNn9HusCPai7cJf4yiAdAXiQs TJUObLo8broIW3rN5NGRdQQn9QKL93di1QEMVEzzNM2O3dZWbYr3A/7mWgiCvGCW wUFd4v1D+JXrvJkVvO+V9lt+IviWSkoBccQI2zg6kqCnL/8cIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPSYPdfeb4LD7+CM2vjzAmtxWrrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE4MTQ1YmQtNGUzMy0z YmZjLWExNjctOWQxYjZhYzE4ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAz+WdVi7T/xQ2RM+Vi4QxE60XdopPLhJ+FeZEZkaXjstZv4NKnF0T0 mlBTfT5lSQGWKbhMAoPcxgNqMgLthM+rgsiZc++UXzvE5+Gd8ZPBVUdUrMMINc3q A+2w2i84lkeD0Jdu0yiNBfLPLx6wnPvWhsPugTdeEanC5wOs+CiDZiNH3o0t0+p7 PhanhZiQfctreHuDeJsTS257jZURJnJisjlkiLlOxg48+OLf6M3r9wfKPG/XnBpE GOvm8bIEXhLgp6ztQXM2DMRKAQR7WY871LxpfacZHL4cMoO12vPS6s4fmDaNnY2F Tto6rz427s7iNp8m8XTP3NESG1SOKgGD -----END CERTIFICATE-----Generated at Wed Oct 7 06:03:53 2026 by rpki-client