$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: oY4YnbUhheqlbbdjmLvLOis5lQM4gjhsQ6w4QRSw8tA= Subject key identifier: 2F:F1:E0:C7:43:B5:C6:7A:0E:2D:A7:50:38:74:19:6D:5A:CE:01:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498884E5B9E860348D68F180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:84:e5:b9:e8:60:34:8d:68:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3e7fa25-b363-4255-9a9a-6517f5804e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:32:28:d6:2d:9d:97:4d:3e:92:8e:d4:67: ed:9c:1d:35:2a:c0:d8:13:73:b1:65:e3:25:a1:04: aa:bb:ae:5d:82:29:8a:34:fd:17:de:fc:53:a4:04: a6:cd:70:55:86:c5:4c:68:da:23:3e:95:0c:e6:94: 43:c2:b5:68:87:c9:6e:09:2a:81:1b:f1:89:bd:43: bc:5c:2e:4e:ae:4a:b0:da:cc:00:33:23:e8:90:24: 0f:79:23:2c:1b:89:ba:73:63:f3:ea:6b:4a:f4:ee: 05:a6:5f:2a:34:10:31:29:5f:10:a4:d9:1e:55:e6: f5:73:e4:ef:11:b9:bd:06:97:25:59:5f:88:dd:f8: ce:2c:88:99:83:16:3c:9e:1c:ec:d8:2a:06:ca:70: e2:cd:3c:b9:86:d7:78:ed:8b:a9:20:77:a8:ac:c8: a5:25:b7:63:dd:06:6c:73:8a:1f:8b:bb:b6:1a:50: 01:d2:aa:cc:3e:65:c4:d8:3a:1a:aa:47:2d:e5:bc: a5:2f:a2:7f:a7:97:89:d8:82:08:a2:71:67:1d:e5: 8c:31:34:86:eb:fd:47:27:03:f2:79:a4:56:e1:6b: 8d:15:a7:7a:95:c7:8f:96:4c:d4:74:1b:04:d2:e9: 2a:40:92:e9:bb:96:a4:76:dc:38:21:e9:bf:07:67: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F1:E0:C7:43:B5:C6:7A:0E:2D:A7:50:38:74:19:6D:5A:CE:01:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f1:0e:5f:60:c1:06:ab:2d:40:b4:8b:d4:81:a3:d5:d9:a3: 50:60:c8:b0:a3:c5:cc:95:f1:27:0f:14:88:80:36:bc:1b:9e: f9:f7:86:97:c2:e6:e8:4b:81:4a:85:c8:a1:63:cd:99:b5:2a: 6f:45:b5:64:fd:d2:0b:1f:60:31:f9:f3:40:0f:2e:85:85:8d: 18:6d:1b:7a:ba:6a:ed:96:89:b9:7a:d2:e9:5f:5e:c4:c7:8c: c8:1b:b0:39:9b:3a:7a:ba:93:98:f5:92:83:34:e1:c5:83:cc: a1:2d:38:c0:16:b0:c4:ac:23:72:0e:65:34:86:68:ce:0b:ef: 9c:b8:34:e7:11:ee:7f:e4:eb:ea:d1:1a:f7:f8:bf:18:a5:d6: 2a:24:61:28:d0:d9:3b:12:9d:de:12:b0:0a:1a:b9:e9:ca:c6: d2:b1:a8:2a:42:6c:de:5e:b3:0e:02:bf:75:67:4b:64:5f:9c: 75:4e:0c:a1:fa:30:58:78:fe:52:4a:b5:4f:30:67:13:27:bc: c7:6a:43:a6:ad:16:84:2b:99:14:cf:e4:50:89:7c:6a:b2:9b: c8:55:b7:83:0a:d0:8d:cb:ee:c6:5c:04:92:5c:31:52:8b:63: f0:ff:a3:f9:ff:fe:5c:d2:f3:e8:53:d3:00:73:99:a6:d9:03: 79:c2:69:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiITluehgNI1o8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjNlN2ZhMjUtYjM2My00MjU1LTlhOWEtNjUxN2Y1ODA0ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDEyKNYtnZdNPpKO1GftnB01KsDYE3OxZeMl oQSqu65dgimKNP0X3vxTpASmzXBVhsVMaNojPpUM5pRDwrVoh8luCSqBG/GJvUO8 XC5Orkqw2swAMyPokCQPeSMsG4m6c2Pz6mtK9O4Fpl8qNBAxKV8QpNkeVeb1c+Tv Ebm9BpclWV+I3fjOLIiZgxY8nhzs2CoGynDizTy5htd47YupIHeorMilJbdj3QZs c4ofi7u2GlAB0qrMPmXE2Doaqkct5bylL6J/p5eJ2IIIonFnHeWMMTSG6/1HJwPy eaRW4WuNFad6lcePlkzUdBsE0ukqQJLpu5akdtw4Iem/B2diVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/x4MdDtcZ6Di2nUDh0GW1azgEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXxDl9gwQarLUC0i9SBo9XZo1BgyLCjxcyV8ScPFIiANrwbnvn3hpfC 5uhLgUqFyKFjzZm1Km9FtWT90gsfYDH580APLoWFjRhtG3q6au2Wibl60ulfXsTH jMgbsDmbOnq6k5j1koM04cWDzKEtOMAWsMSsI3IOZTSGaM4L75y4NOcR7n/k6+rR Gvf4vxil1iokYSjQ2TsSnd4SsAoauenKxtKxqCpCbN5esw4Cv3VnS2RfnHVODKH6 MFh4/lJKtU8wZxMnvMdqQ6atFoQrmRTP5FCJfGqym8hVt4MK0I3L7sZcBJJcMVKL Y/D/o/n//lzS8+hT0wBzmabZA3nCaVo= -----END CERTIFICATE-----Generated at Tue Oct 6 15:35:22 2026 by rpki-client