$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa File: 30c6aa14-6cf3-3108-8a08-15b180361154.roa (raw, json) Hash identifier: MqCP4gqwhEz96fmmCvLRrN/i7ck+nqhUxmO+pbimVt4= Subject key identifier: F0:36:EE:43:5A:63:95:5D:52:8C:C3:0D:EA:95:AD:A6:AC:1A:40:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BB472B8B8D67CCDE9CB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397210 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b4:72:b8:b8:d6:7c:cd:e9:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cb2eb833-6540-4727-a624-77566ea4ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:d9:3f:66:49:e6:bf:a4:b5:b6:9c:a4:ee: c8:47:08:70:c1:bc:ec:f3:34:d4:9f:85:a6:00:6f: 7c:46:d6:27:0e:2a:5f:04:94:34:d8:5a:e4:0a:76: 32:c9:e4:29:c6:f8:e7:90:22:35:a5:4a:6e:9d:d2: c2:e7:97:80:b2:be:56:95:b5:bd:e4:d7:ab:ce:47: 5b:eb:39:28:d6:98:3a:bc:7a:5a:41:39:75:61:c4: 1b:bf:5e:50:db:c0:e0:bb:d9:1a:d5:b3:0a:d5:4b: 89:3f:4b:ac:ba:f0:42:4a:13:ce:bd:ef:69:91:1c: e1:a1:7f:20:5c:fd:63:6f:c4:f6:01:00:d4:c4:20: 36:27:55:f9:0f:30:fe:62:73:97:16:3c:f1:c2:47: eb:a2:57:93:b2:13:b0:10:dc:4c:8d:0b:9d:88:5a: 20:93:6c:ca:9f:97:65:31:78:29:05:af:e1:34:66: d3:1a:af:41:7d:c0:b8:54:83:a0:bd:6d:40:eb:3e: 80:8b:b4:e7:84:aa:c5:67:32:18:5c:7a:6e:ad:3b: 5a:88:44:b2:46:70:47:df:10:80:b8:12:26:28:07: 4d:4b:d5:f4:c9:e3:e4:37:8c:9a:95:4c:ca:58:54: 75:01:41:09:b1:e8:e1:7a:77:0e:fa:f6:98:cf:d4: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:EE:43:5A:63:95:5D:52:8C:C3:0D:EA:95:AD:A6:AC:1A:40:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c6aa14-6cf3-3108-8a08-15b180361154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ff:78:86:b7:c8:da:1a:f6:71:51:1d:e0:1b:30:3a:e3:e1: 71:cf:9a:f8:30:ca:34:bf:2e:d9:10:a7:cb:b5:1f:02:c6:ad: de:55:38:f8:94:cf:5e:a9:a0:e3:e5:81:66:0c:92:29:45:4d: 64:30:62:fa:c5:4f:6e:e0:c5:ff:17:13:cc:c4:ec:cb:ac:8c: 67:f1:33:a1:18:e4:4d:fd:63:c4:1b:3c:85:78:7a:05:2b:f4: e1:f9:23:e3:42:09:82:f8:d9:f5:be:7d:ce:95:9d:54:d2:c4: c8:89:e0:ec:25:3a:a9:1a:87:20:50:da:fc:2b:8d:86:b9:f2: d7:94:35:91:e6:2f:3b:23:d0:77:eb:9e:3c:e9:21:1f:73:60: 62:db:57:6f:f3:16:14:c8:d7:73:e5:b2:a8:9e:e5:d0:82:98: 5d:e8:07:00:39:3a:4c:66:91:2c:99:74:24:01:47:c5:e6:0b: 0e:01:c5:81:1c:62:8a:1f:6e:0f:d9:8a:e8:cc:b2:3e:8a:a5: 2e:22:48:38:22:4f:97:62:1d:2b:b9:9c:2a:d7:19:03:0b:61: df:d3:34:44:60:1a:42:f3:fc:f4:f8:af:17:b5:b2:04:36:4c: b6:5e:a2:df:08:48:c1:de:f4:e4:c2:63:15:78:6e:2f:f0:2c: 1e:a1:6f:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji7RyuLjWfM3pywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2IyZWI4MzMtNjU0MC00NzI3LWE2MjQtNzc1NjZlYTRmZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhTZP2ZJ5r+ktbacpO7IRwhwwbzs8zTUn4Wm AG98RtYnDipfBJQ02FrkCnYyyeQpxvjnkCI1pUpundLC55eAsr5WlbW95Nerzkdb 6zko1pg6vHpaQTl1YcQbv15Q28Dgu9ka1bMK1UuJP0usuvBCShPOve9pkRzhoX8g XP1jb8T2AQDUxCA2J1X5DzD+YnOXFjzxwkfroleTshOwENxMjQudiFogk2zKn5dl MXgpBa/hNGbTGq9BfcC4VIOgvW1A6z6Ai7TnhKrFZzIYXHpurTtaiESyRnBH3xCA uBImKAdNS9X0yePkN4yalUzKWFR1AUEJsejhencO+vaYz9R06wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPA27kNaY5VdUozDDeqVraasGkB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjNmFhMTQtNmNmMy0z MTA4LThhMDgtMTViMTgwMzYxMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8/3iGt8jaGvZxUR3gGzA64+Fxz5r4MMo0vy7ZEKfLtR8Cxq3eVTj4 lM9eqaDj5YFmDJIpRU1kMGL6xU9u4MX/FxPMxOzLrIxn8TOhGORN/WPEGzyFeHoF K/Th+SPjQgmC+Nn1vn3OlZ1U0sTIieDsJTqpGocgUNr8K42GufLXlDWR5i87I9B3 65486SEfc2Bi21dv8xYUyNdz5bKonuXQgphd6AcAOTpMZpEsmXQkAUfF5gsOAcWB HGKKH24P2YrozLI+iqUuIkg4Ik+XYh0ruZwq1xkDC2Hf0zREYBpC8/z0+K8XtbIE Nky2XqLfCEjB3vTkwmMVeG4v8CweoW+U -----END CERTIFICATE-----Generated at Tue Oct 6 18:39:15 2026 by rpki-client