$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa File: 3910da99-0422-3b03-a949-2956cea75d7c.roa (raw, json) Hash identifier: ZxqNQbterN4p6z3r0mRj/7eT/VO3H6WWPvP73khFhxE= Subject key identifier: 23:E9:E8:A7:7E:2D:1B:BB:B8:00:DA:F8:67:0C:1E:B7:9E:55:FA:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972E01EC17EA24D6139D9D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396543 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e0:1e:c1:7e:a2:4d:61:39:d9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf26d7a3-48e6-479a-8a78-729df53efcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:34:e5:00:42:b9:64:ac:97:44:dd:5e:33: af:d1:e1:54:14:f7:4e:72:4b:52:32:c8:a8:f7:ad: 53:37:39:43:8b:5c:11:44:fe:3b:4f:d8:53:90:3b: 7d:2b:fb:0b:a5:b1:69:d3:1a:48:e3:a9:a8:41:0b: 07:90:63:a0:ac:fe:0f:4d:e9:58:d8:58:b7:66:d2: 87:92:2d:57:10:c5:d4:e9:bd:79:f4:ef:b4:6a:f9: 65:38:17:3f:b7:09:39:eb:ca:55:d9:37:a6:16:c9: 7b:4b:a1:eb:16:78:0c:d9:65:97:17:64:c6:09:83: de:69:b2:31:8a:ed:6f:38:19:67:0f:4c:ca:99:35: 27:b6:15:a9:d0:23:0d:3c:ff:e1:df:ee:6e:e4:ea: e5:98:af:e2:35:b5:92:7c:e7:8b:45:3a:ac:29:b5: 2a:c5:fb:e4:b2:17:14:db:e8:c4:27:55:86:b9:ef: 53:46:53:31:ea:e9:02:43:ea:c6:57:12:80:e6:fa: ca:59:b9:a2:d9:e7:ff:7c:26:67:75:4c:aa:d6:25: c1:69:78:17:76:21:48:02:57:e8:03:b5:0a:de:84: 65:ec:54:88:d3:c4:b3:de:ed:01:ba:72:e2:d6:a8: d2:60:32:49:5b:ee:e7:78:04:9a:e9:71:44:f6:fb: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E9:E8:A7:7E:2D:1B:BB:B8:00:DA:F8:67:0C:1E:B7:9E:55:FA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3910da99-0422-3b03-a949-2956cea75d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c0:07:6c:c8:e9:09:2a:1c:b5:63:c2:14:f4:bf:f7:bd:ee: 9c:ab:e7:25:49:fc:bd:c0:36:75:d4:bf:8c:f0:93:ab:da:3b: 8f:ca:3b:1e:7c:63:43:fc:29:06:f4:af:0d:f3:45:10:fa:fc: 65:65:b5:31:3e:ef:21:cf:04:6b:a8:80:44:46:40:a9:1b:9d: 75:1b:e2:11:29:87:90:6c:d5:f5:22:f9:e0:47:28:6b:bb:f1: ac:67:7f:0e:e7:17:f3:82:0b:02:c7:93:4a:cc:46:c7:08:10: d6:b0:1c:87:dc:66:4a:66:85:e9:97:50:77:9e:80:ef:42:6f: 66:87:b0:e8:c8:a5:73:97:41:5a:bb:ac:cc:36:e6:73:f6:f5: 32:6b:33:d6:18:fd:76:3c:92:18:fa:59:e5:14:85:42:32:0f: 89:76:e0:74:43:f6:7a:27:04:61:a9:3e:af:1c:8d:2e:e2:5b: c8:24:2b:5b:22:21:59:11:2f:a5:ea:2b:19:56:af:90:92:74: dc:5d:8c:20:ca:e2:e8:2e:1b:04:77:41:5d:f3:ee:2d:2f:b1: 91:79:7d:43:c1:13:76:34:96:be:21:80:4d:9d:6f:1f:3e:49: 35:a7:39:42:f8:70:26:af:9a:e8:84:fc:77:da:9c:74:6a:e2: 46:9d:0e:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JcuAewX6iTWE52dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmYyNmQ3YTMtNDhlNi00NzlhLThhNzgtNzI5ZGY1M2VmY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhio05QBCuWSsl0TdXjOv0eFUFPdOcktSMsio 961TNzlDi1wRRP47T9hTkDt9K/sLpbFp0xpI46moQQsHkGOgrP4PTelY2Fi3ZtKH ki1XEMXU6b159O+0avllOBc/twk568pV2TemFsl7S6HrFngM2WWXF2TGCYPeabIx iu1vOBlnD0zKmTUnthWp0CMNPP/h3+5u5OrlmK/iNbWSfOeLRTqsKbUqxfvkshcU 2+jEJ1WGue9TRlMx6ukCQ+rGVxKA5vrKWbmi2ef/fCZndUyq1iXBaXgXdiFIAlfo A7UK3oRl7FSI08Sz3u0BunLi1qjSYDJJW+7neASa6XFE9vtw+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPp6Kd+LRu7uADa+GcMHreeVfr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzkxMGRhOTktMDQyMi0z YjAzLWE5NDktMjk1NmNlYTc1ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOwAdsyOkJKhy1Y8IU9L/3ve6cq+clSfy9wDZ11L+M8JOr2juPyjse fGND/CkG9K8N80UQ+vxlZbUxPu8hzwRrqIBERkCpG511G+IRKYeQbNX1IvngRyhr u/GsZ38O5xfzggsCx5NKzEbHCBDWsByH3GZKZoXpl1B3noDvQm9mh7DoyKVzl0Fa u6zMNuZz9vUyazPWGP12PJIY+lnlFIVCMg+JduB0Q/Z6JwRhqT6vHI0u4lvIJCtb IiFZES+l6isZVq+QknTcXYwgyuLoLhsEd0Fd8+4tL7GReX1DwRN2NJa+IYBNnW8f Pkk1pzlC+HAmr5rohPx32px0auJGnQ62 -----END CERTIFICATE-----Generated at Tue Oct 6 14:58:03 2026 by rpki-client