$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa File: 3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa (raw, json) Hash identifier: bBgPLYy3VwGgVA6U69QZXefSLiMkIjpY97SSLEtHDCk= Subject key identifier: F2:91:C0:02:89:2F:EB:2D:92:5E:A0:0A:47:43:6D:14:9B:8D:24:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BB1FE68A561390FD30CA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396600 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b1:fe:68:a5:61:39:0f:d3:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e9d14f25-2d1d-4934-a15e-440f6a1a6425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:07:5d:71:27:24:5e:5a:93:7b:8f:b2:4c: fd:0c:6d:5e:b3:a7:43:a4:67:53:b0:b7:8a:af:3d: 9e:9b:df:df:78:98:f8:b5:77:8b:17:16:3e:cb:22: 31:eb:25:c8:ac:f9:b2:e7:30:6e:0c:04:5b:b2:63: 0b:93:cf:47:64:e4:d1:0a:93:2d:59:1b:d0:7a:69: e7:3d:b3:86:df:80:76:57:53:ef:aa:47:5d:3f:ae: 51:43:3d:44:14:cc:7a:9e:9b:74:ad:70:98:7a:4e: 9c:b5:af:b3:3e:c4:b5:9a:b0:0b:ef:57:57:57:85: cc:be:6e:8d:0b:8e:7f:ec:9f:5d:28:1a:17:51:6d: 5b:ff:76:7a:5c:f8:2d:60:cd:9e:6d:af:ba:96:e7: 41:ab:6e:b0:5b:7b:1c:17:50:db:72:03:b0:9f:ef: 77:74:b5:ff:8b:9c:b2:89:ce:bc:d4:9e:0b:c9:e7: ce:9b:3f:7a:88:49:54:bc:9e:6b:87:8c:5a:34:fd: ba:68:17:f4:66:1e:99:71:a1:cc:54:2e:4b:d4:2e: 13:2c:e0:f7:61:4f:5c:9f:44:b9:f0:66:4e:df:be: d8:95:c6:fc:f7:10:99:bc:51:7e:0a:4d:3c:ba:24: 0f:4c:12:c6:ba:bc:3c:d4:a8:da:b8:f3:79:c2:db: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:91:C0:02:89:2F:EB:2D:92:5E:A0:0A:47:43:6D:14:9B:8D:24:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f8:e8:c5:c4:a2:9b:c6:bf:f1:49:b1:5c:09:fb:79:46:d1: e9:6d:57:1a:7b:b9:67:90:a2:7c:30:9e:9e:72:ff:c5:98:a4: 76:d8:59:fb:92:2d:8c:e4:ef:7e:79:d6:3b:4d:05:c6:09:0a: d8:8a:aa:35:30:dc:84:23:f1:1a:3c:f1:59:cc:ea:19:d7:91: bd:ad:27:3d:fe:6b:3e:9c:07:bf:8c:62:97:1a:9b:52:cd:06: fe:d2:45:57:1b:31:d8:c4:1c:d3:e6:f4:ad:a1:ee:ba:f1:41: eb:b9:a1:13:fe:18:30:fa:33:b3:46:70:42:1c:bc:dc:f1:e7: 26:56:a3:60:3e:b5:b5:21:cd:4d:82:73:a2:6f:5f:f8:95:fc: a4:36:7b:b3:32:ba:a7:51:63:3a:b2:bf:c5:5e:f2:4d:0a:f4: bc:31:1a:98:a1:14:5c:6c:6a:cb:ac:c5:d4:df:c7:41:78:f7: ba:e8:42:7a:2e:0b:3d:4b:c2:a4:3d:a5:ae:ae:75:18:dc:43: e0:75:7a:f6:68:77:95:a9:be:e3:76:b3:b5:83:96:10:01:c2: a1:0d:c8:72:15:a4:2c:dc:c4:3a:81:4e:a9:93:90:f5:fe:4d: e8:56:d0:d4:3c:3d:9b:2d:39:8e:2c:08:a6:bb:0b:de:58:2d: 84:3e:43:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji7H+aKVhOQ/TDKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTlkMTRmMjUtMmQxZC00OTM0LWExNWUtNDQwZjZhMWE2NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm64HXXEnJF5ak3uPskz9DG1es6dDpGdTsLeK rz2em9/feJj4tXeLFxY+yyIx6yXIrPmy5zBuDARbsmMLk89HZOTRCpMtWRvQemnn PbOG34B2V1PvqkddP65RQz1EFMx6npt0rXCYek6cta+zPsS1mrAL71dXV4XMvm6N C45/7J9dKBoXUW1b/3Z6XPgtYM2eba+6ludBq26wW3scF1DbcgOwn+93dLX/i5yy ic681J4LyefOmz96iElUvJ5rh4xaNP26aBf0Zh6ZcaHMVC5L1C4TLOD3YU9cn0S5 8GZO377Ylcb89xCZvFF+Ck08uiQPTBLGurw81KjauPN5wtuTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKRwAKJL+stkl6gCkdDbRSbjSSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U1ZDc5ZjUtZTkyMi0z YjlhLTlkZmYtYmZlNTliYTAyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP46MXEopvGv/FJsVwJ+3lG0eltVxp7uWeQonwwnp5y/8WYpHbYWfuS LYzk73551jtNBcYJCtiKqjUw3IQj8Ro88VnM6hnXkb2tJz3+az6cB7+MYpcam1LN Bv7SRVcbMdjEHNPm9K2h7rrxQeu5oRP+GDD6M7NGcEIcvNzx5yZWo2A+tbUhzU2C c6JvX/iV/KQ2e7MyuqdRYzqyv8Ve8k0K9LwxGpihFFxsasusxdTfx0F497roQnou Cz1LwqQ9pa6udRjcQ+B1evZod5WpvuN2s7WDlhABwqENyHIVpCzcxDqBTqmTkPX+ TehW0NQ8PZstOY4sCKa7C95YLYQ+Q/E= -----END CERTIFICATE-----Generated at Wed Oct 7 03:13:04 2026 by rpki-client