$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa File: 4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa (raw, json) Hash identifier: TBVcwKNc9Jq+faxdXoz8mIEtKt6XAIoRjoKQHMD/G+s= Subject key identifier: 8B:85:61:14:61:0F:32:9A:04:8F:7E:E7:59:A6:40:78:DE:0D:CD:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498886A013D6F1C1F236D280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396564 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:86:a0:13:d6:f1:c1:f2:36:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=71337966-2915-4572-bfa6-61f365ed0e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:15:d0:56:fb:7c:73:d1:81:ee:dd:0e:59: b4:92:8d:f4:df:ba:b8:ee:ae:38:61:60:b1:0f:75: e4:90:1d:38:fd:d3:dc:81:21:d2:94:c4:fe:2b:4a: bb:d3:93:1c:ad:4d:b0:b9:a7:3d:3e:3e:7b:14:94: 56:85:66:04:ec:6e:7b:56:f1:5c:3f:d9:44:29:7d: c8:4f:02:f8:4e:36:b9:0a:55:52:76:7d:78:b3:c7: 55:06:19:18:18:5b:d6:47:cc:3d:d1:b9:9e:0d:2e: b3:24:72:22:13:cc:f2:36:bc:19:09:79:97:51:d7: 44:aa:e8:d8:f1:2c:3f:d3:69:67:fa:d5:8c:f0:3f: 31:cc:1d:02:2b:c3:9b:0f:d1:5c:f5:80:0f:c9:68: 81:70:d6:7c:6c:ec:d4:d4:59:7f:36:bd:c7:9d:b0: 34:5e:79:05:bc:c8:21:17:8f:91:85:a2:63:23:9d: 47:dc:4d:04:5b:09:86:ec:8e:6d:5a:f9:a4:95:75: 24:74:59:6d:9c:2f:07:e4:7f:a2:6b:6f:6b:6f:0a: 10:6b:c3:e4:c9:45:0b:a4:af:53:14:d4:94:17:3e: af:62:59:13:35:36:aa:98:ee:8f:7a:e7:70:0b:7c: 8a:54:4b:27:19:3c:64:ca:73:a5:8f:8c:40:0e:7c: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:85:61:14:61:0F:32:9A:04:8F:7E:E7:59:A6:40:78:DE:0D:CD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:38:88:d8:bf:b1:aa:0a:37:3b:b1:bb:d3:c1:e1:08:48:e1: be:02:75:7a:d1:fb:06:c5:60:45:89:5a:2e:07:7c:b7:1e:8c: 1d:6e:b1:20:3b:bd:f7:55:ca:11:6e:6e:77:ef:4d:75:3c:6b: 51:d5:85:b3:6b:52:bf:22:90:c2:37:66:db:26:36:2a:d5:01: 39:cd:d8:e0:8f:8b:95:fe:60:7a:c3:f2:7e:12:40:98:23:11: 00:98:12:4d:16:01:43:bf:9b:5e:33:08:62:90:5f:db:65:46: 36:5b:c8:44:af:18:b5:3c:53:3b:76:99:f0:da:36:e6:56:e6: cb:92:79:e6:ba:15:bb:40:c3:c3:20:63:a5:cc:b7:01:04:de: 96:83:a7:27:9d:39:4b:68:62:11:b6:ab:e9:9f:11:49:50:ba: 5f:c5:f8:17:83:40:be:c4:3b:4b:b3:81:9b:ee:96:0d:a4:15: 52:78:62:44:a9:b8:58:3e:3d:bd:5a:f1:ac:53:0c:8b:e6:49: 52:06:d3:f4:7b:f9:3d:0f:04:d2:a0:7d:02:56:2b:9c:ab:95: 79:c5:53:32:73:bd:30:62:75:88:50:be:9a:9c:35:32:85:89: 1d:a1:3c:76:3b:07:e6:7c:6d:08:b7:8a:36:53:53:8d:7b:73: de:a6:58:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiIagE9bxwfI20oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzEzMzc5NjYtMjkxNS00NTcyLWJmYTYtNjFmMzY1ZWQwZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhwV0Fb7fHPRge7dDlm0ko3037q47q44YWCx D3XkkB04/dPcgSHSlMT+K0q705McrU2wuac9Pj57FJRWhWYE7G57VvFcP9lEKX3I TwL4Tja5ClVSdn14s8dVBhkYGFvWR8w90bmeDS6zJHIiE8zyNrwZCXmXUddEqujY 8Sw/02ln+tWM8D8xzB0CK8ObD9Fc9YAPyWiBcNZ8bOzU1Fl/Nr3HnbA0XnkFvMgh F4+RhaJjI51H3E0EWwmG7I5tWvmklXUkdFltnC8H5H+ia29rbwoQa8PkyUULpK9T FNSUFz6vYlkTNTaqmO6PeudwC3yKVEsnGTxkynOlj4xADnw/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuFYRRhDzKaBI9+51mmQHjeDc3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlMzhhOTktOGViMS0z ZTgyLTg1MWMtYTU4YmNlYmE4MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE44iNi/saoKNzuxu9PB4QhI4b4CdXrR+wbFYEWJWi4HfLcejB1usSA7 vfdVyhFubnfvTXU8a1HVhbNrUr8ikMI3ZtsmNirVATnN2OCPi5X+YHrD8n4SQJgj EQCYEk0WAUO/m14zCGKQX9tlRjZbyESvGLU8Uzt2mfDaNuZW5suSeea6FbtAw8Mg Y6XMtwEE3paDpyedOUtoYhG2q+mfEUlQul/F+BeDQL7EO0uzgZvulg2kFVJ4YkSp uFg+Pb1a8axTDIvmSVIG0/R7+T0PBNKgfQJWK5yrlXnFUzJzvTBidYhQvpqcNTKF iR2hPHY7B+Z8bQi3ijZTU417c96mWH0= -----END CERTIFICATE-----Generated at Fri Oct 9 17:41:34 2026 by rpki-client