$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa File: 4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa (raw, json) Hash identifier: OTxfUt37ZLcQX7Yj78/qfLbojpa63/L8I8eDyuDF7YE= Subject key identifier: B8:00:5A:6F:E5:07:FA:88:0A:43:9F:34:33:A7:04:07:17:13:89:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49737AA1347B853084C32B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36631 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7a:a1:34:7b:85:30:84:c3:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3e48ff5-2584-4ce5-bc05-6415b75150f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ac:8b:39:77:e4:3a:a0:aa:56:ff:a7:41:9e: 40:78:81:79:1e:d2:7f:b1:da:8e:71:16:66:87:85: 25:97:cb:af:5a:05:a5:7b:09:a2:5a:1f:10:84:d7: ad:1d:3b:5d:72:35:87:87:a5:5f:7e:4f:05:49:3b: c1:38:dc:dc:56:e4:6f:1e:e6:ec:b5:eb:54:5e:a1: 0e:35:c8:27:98:40:a8:a8:63:80:40:5d:ba:cb:81: cb:ce:7d:dc:e2:b8:d2:24:1e:86:5b:63:fe:41:8f: 72:31:bf:22:3b:a1:50:84:fc:72:39:32:2b:a7:c2: 37:11:a3:c0:b5:34:7e:79:40:f8:30:bd:03:2b:6b: e3:ee:47:2a:db:b0:eb:93:fb:49:ec:84:0a:f0:82: 6b:21:be:78:c2:07:13:22:98:6e:e1:86:4f:b8:4e: ba:ca:9a:96:94:70:c0:af:d4:3b:13:c7:68:70:1c: f7:95:ce:dc:7c:e7:45:83:b3:c2:07:dd:1c:0e:9e: 76:18:4b:8a:03:d8:68:9c:ab:4c:fe:9c:d2:c3:ae: c4:c8:58:c8:96:be:fd:95:17:54:8e:30:87:8f:ea: 4e:04:91:01:f5:97:66:a7:ff:fb:36:07:30:70:7d: c4:9e:c6:af:80:86:d8:45:65:dc:7f:d0:5c:1f:0e: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:5A:6F:E5:07:FA:88:0A:43:9F:34:33:A7:04:07:17:13:89:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e5:52:af:5a:9a:47:78:30:6b:80:a2:c1:b8:d6:20:32:b2: 92:8a:14:bc:aa:af:e8:e7:df:78:97:c1:39:51:b1:26:4c:d6: ca:e3:89:a1:9f:04:87:bb:44:39:7f:ec:54:40:ac:78:4c:93: bc:79:d2:7f:73:59:30:25:42:85:cc:14:ab:5a:27:4f:36:fc: 22:6b:9a:1b:66:39:27:dd:c3:24:8d:79:04:3d:eb:e0:ee:e9: 0e:dd:f7:bb:29:16:60:17:cc:f5:2e:43:16:1b:77:c5:6e:de: 11:11:f9:3c:26:d1:4a:60:89:f6:36:26:26:57:f0:8c:bf:3c: a3:54:e4:51:9d:b2:c3:1d:ad:ed:c0:c1:85:89:af:f0:1c:c7: ad:9f:47:a2:cf:53:db:95:3a:04:7e:f0:62:ea:e4:3a:e4:f0: 69:6b:93:ac:50:ae:7d:5b:1b:03:40:42:5b:2e:cd:a9:37:b6: 0f:5a:61:03:b4:cd:53:47:e2:e2:b4:f6:c6:fa:26:31:11:a3: e8:75:2f:32:36:91:ed:85:80:00:1e:d9:0e:b0:24:51:fe:21: cc:39:35:a2:b9:dc:c9:69:54:db:c3:61:99:97:8a:31:0b:e7: fb:c4:f1:6d:0a:96:6a:99:e2:13:d2:aa:83:c1:2f:e0:58:4e: 38:d0:79:55 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc3qhNHuFMITDK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjNlNDhmZjUtMjU4NC00Y2U1LWJjMDUtNjQxNWI3NTE1MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKyLOXfkOqCqVv+nQZ5AeIF5HtJ/sdqOcRZm h4Ull8uvWgWlewmiWh8QhNetHTtdcjWHh6Vffk8FSTvBONzcVuRvHubstetUXqEO NcgnmECoqGOAQF26y4HLzn3c4rjSJB6GW2P+QY9yMb8iO6FQhPxyOTIrp8I3EaPA tTR+eUD4ML0DK2vj7kcq27Drk/tJ7IQK8IJrIb54wgcTIphu4YZPuE66ypqWlHDA r9Q7E8docBz3lc7cfOdFg7PCB90cDp52GEuKA9honKtM/pzSw67EyFjIlr79lRdU jjCHj+pOBJEB9Zdmp//7NgcwcH3EnsavgIbYRWXcf9BcHw7D1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLgAWm/lB/qICkOfNDOnBAcXE4k/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmYTZlZDgtYmM4Mi0z ZWE1LWJmYzYtN2IyZjg2MDMzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCN5VKvWppHeDBrgKLBuNYgMrKSihS8qq/o5994l8E5UbEmTNbK44mh nwSHu0Q5f+xUQKx4TJO8edJ/c1kwJUKFzBSrWidPNvwia5obZjkn3cMkjXkEPevg 7ukO3fe7KRZgF8z1LkMWG3fFbt4REfk8JtFKYIn2NiYmV/CMvzyjVORRnbLDHa3t wMGFia/wHMetn0eiz1PblToEfvBi6uQ65PBpa5OsUK59WxsDQEJbLs2pN7YPWmED tM1TR+LitPbG+iYxEaPodS8yNpHthYAAHtkOsCRR/iHMOTWiudzJaVTbw2GZl4ox C+f7xPFtCpZqmeIT0qqDwS/gWE440HlV -----END CERTIFICATE-----Generated at Wed Oct 7 20:30:13 2026 by rpki-client