$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa File: 5328636b-11e1-317e-8dfc-9111eb5422e3.roa (raw, json) Hash identifier: jngfhTEur5uwr2UePdDlhZPp2sNLYbp2dabPsQV75zc= Subject key identifier: 78:1E:86:4E:1D:2A:DD:EE:8E:8D:F0:0D:64:D5:3D:18:CC:E5:35:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988D2860F65EFB16C7D1F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397199 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:d2:86:0f:65:ef:b1:6c:7d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=13f7603f-8f3d-4319-b1e4-f6299abf3809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:68:43:b8:2d:f0:a1:ac:dd:02:4c:57:d8: e0:5c:e0:18:27:39:59:0a:e8:46:6c:2d:a5:6c:24: 0b:c3:9c:27:e5:60:9b:81:a0:1a:4f:9a:0f:dd:51: fa:26:51:e0:cf:23:68:af:c2:3f:b9:e8:2e:d4:dc: 0e:ad:8f:6e:57:ed:21:21:97:a0:ea:a4:37:c8:c5: 34:db:05:a5:ce:dd:f4:c1:95:93:8e:8c:58:9d:30: c7:c9:e0:57:8c:8e:b1:d3:40:41:9b:19:f4:c0:00: 70:6c:94:ca:b3:94:18:8e:eb:14:7a:b5:73:bd:02: c8:1d:64:52:22:28:1d:46:84:98:5b:7f:5e:30:9f: 41:8b:a0:58:71:86:39:63:c8:b9:00:a4:cd:ee:f9: 1f:39:6d:fa:88:fd:2c:b2:51:18:b0:3e:89:93:b2: 39:e0:fa:54:c4:39:85:9f:f9:60:3e:ff:8e:2d:6b: 80:70:84:78:84:ee:7f:00:50:89:27:9a:43:fa:31: ce:18:b7:57:ae:98:08:c0:57:26:11:cb:45:4a:e0: 45:52:af:90:17:40:d6:08:de:f9:c7:f8:02:88:14: 0a:50:61:c8:2c:fb:c6:d8:74:36:7d:1b:40:ca:25: 40:62:3c:b4:e5:a6:fe:e7:2b:fb:78:01:7e:d7:c9: 82:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:86:4E:1D:2A:DD:EE:8E:8D:F0:0D:64:D5:3D:18:CC:E5:35:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5328636b-11e1-317e-8dfc-9111eb5422e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c6:21:6d:ee:e6:09:8a:5d:3b:cd:bd:e7:a8:3f:15:4d:c9: 51:e2:cd:be:76:a9:f3:22:d4:51:26:65:4e:ff:e4:20:95:24: e1:c1:5a:03:b5:e0:0d:ba:cf:12:67:b4:b8:7b:88:c4:60:71: e8:7d:e6:a2:f3:94:80:81:a5:a7:76:aa:ee:d7:59:60:41:38: 1d:90:06:1a:71:ba:61:e1:46:2c:71:66:a8:7d:39:67:31:32: 73:a8:16:01:ec:e5:51:ca:7d:7d:48:a7:2b:da:71:31:17:e6: c3:86:ae:76:e7:74:63:48:97:d3:ea:f9:f4:3e:88:ee:a4:5b: 07:4d:8a:b3:a1:b3:6f:a1:4f:9e:cd:59:bb:a0:00:37:55:ba: f7:71:18:68:56:4c:c8:2c:1a:ce:ae:ed:0d:80:d8:1d:d7:cd: f7:87:8a:ae:b0:84:c1:f6:27:6e:cc:1b:ed:d2:37:8e:75:97: 91:22:98:57:ab:db:cf:33:72:13:32:26:14:ec:8e:31:d8:ec: 06:38:97:c0:b6:ba:48:6c:eb:de:9a:39:c7:71:3a:3a:a4:fa: cb:46:24:c1:1a:7b:9b:f2:57:a4:ca:9c:68:be:31:05:d5:7e: a7:3f:1d:db:1f:05:89:3d:26:9e:be:21:57:4e:b4:b2:fa:1d: 52:43:46:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiNKGD2XvsWx9HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTNmNzYwM2YtOGYzZC00MzE5LWIxZTQtZjYyOTlhYmYzODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBRoQ7gt8KGs3QJMV9jgXOAYJzlZCuhGbC2l bCQLw5wn5WCbgaAaT5oP3VH6JlHgzyNor8I/uegu1NwOrY9uV+0hIZeg6qQ3yMU0 2wWlzt30wZWTjoxYnTDHyeBXjI6x00BBmxn0wABwbJTKs5QYjusUerVzvQLIHWRS IigdRoSYW39eMJ9Bi6BYcYY5Y8i5AKTN7vkfOW36iP0sslEYsD6Jk7I54PpUxDmF n/lgPv+OLWuAcIR4hO5/AFCJJ5pD+jHOGLdXrpgIwFcmEctFSuBFUq+QF0DWCN75 x/gCiBQKUGHILPvG2HQ2fRtAyiVAYjy05ab+5yv7eAF+18mCsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHgehk4dKt3ujo3wDWTVPRjM5TXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTMyODYzNmItMTFlMS0z MTdlLThkZmMtOTExMWViNTQyMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXxiFt7uYJil07zb3nqD8VTclR4s2+dqnzItRRJmVO/+QglSThwVoD teANus8SZ7S4e4jEYHHofeai85SAgaWndqru11lgQTgdkAYacbph4UYscWaofTln MTJzqBYB7OVRyn19SKcr2nExF+bDhq5253RjSJfT6vn0PojupFsHTYqzobNvoU+e zVm7oAA3Vbr3cRhoVkzILBrOru0NgNgd1833h4qusITB9iduzBvt0jeOdZeRIphX q9vPM3ITMiYU7I4x2OwGOJfAtrpIbOvemjnHcTo6pPrLRiTBGnub8lekypxovjEF 1X6nPx3bHwWJPSaeviFXTrSy+h1SQ0YE -----END CERTIFICATE-----Generated at Tue Oct 6 11:32:56 2026 by rpki-client