$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa File: 543616ba-cc06-3c2a-9970-1fff991634b7.roa (raw, json) Hash identifier: hk1fIhi/YJ1CCVI82DIgENlhYJs9/oY103hflWKXPwg= Subject key identifier: F0:89:65:E0:FD:E9:AD:5A:13:97:20:13:7A:A9:56:90:29:27:16:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972FEA15D00AC7656D61780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36626 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fe:a1:5d:00:ac:76:56:d6:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a1cd2a17-e83a-4829-8b40-9a1de17e2138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:e0:4b:66:59:a5:d1:06:27:3b:b0:18:a4: 90:23:f1:9f:6e:f2:13:dd:97:16:9f:2a:a3:d3:bf: f1:06:fc:3a:4d:31:27:30:a1:67:26:58:e9:59:d2: d3:fb:45:86:9b:99:5d:2d:e3:24:b4:65:24:68:b8: 58:f9:b3:c6:f0:24:74:45:40:c4:35:bf:34:2c:29: c9:7b:31:e0:e6:a2:61:1f:85:24:fb:2a:25:e5:5e: 8a:d3:d0:57:34:aa:09:68:c3:16:72:85:41:9a:0d: 1c:b6:b7:93:24:04:c7:85:ef:48:c7:dc:52:d8:82: 3e:9a:2f:50:df:d7:00:13:87:a0:88:09:e2:59:b1: 94:b8:49:58:1b:e8:fa:03:74:ba:c1:0a:44:81:6c: 1f:ee:08:7f:b9:f2:34:7c:13:b6:e4:fb:f7:80:64: 08:dc:7e:f5:45:b0:4e:6a:87:ce:92:8a:e4:dd:d7: a0:ea:8a:e9:6a:11:27:16:8e:62:31:fc:10:29:0c: 79:f0:8f:5a:e1:7d:75:52:1b:85:b7:1f:61:50:7f: 36:62:da:13:db:e5:77:f3:a2:0e:83:3e:f9:27:b7: 96:5d:5e:46:28:97:9a:f7:a4:a7:07:fc:5a:05:51: 22:6b:68:b4:98:7f:b4:60:6e:8e:5d:ef:df:1f:c8: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:89:65:E0:FD:E9:AD:5A:13:97:20:13:7A:A9:56:90:29:27:16:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543616ba-cc06-3c2a-9970-1fff991634b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a6:f8:35:46:59:c7:55:44:6d:96:0f:cc:cd:6d:9e:77:e2: fc:24:3b:07:ee:60:d6:e5:28:9a:71:33:93:70:71:e8:b9:29: bb:1e:7d:7a:cd:c7:1c:c4:2c:54:6b:a4:d6:62:f3:de:a9:01: 50:50:b8:4f:02:9a:56:fb:78:f8:3a:8f:8d:85:f7:e1:c1:3b: 69:57:30:c8:9c:7a:65:42:a2:50:20:2c:20:a8:a8:b4:62:ad: b6:bc:68:a0:8d:42:09:ad:9e:47:d5:da:ac:9f:34:a4:37:74: c8:43:7b:d2:f1:c1:3a:45:0f:6b:7a:c2:cb:13:61:86:b1:10: 5d:f9:b4:68:ef:15:cf:e6:3f:eb:f3:c9:a4:4c:6e:af:2e:2a: e0:2b:16:c2:b9:d8:77:96:4d:35:93:d5:0b:fe:f6:fe:ff:05: 2b:f4:63:78:04:79:57:81:c0:2c:52:f2:44:ae:fb:dc:a7:3a: 3f:f5:4e:9f:e4:17:59:b0:fa:fe:63:14:c1:37:f3:cb:bc:eb: 1e:bc:d9:8f:52:2c:9f:97:c5:2d:36:f1:64:34:2b:f4:78:ec: bc:14:88:b1:13:58:aa:8a:72:af:d2:d0:dc:1b:6c:be:dd:aa: dd:a7:ec:40:08:96:6c:c9:2e:91:e5:ee:8d:13:47:92:6e:cf: 5f:42:8e:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jcv6hXQCsdlbWF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTFjZDJhMTctZTgzYS00ODI5LThiNDAtOWExZGUxN2UyMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbHgS2ZZpdEGJzuwGKSQI/GfbvIT3ZcWnyqj 07/xBvw6TTEnMKFnJljpWdLT+0WGm5ldLeMktGUkaLhY+bPG8CR0RUDENb80LCnJ ezHg5qJhH4Uk+yol5V6K09BXNKoJaMMWcoVBmg0ctreTJATHhe9Ix9xS2II+mi9Q 39cAE4egiAniWbGUuElYG+j6A3S6wQpEgWwf7gh/ufI0fBO25Pv3gGQI3H71RbBO aofOkork3deg6orpahEnFo5iMfwQKQx58I9a4X11UhuFtx9hUH82YtoT2+V386IO gz75J7eWXV5GKJea96SnB/xaBVEia2i0mH+0YG6OXe/fH8gqGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPCJZeD96a1aE5cgE3qpVpApJxauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzNjE2YmEtY2MwNi0z YzJhLTk5NzAtMWZmZjk5MTYzNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTpvg1RlnHVURtlg/MzW2ed+L8JDsH7mDW5SiacTOTcHHouSm7Hn16 zcccxCxUa6TWYvPeqQFQULhPAppW+3j4Oo+NhffhwTtpVzDInHplQqJQICwgqKi0 Yq22vGigjUIJrZ5H1dqsnzSkN3TIQ3vS8cE6RQ9resLLE2GGsRBd+bRo7xXP5j/r 88mkTG6vLirgKxbCudh3lk01k9UL/vb+/wUr9GN4BHlXgcAsUvJErvvcpzo/9U6f 5BdZsPr+YxTBN/PLvOsevNmPUiyfl8UtNvFkNCv0eOy8FIixE1iqinKv0tDcG2y+ 3ardp+xACJZsyS6R5e6NE0eSbs9fQo5g -----END CERTIFICATE-----Generated at Thu Oct 8 01:25:48 2026 by rpki-client