$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa File: 60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa (raw, json) Hash identifier: KbxUySRd7DdKFMGlVKpuj6NQnaCRlyV80k4pBAA+tHE= Subject key identifier: 64:39:DE:46:3C:87:B9:56:A1:20:00:25:91:72:71:D5:40:30:4C:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B9118573BF1649D7B1A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396584 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:91:18:57:3b:f1:64:9d:7b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9d871b70-d829-4f95-9198-5b214592b3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:c8:00:a3:bb:ea:1e:4d:4d:e9:a5:e6:26: 15:2f:6c:3e:dc:dc:80:03:f9:4f:1c:5c:7c:4f:d4: 7d:11:91:3d:2a:fd:00:30:5d:7b:09:b4:4b:31:20: 42:d0:bf:ef:90:16:66:c9:dc:02:f0:e6:a4:39:34: 82:bf:2c:9b:e2:ac:15:8a:80:82:ef:10:4d:46:bf: 13:7d:49:5a:69:39:7b:22:fc:0f:cb:f7:2c:80:63: bb:52:a5:d5:5b:2d:21:57:54:98:f7:c2:40:92:e9: 86:d1:27:f9:9e:34:82:31:09:56:07:a1:08:f9:58: 7a:23:30:f6:6e:63:9c:38:ed:8a:6c:c5:da:68:06: ae:a9:aa:67:4b:aa:15:e4:85:5c:a0:2f:13:1b:3c: 6c:13:40:6c:76:ab:fd:7d:98:c7:1b:b8:28:bf:ef: 1f:c6:1a:0a:59:43:45:5d:23:18:4f:6c:6a:93:a1: 90:57:d2:36:8e:94:3b:62:87:01:95:d1:0e:6b:18: 90:9e:51:67:a5:2d:28:f1:db:dd:99:26:c8:91:9d: 0f:2d:9d:58:38:86:50:2f:fe:34:b4:df:b3:30:af: 9a:d7:e0:ee:ac:84:57:5b:63:38:6a:42:40:1f:4e: 8d:ee:d5:08:f6:4d:ca:a8:97:1e:62:c6:f6:e6:69: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:39:DE:46:3C:87:B9:56:A1:20:00:25:91:72:71:D5:40:30:4C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60ea9b46-f4e0-3f8c-a730-e5a9d279a773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:47:3d:28:4c:06:73:73:be:8a:76:08:d2:7e:a7:70:8f:39: 4d:61:90:97:72:a3:32:ed:45:ea:7c:e0:d1:9b:15:80:ea:ae: b9:6c:93:1c:e2:80:eb:4a:c8:d0:84:3b:03:d2:a7:0c:53:60: e1:52:b9:f0:bd:51:84:39:a4:a5:c7:ef:f2:04:5e:44:9e:99: df:0b:60:fc:83:02:10:99:fd:35:e9:94:11:6d:f3:b1:50:76: 40:08:98:83:7f:ae:d4:57:0c:be:f7:9c:7d:97:73:8a:a5:d6: 80:12:7c:13:de:1e:6e:48:84:24:e3:27:56:3a:ae:22:dd:12: a0:a6:71:59:2b:31:53:f0:5f:74:dd:87:93:9c:56:83:aa:19: 85:9c:db:8b:bb:b7:2e:0e:7b:58:d4:a1:09:68:07:71:86:f4: bf:fd:28:ba:27:3a:46:1e:76:17:c1:d3:ae:84:81:fc:c2:58: 6b:79:4c:78:e1:e2:60:e6:fb:23:ea:95:ad:6f:67:5b:e3:2b: b9:de:ff:52:8e:b7:72:b0:8d:89:b4:18:07:42:82:52:10:e2: 82:77:e8:5e:f7:67:81:8b:52:38:30:8d:73:08:b7:79:7f:db: cb:1a:9f:ae:ef:b8:62:35:f6:0e:aa:aa:95:f1:01:cf:36:2a: 5c:47:81:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5EYVzvxZJ17GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWQ4NzFiNzAtZDgyOS00Zjk1LTkxOTgtNWIyMTQ1OTJiM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwizIAKO76h5NTeml5iYVL2w+3NyAA/lPHFx8 T9R9EZE9Kv0AMF17CbRLMSBC0L/vkBZmydwC8OakOTSCvyyb4qwVioCC7xBNRr8T fUlaaTl7IvwPy/csgGO7UqXVWy0hV1SY98JAkumG0Sf5njSCMQlWB6EI+Vh6IzD2 bmOcOO2KbMXaaAauqapnS6oV5IVcoC8TGzxsE0Bsdqv9fZjHG7gov+8fxhoKWUNF XSMYT2xqk6GQV9I2jpQ7YocBldEOaxiQnlFnpS0o8dvdmSbIkZ0PLZ1YOIZQL/40 tN+zMK+a1+DurIRXW2M4akJAH06N7tUI9k3KqJceYsb25mljXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ53kY8h7lWoSAAJZFycdVAMEwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjBlYTliNDYtZjRlMC0z ZjhjLWE3MzAtZTVhOWQyNzlhNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlHPShMBnNzvop2CNJ+p3CPOU1hkJdyozLtRep84NGbFYDqrrlskxzi gOtKyNCEOwPSpwxTYOFSufC9UYQ5pKXH7/IEXkSemd8LYPyDAhCZ/TXplBFt87FQ dkAImIN/rtRXDL73nH2Xc4ql1oASfBPeHm5IhCTjJ1Y6riLdEqCmcVkrMVPwX3Td h5OcVoOqGYWc24u7ty4Oe1jUoQloB3GG9L/9KLonOkYedhfB066EgfzCWGt5THjh 4mDm+yPqla1vZ1vjK7ne/1KOt3KwjYm0GAdCglIQ4oJ36F73Z4GLUjgwjXMIt3l/ 28san67vuGI19g6qqpXxAc82KlxHgcQ= -----END CERTIFICATE-----Generated at Tue Oct 6 14:30:42 2026 by rpki-client