$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa File: 7b28980a-5d28-3be0-806f-762cfd98334a.roa (raw, json) Hash identifier: hf4YbNmE+Q1tzbCsBndAYgvsxjxIBb3byrC02CE/N90= Subject key identifier: C0:A3:23:EF:7B:63:D8:99:D7:81:89:12:7B:42:F7:7D:C0:75:83:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989C2D5D826881655BE9E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25485 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:c2:d5:d8:26:88:16:55:be:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27c848f0-dfb0-4771-90ad-054acc8b0d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:b1:13:18:4b:0e:e7:68:a0:59:99:e9:b5: 1e:0b:6a:6f:a2:ae:8a:68:f6:1b:2c:09:c9:2d:3c: e4:cf:72:57:e0:93:0b:88:7f:e8:ad:02:22:d3:c7: 05:55:fa:00:6d:b0:aa:16:61:ff:ab:d1:37:36:5a: 8d:fd:37:b5:ee:47:8b:0a:3f:62:a9:fa:27:09:7e: 94:50:7f:df:d4:2a:0c:4a:18:b5:4e:39:03:9f:34: bf:52:48:9f:bd:88:33:e1:79:3b:00:cd:6e:50:d6: 8c:fe:eb:06:cb:04:77:82:ce:90:8a:f0:46:75:ee: 32:e3:7d:95:23:f1:ec:ef:9b:1f:a5:19:82:80:57: b5:44:13:e9:3e:2e:a3:84:3f:e9:32:46:0d:c6:4d: a7:c9:e0:7a:52:90:31:98:2a:e1:8c:4b:08:f5:b2: c4:b8:0a:3c:8f:8c:84:47:f5:c1:b0:88:b4:4d:62: 58:04:a9:12:40:ee:fc:9f:a8:5f:75:d3:d5:f4:bc: bc:44:3d:c3:a5:c4:fc:43:5e:79:13:63:e9:66:a3: c3:de:78:3c:cd:41:58:db:f5:98:bc:84:0d:f4:e7: ce:b1:70:41:1c:6f:0a:01:09:1e:b2:9d:59:d5:c3: 42:6f:34:ce:1f:62:c2:47:12:b5:f2:5c:39:de:28: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A3:23:EF:7B:63:D8:99:D7:81:89:12:7B:42:F7:7D:C0:75:83:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b28980a-5d28-3be0-806f-762cfd98334a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6a:6a:3e:5d:4f:71:61:cb:11:ad:6a:0a:66:25:d2:b4:56: b1:3f:c8:6e:69:c3:7e:19:5c:99:45:fe:6b:28:39:fb:d4:b2: 55:63:5b:c5:16:dc:3b:b1:29:c9:6b:65:c2:08:fb:41:d2:82: 68:6b:da:a2:ba:ae:97:07:02:22:0a:19:49:8a:fb:61:ee:95: c3:f4:a6:21:be:55:ac:3a:34:fc:4c:f1:14:fa:3a:dd:a0:7e: ff:76:c4:7e:77:81:f1:22:29:34:0d:f0:17:eb:52:e1:4d:41: 8e:f0:b1:58:c1:5f:7a:e7:c6:7c:72:3a:56:3d:40:7f:36:d7: de:89:e1:3a:88:b5:60:59:4e:14:3e:75:36:90:89:64:49:ca: 37:fd:bd:f1:3c:47:72:71:e2:da:14:99:a0:59:cc:0a:31:73: 87:2d:20:e2:03:d1:be:37:ef:c0:6a:35:db:71:0b:4f:b3:7e: 13:fe:32:ff:f2:54:ea:f3:6c:07:fb:ef:99:e9:a7:4b:30:37: 35:ab:c4:7c:f4:c2:2e:2c:1f:f7:29:c3:03:8f:30:a8:65:de: ae:04:4e:9b:08:09:a5:70:58:9b:ed:84:67:ea:a6:f5:13:34: bb:ca:cc:70:13:d2:b9:50:33:7d:fa:5a:85:3b:c4:26:56:0b: 4c:16:78:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JicLV2CaIFlW+noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjdjODQ4ZjAtZGZiMC00NzcxLTkwYWQtMDU0YWNjOGIwZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/KxExhLDudooFmZ6bUeC2pvoq6KaPYbLAnJ LTzkz3JX4JMLiH/orQIi08cFVfoAbbCqFmH/q9E3NlqN/Te17keLCj9iqfonCX6U UH/f1CoMShi1TjkDnzS/UkifvYgz4Xk7AM1uUNaM/usGywR3gs6QivBGde4y432V I/Hs75sfpRmCgFe1RBPpPi6jhD/pMkYNxk2nyeB6UpAxmCrhjEsI9bLEuAo8j4yE R/XBsIi0TWJYBKkSQO78n6hfddPV9Ly8RD3DpcT8Q155E2PpZqPD3ng8zUFY2/WY vIQN9OfOsXBBHG8KAQkesp1Z1cNCbzTOH2LCRxK18lw53ijIrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMCjI+97Y9iZ14GJEntC933AdYOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2IyODk4MGEtNWQyOC0z YmUwLTgwNmYtNzYyY2ZkOTgzMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxamo+XU9xYcsRrWoKZiXStFaxP8huacN+GVyZRf5rKDn71LJVY1vF Ftw7sSnJa2XCCPtB0oJoa9qiuq6XBwIiChlJivth7pXD9KYhvlWsOjT8TPEU+jrd oH7/dsR+d4HxIik0DfAX61LhTUGO8LFYwV9658Z8cjpWPUB/NtfeieE6iLVgWU4U PnU2kIlkSco3/b3xPEdyceLaFJmgWcwKMXOHLSDiA9G+N+/AajXbcQtPs34T/jL/ 8lTq82wH+++Z6adLMDc1q8R89MIuLB/3KcMDjzCoZd6uBE6bCAmlcFib7YRn6qb1 EzS7ysxwE9K5UDN9+lqFO8QmVgtMFnj/ -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:22 2026 by rpki-client