$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa File: 890f82b4-9a88-3384-8b10-1f2bab75f976.roa (raw, json) Hash identifier: ESqtrmhuYiWenqLRQJ6HO5OW4CmlDhys0SomtjbgSX4= Subject key identifier: 16:C8:5A:8E:3B:D9:A3:98:13:AF:6F:79:41:B5:DD:8E:E1:A0:16:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49731603C708323D45CAD540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:16:03:c7:08:32:3d:45:ca:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a5da946-eae5-4523-87e9-914f3cbd0fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:e5:87:e7:a0:a2:58:3d:35:cc:94:dd:93: 53:31:28:42:1a:96:81:f6:78:28:5e:93:a5:0b:85: 76:e3:4e:87:48:12:9d:16:7c:64:8b:14:71:7e:ac: 3d:da:dd:be:9c:c3:6c:fa:c7:fb:1b:77:2e:fd:59: 2c:b6:b7:52:a6:2d:35:14:ae:4c:88:95:2f:95:da: 27:05:1c:86:c5:79:72:c8:d9:c8:d6:3b:a9:3c:25: 89:7d:94:fb:81:eb:7e:ad:94:23:5f:b3:a9:6c:33: 68:6d:63:cb:ea:4b:11:64:d4:a6:51:2b:f1:d8:61: 96:b2:3a:3b:e2:c8:5a:54:14:4a:98:b0:59:cc:9e: 47:c5:52:80:61:56:49:f1:b7:e8:96:e9:33:c4:01: 4b:f6:f8:e0:26:b1:d3:c2:41:4d:37:27:d5:3a:e5: 31:a2:fe:41:38:35:11:dd:fa:91:a4:d6:60:5e:f5: f8:94:ac:95:82:29:df:cd:08:18:16:95:f2:29:bd: 88:40:a5:e1:f5:6e:23:3e:1e:35:a7:63:cd:7f:3a: ae:5f:56:6d:2d:f2:0c:fa:db:2c:91:df:ab:ca:28: ae:1a:21:03:7d:3a:fd:16:be:48:c1:84:46:93:6b: 8f:64:a9:99:58:57:b8:1b:94:42:e7:5c:64:d2:fd: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:5A:8E:3B:D9:A3:98:13:AF:6F:79:41:B5:DD:8E:E1:A0:16:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3b:fa:8c:bc:b4:31:79:9d:86:e9:bb:33:c3:7a:e0:f4:c5: dd:3d:26:47:98:2e:c1:47:b4:45:b8:1d:88:e3:68:75:d9:8f: 1e:7a:1f:4d:20:78:6f:69:63:e0:6d:11:bc:68:a5:18:6e:a0: f8:08:79:f1:c6:1c:62:b6:e0:b8:9d:af:60:77:91:57:04:9b: 7a:a8:87:a8:03:47:89:e1:59:71:97:d5:99:47:e4:0e:0c:cb: b9:c6:31:4c:40:1f:9c:8f:79:a2:e0:aa:ed:dd:c8:82:c9:27: e4:5c:20:86:5a:bc:16:59:c9:e4:67:d3:b5:73:70:11:ac:5f: c1:9d:84:e7:fa:bf:d7:17:69:9f:f7:5d:26:94:73:e3:70:db: 68:d2:dd:6b:c3:c7:6d:0f:8a:1d:da:08:07:91:bd:fe:85:f7: d8:16:f9:eb:f2:91:0a:d2:bc:d0:46:4e:8c:bc:d8:5c:49:4c: 4f:c6:f5:66:f3:07:fe:69:d1:56:ce:a5:3c:4f:09:a7:6b:11: 8f:ed:27:10:3d:c1:33:2c:60:89:43:15:46:69:90:e3:ac:72: 98:3e:34:c6:2d:83:a8:94:46:fd:63:d0:2a:82:a8:f2:c3:c5: 57:38:f0:a8:2c:c6:44:86:db:3b:ce:be:16:a3:1c:4e:e5:8e: e8:9c:d9:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxYDxwgyPUXK1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E1ZGE5NDYtZWFlNS00NTIzLTg3ZTktOTE0ZjNjYmQwZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qflh+egolg9NcyU3ZNTMShCGpaB9ngoXpOl C4V2406HSBKdFnxkixRxfqw92t2+nMNs+sf7G3cu/VkstrdSpi01FK5MiJUvldon BRyGxXlyyNnI1jupPCWJfZT7get+rZQjX7OpbDNobWPL6ksRZNSmUSvx2GGWsjo7 4shaVBRKmLBZzJ5HxVKAYVZJ8bfolukzxAFL9vjgJrHTwkFNNyfVOuUxov5BODUR 3fqRpNZgXvX4lKyVginfzQgYFpXyKb2IQKXh9W4jPh41p2PNfzquX1ZtLfIM+tss kd+ryiiuGiEDfTr9Fr5IwYRGk2uPZKmZWFe4G5RC51xk0v3ReQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbIWo472aOYE69veUG13Y7hoBZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwZjgyYjQtOWE4OC0z Mzg0LThiMTAtMWYyYmFiNzVmOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo7+oy8tDF5nYbpuzPDeuD0xd09JkeYLsFHtEW4HYjjaHXZjx56H00g eG9pY+BtEbxopRhuoPgIefHGHGK24Lidr2B3kVcEm3qoh6gDR4nhWXGX1ZlH5A4M y7nGMUxAH5yPeaLgqu3dyILJJ+RcIIZavBZZyeRn07VzcBGsX8GdhOf6v9cXaZ/3 XSaUc+Nw22jS3WvDx20Pih3aCAeRvf6F99gW+evykQrSvNBGToy82FxJTE/G9Wbz B/5p0VbOpTxPCadrEY/tJxA9wTMsYIlDFUZpkOOscpg+NMYtg6iURv1j0CqCqPLD xVc48KgsxkSG2zvOvhajHE7ljuic2dg= -----END CERTIFICATE-----Generated at Wed Oct 7 22:55:39 2026 by rpki-client