$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa File: 89bd953d-ca92-3d30-a75f-08e12d302671.roa (raw, json) Hash identifier: E9jiIalkdqiD3cQScXkrQBov8kCmkDHfHbRx/4UXS40= Subject key identifier: 26:EC:3E:48:D3:0B:8F:E3:BC:B9:90:26:B0:62:B2:8B:EE:A9:81:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4986E83AB2B9B12720FF0A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396542 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:e8:3a:b2:b9:b1:27:20:ff:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f42417d9-7dea-469b-901b-e8c17adbe92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:89:6b:b3:dd:ae:53:77:65:18:dc:89:29: 3b:a8:17:27:a7:d4:ba:be:43:0f:53:25:56:9d:33: 6b:d4:d3:a3:8c:40:4e:6f:0f:51:63:61:4c:f8:8b: 37:8e:34:22:be:a2:94:e8:71:f4:74:d0:ec:59:f2: da:9a:25:61:e3:f6:4d:e4:ae:62:de:f1:9a:cb:4e: f2:23:20:6e:6a:78:1e:1a:48:c1:9a:c7:76:87:2b: 2b:23:5c:d2:2e:32:14:fe:8b:14:70:bf:7c:b9:8c: fc:65:a5:80:a6:75:f6:a9:7c:be:d5:7c:1b:10:a0: a0:7f:c4:1d:38:6b:29:61:51:92:b0:58:22:63:a5: 34:0e:74:2a:97:8b:8c:56:b8:a2:32:44:13:6a:ec: 77:1d:6b:af:d7:40:c4:19:0d:2e:10:27:22:07:95: aa:a2:53:fe:a2:e2:18:09:11:eb:51:fe:04:f0:8a: 74:c0:09:22:84:e4:f2:fb:ea:02:09:ba:69:db:4f: 5e:17:d7:87:15:7f:75:62:09:42:c1:3d:e5:67:42: 82:d4:38:3d:df:32:86:9c:38:6a:1a:9f:c9:c5:fe: aa:20:3c:e4:15:c5:97:da:a9:39:91:11:d0:24:8a: c6:b5:57:5a:95:0e:41:92:2f:49:71:18:c4:9a:1a: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EC:3E:48:D3:0B:8F:E3:BC:B9:90:26:B0:62:B2:8B:EE:A9:81:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:97:a5:5a:dd:1c:ad:3b:af:14:16:5d:02:4a:fb:b9:25:aa: 9a:32:5d:4b:be:a3:3b:7f:c0:9e:87:10:e0:1c:73:62:66:d6: c3:11:c6:d2:96:78:01:ed:fa:10:58:d2:54:9e:65:c0:e3:6d: 18:ff:f4:e9:6f:b9:c0:0b:af:0b:1a:2f:34:5c:69:90:a8:fb: 9f:9b:c6:10:db:59:9e:5c:56:d7:3a:9e:4d:3d:ee:35:8d:d2: 55:64:b1:0f:44:26:f1:26:10:ca:22:ee:f6:3c:8d:5b:1e:b7: 75:a9:3c:2d:14:0f:65:de:d3:5b:7c:5a:e4:32:2a:d0:1a:d0: 6b:fd:85:19:4b:f6:a2:e1:18:dc:77:61:27:91:df:56:31:17: 2c:8a:11:f2:ec:f8:1d:fa:95:4d:f7:29:4e:d9:de:13:84:05: cc:d7:17:d5:72:12:d8:f2:5f:5c:67:88:63:30:2a:0c:ed:7e: e1:00:fd:1c:f5:28:52:2a:9a:ef:c3:fc:a6:b6:38:42:71:31: 74:61:51:60:83:af:81:75:0d:a1:94:5b:6b:3f:b7:e2:2e:e1: 54:0a:78:63:64:86:ad:b7:d2:c1:b7:ad:78:4a:b4:ba:47:6c: 58:c6:7c:07:d0:93:79:15:b8:07:d1:bd:db:07:61:81:c2:0d: 47:07:7e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhug6srmxJyD/CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQyNDE3ZDktN2RlYS00NjliLTkwMWItZThjMTdhZGJlOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeOJa7PdrlN3ZRjciSk7qBcnp9S6vkMPUyVW nTNr1NOjjEBObw9RY2FM+Is3jjQivqKU6HH0dNDsWfLamiVh4/ZN5K5i3vGay07y IyBuangeGkjBmsd2hysrI1zSLjIU/osUcL98uYz8ZaWApnX2qXy+1XwbEKCgf8Qd OGspYVGSsFgiY6U0DnQql4uMVriiMkQTaux3HWuv10DEGQ0uECciB5WqolP+ouIY CRHrUf4E8Ip0wAkihOTy++oCCbpp209eF9eHFX91YglCwT3lZ0KC1Dg93zKGnDhq Gp/Jxf6qIDzkFcWX2qk5kRHQJIrGtVdalQ5Bki9JcRjEmhq0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbsPkjTC4/jvLmQJrBisovuqYGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODliZDk1M2QtY2E5Mi0z ZDMwLWE3NWYtMDhlMTJkMzAyNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSXpVrdHK07rxQWXQJK+7klqpoyXUu+ozt/wJ6HEOAcc2Jm1sMRxtKW eAHt+hBY0lSeZcDjbRj/9OlvucALrwsaLzRcaZCo+5+bxhDbWZ5cVtc6nk097jWN 0lVksQ9EJvEmEMoi7vY8jVset3WpPC0UD2Xe01t8WuQyKtAa0Gv9hRlL9qLhGNx3 YSeR31YxFyyKEfLs+B36lU33KU7Z3hOEBczXF9VyEtjyX1xniGMwKgztfuEA/Rz1 KFIqmu/D/Ka2OEJxMXRhUWCDr4F1DaGUW2s/t+Iu4VQKeGNkhq230sG3rXhKtLpH bFjGfAfQk3kVuAfRvdsHYYHCDUcHfnI= -----END CERTIFICATE-----Generated at Thu Oct 8 01:13:10 2026 by rpki-client