$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa File: 97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa (raw, json) Hash identifier: SyM1zqXi4a8j1OM/JeAwa437+lgx7k/wFZKHm0urHyA= Subject key identifier: 31:FF:3C:16:9A:1B:4F:1D:66:71:CD:09:B4:EA:01:A7:9E:AA:44:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C18C213A269F209FB9E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396541 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:18:c2:13:a2:69:f2:09:fb:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=06ba6914-f41b-4311-844b-5efad8bf1c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:67:d4:c7:c6:63:c1:e4:f1:2d:98:eb:b4: ba:b6:2a:ac:e3:92:ab:b9:2e:3f:bc:89:dd:55:65: 3d:02:66:7a:1e:d2:a9:cb:07:cf:0d:10:49:4e:6a: 53:81:69:94:59:ab:23:03:02:ff:93:50:87:5e:81: 62:f2:76:8d:be:a0:2a:d7:81:b1:37:9c:5e:6e:f9: 0a:60:7a:47:a0:0c:81:87:9e:b8:35:2e:f2:09:49: 90:54:07:2f:e9:1e:e2:20:44:f4:1a:cb:52:e1:2a: fc:93:a1:23:21:8e:d4:34:0d:50:7f:c7:c5:98:4c: 85:31:d5:2e:37:28:3c:1b:55:d1:86:26:46:cf:96: 0d:b1:39:c3:89:a9:c5:93:e0:26:fc:e7:a2:9b:bd: ae:a5:cd:68:68:51:3f:f2:1b:f7:ae:d2:c7:fe:33: 54:97:f4:27:c5:6f:0c:e8:4a:39:1e:55:49:f1:01: 54:18:b4:4d:2d:df:0d:6d:52:ad:6b:21:a8:bb:34: 2c:c1:da:0b:d8:1d:b4:1e:be:53:da:62:56:d6:fe: 4a:c4:bc:14:86:dd:0e:0a:52:1a:63:44:89:b3:be: d5:5e:a7:b6:a3:7c:1b:70:25:4b:60:ef:19:e7:27: 15:f4:c2:2e:6e:66:5d:98:18:62:76:db:e7:69:2b: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:3C:16:9A:1B:4F:1D:66:71:CD:09:B4:EA:01:A7:9E:AA:44:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97a13ec8-5f90-3ed2-8154-e937ce7ab68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:07:bb:78:14:11:4f:77:c2:9a:c0:6f:c9:dc:d3:ad:ac:09: 41:99:a7:3b:74:4b:97:62:ec:b1:fb:11:52:d8:6e:5e:5c:ec: 7b:cf:c4:c6:02:90:bd:6a:83:2f:cf:45:f4:2f:27:ee:7a:6f: 46:72:9d:36:2d:69:f7:9c:14:64:a8:9d:01:3d:61:09:47:7a: b4:bb:28:f9:9b:f1:46:e6:df:b2:27:d9:25:9b:01:6a:03:cc: 6a:13:2c:7e:8b:c6:05:19:70:d5:23:c7:1f:2e:fc:84:9d:34: 6f:7c:5f:05:74:95:a9:d5:63:30:59:49:26:00:fe:71:91:e6: 90:d0:94:6e:cb:a1:ea:2a:bd:e3:ba:bc:4f:c9:9f:87:b7:ee: 97:a4:72:7c:98:64:f4:b1:bb:43:16:68:d1:27:52:62:4f:1a: 4a:7f:ad:ef:5c:ff:93:f3:99:cc:bf:a5:75:47:88:8f:16:0d: 65:f0:64:17:39:f9:41:43:cc:6e:37:4e:a7:51:1a:89:d9:cb: 6c:8f:b6:b2:96:cc:f6:12:5e:a7:c7:06:3a:79:af:09:00:10: c0:f7:11:97:3b:c6:c0:86:8f:44:11:05:09:64:d4:19:1e:66: f0:b7:cd:dd:95:e6:a4:9f:da:1c:07:12:ef:25:cb:9d:fb:a1: d2:22:d3:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JjBjCE6Jp8gn7ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZiYTY5MTQtZjQxYi00MzExLTg0NGItNWVmYWQ4YmYxYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPFn1MfGY8Hk8S2Y67S6tiqs45KruS4/vInd VWU9AmZ6HtKpywfPDRBJTmpTgWmUWasjAwL/k1CHXoFi8naNvqAq14GxN5xebvkK YHpHoAyBh564NS7yCUmQVAcv6R7iIET0GstS4Sr8k6EjIY7UNA1Qf8fFmEyFMdUu Nyg8G1XRhiZGz5YNsTnDianFk+Am/Oeim72upc1oaFE/8hv3rtLH/jNUl/QnxW8M 6Eo5HlVJ8QFUGLRNLd8NbVKtayGouzQswdoL2B20Hr5T2mJW1v5KxLwUht0OClIa Y0SJs77VXqe2o3wbcCVLYO8Z5ycV9MIubmZdmBhidtvnaStTGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDH/PBaaG08dZnHNCbTqAaeeqkROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdhMTNlYzgtNWY5MC0z ZWQyLTgxNTQtZTkzN2NlN2FiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9B7t4FBFPd8KawG/J3NOtrAlBmac7dEuXYuyx+xFS2G5eXOx7z8TG ApC9aoMvz0X0Lyfuem9Gcp02LWn3nBRkqJ0BPWEJR3q0uyj5m/FG5t+yJ9klmwFq A8xqEyx+i8YFGXDVI8cfLvyEnTRvfF8FdJWp1WMwWUkmAP5xkeaQ0JRuy6HqKr3j urxPyZ+Ht+6XpHJ8mGT0sbtDFmjRJ1JiTxpKf63vXP+T85nMv6V1R4iPFg1l8GQX OflBQ8xuN06nURqJ2ctsj7aylsz2El6nxwY6ea8JABDA9xGXO8bAho9EEQUJZNQZ Hmbwt83dleakn9ocBxLvJcud+6HSItPa -----END CERTIFICATE-----Generated at Tue Oct 6 22:01:34 2026 by rpki-client