$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa File: 9af53576-fb1d-3bd4-a681-12fe3df74d39.roa (raw, json) Hash identifier: KF1FrtBqt0rJafWywJ69zTRFC3orp29eEOkr65l+emI= Subject key identifier: 77:EB:35:B0:53:3B:1D:A0:F3:33:1C:75:BB:27:85:A2:72:6F:D3:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987A8D23709DDA74D721A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:a8:d2:37:09:dd:a7:4d:72:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a19f48f2-4f0a-4a86-82c3-02ba721315a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:d9:63:4a:41:85:69:75:a2:ad:99:1a:0f: 03:28:d3:0c:2d:e6:d9:36:e5:60:b9:71:a9:f3:05: f1:01:68:8b:fe:7a:7d:bf:f8:84:07:46:49:c0:2f: 3b:8a:c2:32:01:c3:b5:9a:4d:3e:d7:63:76:4b:12: d0:92:eb:e5:48:06:2e:83:f9:76:ee:d6:64:5e:66: f3:6f:a9:be:9f:44:07:a2:da:16:7e:fb:34:c5:52: 79:7e:4b:d5:ab:04:58:79:4d:ca:f6:e8:50:ef:0d: 27:cd:9c:a1:50:70:46:ae:f5:9c:70:72:b9:ff:31: 15:5d:5c:86:c9:b2:9b:7b:5a:9b:ea:58:cb:cb:2a: 0f:76:84:64:1c:e8:bd:15:a0:76:b4:a2:bb:91:d1: 0c:e2:42:17:ab:b1:e6:2c:30:95:9e:cf:31:ad:2d: 88:52:08:e7:83:6c:96:4a:83:c4:54:3e:89:ca:d4: 2d:a3:d4:38:83:7a:22:e4:52:88:c1:b9:97:33:50: bd:2a:10:ca:10:1a:20:0b:f6:11:5e:9d:e6:5b:44: e8:50:30:f1:5e:a4:25:b7:17:29:0d:09:98:8b:e7: f4:38:ef:c2:be:61:bd:bb:19:53:84:dd:95:a1:7b: 8f:66:af:1a:3e:a3:74:59:8d:2b:e9:2b:a5:96:f0: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EB:35:B0:53:3B:1D:A0:F3:33:1C:75:BB:27:85:A2:72:6F:D3:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3b:66:8a:d8:0e:dc:41:b8:47:30:a2:c0:2f:a0:d0:c4:02: 76:1a:b1:1b:83:bc:24:1f:9b:56:30:a9:69:50:0c:f0:04:e8: cb:2b:bd:29:ed:a1:d7:32:ca:f6:ce:63:9d:af:00:6b:b7:8a: 7a:eb:d9:4b:1b:23:4f:17:d2:e4:06:68:d7:ad:05:3f:02:9c: 68:03:a8:6e:79:41:5f:73:af:bb:10:56:4c:ba:f6:e1:d4:72: f7:04:4f:7b:85:b4:4c:a0:1a:f8:56:8d:9d:7b:15:de:64:fa: b4:6f:20:39:fe:da:81:56:14:57:d0:f2:6d:ba:07:5a:01:dd: 5f:b3:cd:ce:9c:40:5f:fd:e3:4f:4c:8e:2f:53:69:02:c0:37: e3:41:d9:1a:d8:96:84:47:68:ae:a4:4f:83:9e:62:0b:45:78: 35:b3:9d:bf:ee:b2:16:01:dc:5e:48:1b:10:0e:19:fb:d3:96: 97:28:fa:77:16:73:02:0b:b3:2e:7e:2b:5f:3d:a8:37:54:a9: ea:88:7b:13:f9:d5:d0:69:ef:8f:45:19:a4:e2:3f:b9:44:ab: 86:8e:f9:7f:bf:3b:12:cb:dd:23:95:e7:a7:d6:c1:65:5e:9d: c4:92:35:1b:53:78:a5:e1:85:bc:95:48:a5:6f:94:0c:9a:c3: f6:c7:b0:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh6jSNwndp01yGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTE5ZjQ4ZjItNGYwYS00YTg2LTgyYzMtMDJiYTcyMTMxNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF7ZY0pBhWl1oq2ZGg8DKNMMLebZNuVguXGp 8wXxAWiL/np9v/iEB0ZJwC87isIyAcO1mk0+12N2SxLQkuvlSAYug/l27tZkXmbz b6m+n0QHotoWfvs0xVJ5fkvVqwRYeU3K9uhQ7w0nzZyhUHBGrvWccHK5/zEVXVyG ybKbe1qb6ljLyyoPdoRkHOi9FaB2tKK7kdEM4kIXq7HmLDCVns8xrS2IUgjng2yW SoPEVD6JytQto9Q4g3oi5FKIwbmXM1C9KhDKEBogC/YRXp3mW0ToUDDxXqQltxcp DQmYi+f0OO/CvmG9uxlThN2VoXuPZq8aPqN0WY0r6SullvBnwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfrNbBTOx2g8zMcdbsnhaJyb9MkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFmNTM1NzYtZmIxZC0z YmQ0LWE2ODEtMTJmZTNkZjc0ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM7ZorYDtxBuEcwosAvoNDEAnYasRuDvCQfm1YwqWlQDPAE6MsrvSnt odcyyvbOY52vAGu3inrr2UsbI08X0uQGaNetBT8CnGgDqG55QV9zr7sQVky69uHU cvcET3uFtEygGvhWjZ17Fd5k+rRvIDn+2oFWFFfQ8m26B1oB3V+zzc6cQF/9409M ji9TaQLAN+NB2RrYloRHaK6kT4OeYgtFeDWznb/ushYB3F5IGxAOGfvTlpco+ncW cwILsy5+K189qDdUqeqIexP51dBp749FGaTiP7lEq4aO+X+/OxLL3SOV56fWwWVe ncSSNRtTeKXhhbyVSKVvlAyaw/bHsPg= -----END CERTIFICATE-----Generated at Wed Oct 7 02:25:51 2026 by rpki-client