$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3037e65-f574-3063-b261-2a91fa28d5d1.roa File: a3037e65-f574-3063-b261-2a91fa28d5d1.roa (raw, json) Hash identifier: g4uQpXdII4ORxm1yaqkt9Pt74IwRVNuyikd2IakMNcI= Subject key identifier: 45:2D:55:75:3C:15:A7:65:35:95:50:1A:FF:34:2E:7F:B4:B6:14:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973979AC2302B271B0EF780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3037e65-f574-3063-b261-2a91fa28d5d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396596 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:97:9a:c2:30:2b:27:1b:0e:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3657015-67e7-4fb1-b6ef-0d68b40bd997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:24:a3:37:5e:25:65:35:f8:8e:60:c2:76: 73:1e:ac:40:fa:86:b3:51:d9:b4:b9:34:8c:4b:91: 08:13:a4:9e:2a:b4:eb:db:85:c5:15:12:b8:eb:26: b9:0f:c4:97:9a:f2:f9:6d:44:5e:6c:7c:ec:e0:7f: 62:ca:51:ed:b6:eb:3f:54:42:fb:be:cb:35:8b:ea: 8f:df:05:a1:67:8c:a0:08:b0:a4:ca:76:fb:33:4c: c3:6a:41:e5:43:be:5d:db:a8:04:4e:06:31:c9:21: af:d0:26:23:50:fb:0d:11:cf:06:7b:05:b7:a6:17: 1c:bc:b3:89:7f:8e:a3:35:bb:7a:e7:9f:c0:c2:e3: 23:d0:87:7b:9d:bb:0c:4e:23:8e:42:19:46:8a:7e: 90:b7:c2:27:30:c5:c4:a4:7f:96:6d:fe:91:95:8b: c0:0e:04:cd:ee:6e:d4:6d:8b:b6:a8:c6:9b:ea:53: 2f:ac:48:7d:6a:bb:ca:ee:9d:85:58:f5:e0:1d:e7: 9a:19:7d:7b:9d:95:8d:aa:f4:71:44:7b:66:01:ba: 49:4c:af:40:17:c4:d1:d7:aa:48:b7:dd:6a:21:9c: 3a:94:5e:33:34:1e:32:c8:f0:dc:7d:05:c0:da:65: 38:84:4c:35:41:ec:cb:3d:f7:69:bf:7f:08:df:50: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2D:55:75:3C:15:A7:65:35:95:50:1A:FF:34:2E:7F:B4:B6:14:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3037e65-f574-3063-b261-2a91fa28d5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:f5:b8:8f:3e:c9:0c:a0:68:06:7b:b5:08:b2:b7:a1:49: 14:47:21:da:6e:d8:a6:b1:05:0b:1a:b3:44:dd:f3:0b:d6:6e: 60:51:5e:de:73:ab:56:cc:e2:ec:49:cb:31:9f:6e:9b:9e:fe: 06:99:1d:1d:d8:7b:77:72:0f:e0:be:2b:f4:f0:13:5a:f3:c7: 1b:3a:0c:39:4c:f4:44:df:da:06:cf:b3:cb:57:4d:01:f1:28: f2:e4:70:a7:f0:46:06:ee:ea:40:8a:6a:d2:6c:e2:f0:40:b4: cd:f5:4f:a6:e4:90:cc:25:41:5a:c6:da:45:22:58:e0:bf:5f: 7a:c8:ee:0f:85:87:af:e5:5e:86:c7:0f:49:7d:6a:b2:98:90: 23:3e:c4:76:14:41:a1:df:73:3c:db:a8:bc:eb:2c:8d:b5:1d: c4:75:89:dc:7e:a8:5a:a2:35:32:5e:44:5e:95:4c:aa:a4:86: 83:ef:2a:99:23:44:97:f5:36:ef:84:2d:9e:34:d2:00:b5:30: da:31:59:f3:fa:3c:e6:59:fd:c0:74:b2:c9:61:78:3d:e0:90: cb:10:3d:bc:58:82:d8:ed:d9:9c:5c:7d:12:93:69:46:ae:7f: 3b:a5:74:76:ed:da:9a:5c:ea:75:ee:27:f4:71:75:ed:f5:49: 2d:c9:8f:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc5eawjArJxsO94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjM2NTcwMTUtNjdlNy00ZmIxLWI2ZWYtMGQ2OGI0MGJkOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+EkozdeJWU1+I5gwnZzHqxA+oazUdm0uTSM S5EIE6SeKrTr24XFFRK46ya5D8SXmvL5bURebHzs4H9iylHttus/VEL7vss1i+qP 3wWhZ4ygCLCkynb7M0zDakHlQ75d26gETgYxySGv0CYjUPsNEc8GewW3phccvLOJ f46jNbt655/AwuMj0Id7nbsMTiOOQhlGin6Qt8InMMXEpH+Wbf6RlYvADgTN7m7U bYu2qMab6lMvrEh9arvK7p2FWPXgHeeaGX17nZWNqvRxRHtmAbpJTK9AF8TR16pI t91qIZw6lF4zNB4yyPDcfQXA2mU4hEw1QezLPfdpv38I31CMVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEUtVXU8FadlNZVQGv80Ln+0thQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTMwMzdlNjUtZjU3NC0z MDYzLWIyNjEtMmE5MWZhMjhkNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJfPW4jz7JDKBoBnu1CLK3oUkURyHabtimsQULGrNE3fML1m5gUV7e c6tWzOLsScsxn26bnv4GmR0d2Ht3cg/gviv08BNa88cbOgw5TPRE39oGz7PLV00B 8Sjy5HCn8EYG7upAimrSbOLwQLTN9U+m5JDMJUFaxtpFIljgv196yO4PhYev5V6G xw9JfWqymJAjPsR2FEGh33M826i86yyNtR3EdYncfqhaojUyXkRelUyqpIaD7yqZ I0SX9TbvhC2eNNIAtTDaMVnz+jzmWf3AdLLJYXg94JDLED28WILY7dmcXH0Sk2lG rn87pXR27dqaXOp17if0cXXt9UktyY/Y -----END CERTIFICATE-----Generated at Wed Oct 7 02:44:31 2026 by rpki-client