$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa File: a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa (raw, json) Hash identifier: oQgaQNqtNAKQf1Lp6Xj6n1nI93uamCjN7+bUudAIZ5Q= Subject key identifier: 01:51:B9:80:14:AF:EC:EE:20:7A:90:8B:E4:98:73:E7:5B:39:DB:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987466C6B82FB05BF0C8AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396580 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:46:6c:6b:82:fb:05:bf:0c:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ff9604f-cf9c-4fe0-9261-d1687e45f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:dd:3d:af:1e:a8:cd:eb:1c:36:9f:a5:ca: e5:3d:d0:5e:eb:30:e4:cf:f2:15:c1:0e:00:c2:06: e6:bf:c4:87:fb:0e:39:6d:b9:fa:fe:e3:d9:69:90: 1f:67:49:16:d7:d4:34:42:f6:0b:60:23:86:b4:46: c6:0e:71:55:a3:db:ff:8e:50:81:09:a1:bb:34:7a: dd:0b:48:ab:cd:56:cf:72:5d:3f:8c:f9:c3:8a:e9: 9b:c5:99:e5:20:46:80:07:fe:c6:bf:61:e3:d9:44: c9:ea:61:8e:d8:8a:91:e5:52:36:da:00:4a:d4:9d: 6c:02:28:15:8b:fc:bd:60:2a:e1:11:47:3c:14:3d: 39:65:ec:32:7d:2b:5a:43:89:a3:9f:65:95:3b:3c: e7:1a:03:10:b7:1e:06:9a:fe:67:1c:c9:d9:bb:4f: 66:f0:f3:bc:8c:3f:39:f9:81:3d:9f:47:47:df:df: 24:be:31:c4:da:ed:45:24:23:14:b5:31:08:18:14: e9:47:db:50:a3:36:a1:7d:45:72:8c:b9:e9:a7:2f: 68:60:e8:66:9a:97:e0:83:ef:06:42:9b:6f:1e:cb: cb:ae:e6:23:c2:70:c2:56:f0:84:45:f0:dd:46:da: 70:dd:1e:d5:6f:a7:d1:4a:7d:92:f3:77:50:fe:0b: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:51:B9:80:14:AF:EC:EE:20:7A:90:8B:E4:98:73:E7:5B:39:DB:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:65:20:d6:28:2b:27:5b:ba:72:46:60:0a:aa:2d:fe:a1:f0: b3:68:81:6a:5a:72:9e:17:71:18:4c:e7:b4:19:50:df:3b:24: 0e:20:35:16:75:18:72:3b:c0:9f:7d:e6:de:6f:4a:dc:95:8a: 86:28:bd:22:0e:b7:6f:03:b4:01:6c:8f:87:ab:59:1b:86:3b: 53:28:fc:c6:2f:d8:1b:5c:c2:d8:be:af:4d:c8:99:a2:56:ea: cf:55:e7:e0:a0:b5:bf:52:5e:bd:f6:81:d1:b0:8b:ae:4c:31: 46:06:a1:dd:01:1b:9d:ad:86:0d:ab:b6:5d:0e:ed:61:68:e1: e2:ab:a6:09:29:53:2e:e4:54:69:2a:47:2b:87:f7:c5:2c:12: 7f:83:7c:20:c5:8f:cf:cb:88:9b:cd:a8:68:75:37:dc:3e:c8: d3:31:0d:9a:2b:73:e2:c4:ba:ed:2d:12:ed:de:49:2b:b7:99: ba:81:c1:c2:50:92:60:85:01:e9:d3:dd:1b:fb:3a:ca:bf:63: e0:af:7d:2d:d4:bd:22:c8:db:63:a5:28:b5:b6:e9:e7:80:ef: 1b:37:da:db:56:3f:1a:92:70:f3:45:f8:25:11:b4:b8:c0:3c: 71:7e:36:c7:74:73:26:d2:21:03:05:c7:3d:fa:0e:89:52:a3: db:29:42:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jh0Zsa4L7Bb8MisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZmOTYwNGYtY2Y5Yy00ZmUwLTkyNjEtZDE2ODdlNDVmNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMHdPa8eqM3rHDafpcrlPdBe6zDkz/IVwQ4A wgbmv8SH+w45bbn6/uPZaZAfZ0kW19Q0QvYLYCOGtEbGDnFVo9v/jlCBCaG7NHrd C0irzVbPcl0/jPnDiumbxZnlIEaAB/7Gv2Hj2UTJ6mGO2IqR5VI22gBK1J1sAigV i/y9YCrhEUc8FD05ZewyfStaQ4mjn2WVOzznGgMQtx4Gmv5nHMnZu09m8PO8jD85 +YE9n0dH398kvjHE2u1FJCMUtTEIGBTpR9tQozahfUVyjLnppy9oYOhmmpfgg+8G QptvHsvLruYjwnDCVvCERfDdRtpw3R7Vb6fRSn2S83dQ/gvPvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAFRuYAUr+zuIHqQi+SYc+dbOdvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTY4YzQ1ZjctNDk2Mi0z ZDJiLWFlYzctNGIyODFkYmQ1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANZSDWKCsnW7pyRmAKqi3+ofCzaIFqWnKeF3EYTOe0GVDfOyQOIDUW dRhyO8Cffebeb0rclYqGKL0iDrdvA7QBbI+Hq1kbhjtTKPzGL9gbXMLYvq9NyJmi VurPVefgoLW/Ul699oHRsIuuTDFGBqHdARudrYYNq7ZdDu1haOHiq6YJKVMu5FRp Kkcrh/fFLBJ/g3wgxY/Py4ibzahodTfcPsjTMQ2aK3PixLrtLRLt3kkrt5m6gcHC UJJghQHp090b+zrKv2Pgr30t1L0iyNtjpSi1tunngO8bN9rbVj8aknDzRfglEbS4 wDxxfjbHdHMm0iEDBcc9+g6JUqPbKUIL -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:41 2026 by rpki-client