$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa File: a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa (raw, json) Hash identifier: eblZ0jrH75r57O7rX/qXlgP4ot2kKEcUJN6V9jvNGag= Subject key identifier: 2B:DE:57:64:F6:38:AF:03:8C:59:AC:80:73:D0:BE:10:79:85:EF:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972D83E23FB865E6436B550 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36616 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d8:3e:23:fb:86:5e:64:36:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a78bf5d-4386-4e62-a610-9788299253f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:a6:c1:8b:55:97:e7:82:c3:f9:7b:27:c0: a4:20:23:f5:f1:cf:bc:e1:6c:fd:29:e8:9f:83:0a: d3:89:8e:8e:45:38:0e:e9:38:d4:65:43:5f:b0:59: f3:f5:54:38:d8:b9:0d:79:25:da:e3:cb:7b:23:02: 6f:0e:54:09:0a:54:ec:18:31:5f:37:65:c0:c2:67: a6:a7:2e:0f:e0:b3:4f:67:08:6e:41:bc:5e:10:d5: 86:f4:cc:91:2c:f9:ae:56:cd:24:4e:84:2e:b8:f3: 65:ce:60:5c:c1:74:27:a4:4d:af:5c:19:82:1b:d7: 87:8a:59:72:a1:c7:d3:58:a1:16:93:ce:76:b3:aa: 46:5a:a3:60:f5:0e:68:a5:18:9d:7e:89:20:fe:7a: 6f:4d:f9:98:3f:f0:67:df:f3:e8:23:e3:2e:41:9d: b1:d1:8d:47:b8:24:e4:a3:b1:a2:97:e3:22:4b:26: e0:a9:06:62:dd:17:76:4b:7e:c3:9c:9c:35:b3:3f: 53:b9:10:7b:18:74:e6:9f:13:35:e0:b4:b8:ec:2e: e0:96:fc:fc:41:15:db:97:c8:75:a5:d6:1a:66:f6: 6d:4f:d5:32:47:91:4d:b3:f1:c9:8e:9d:81:9a:07: a1:5a:20:da:00:eb:6c:ca:f6:1c:5a:64:5f:21:96: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:57:64:F6:38:AF:03:8C:59:AC:80:73:D0:BE:10:79:85:EF:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b92059-d2f4-3f27-a79c-0a9a4a0e21a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0c:1d:ec:6d:15:ed:c0:41:63:d7:07:2b:ae:a4:fb:33:2e: 70:c9:46:8a:ca:b5:79:a7:f4:e8:86:19:d2:5b:5f:08:0e:30: 66:3b:a4:e5:18:53:33:57:d2:fb:2e:58:00:a3:0a:0b:76:fc: 51:03:09:22:1c:ca:c1:3a:3c:2a:63:1a:b3:bc:51:5d:3d:2b: e4:11:f3:58:94:c4:85:7d:02:bb:91:41:30:ec:c8:0c:ff:b9: d8:34:df:01:cc:80:46:9c:6d:56:bd:68:03:fe:bf:04:01:aa: 4c:74:f8:96:2a:73:46:0b:75:cf:92:c1:bc:23:e1:02:fa:ce: d6:62:40:34:ff:c5:75:85:19:7f:c9:8a:cf:b7:6f:44:7b:fb: cb:0d:8b:83:ca:3d:0a:a6:d6:05:64:91:3b:77:1a:53:ba:06: 69:42:c6:43:fd:7f:3e:57:4d:70:94:3d:12:e6:22:fd:e7:87: 73:9a:76:fd:c4:df:5e:f3:99:e2:bb:e4:af:3a:a7:47:9f:8e: f1:2d:9d:76:6c:2c:d6:6e:72:48:da:7e:ca:04:81:e0:1b:22: 10:1c:b5:e0:86:47:51:4b:dd:cb:69:e2:a8:7d:35:47:06:50: 31:81:c6:6a:37:94:19:a7:3d:63:d7:45:e2:04:1d:63:8a:d9: 4f:64:00:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jctg+I/uGXmQ2tVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E3OGJmNWQtNDM4Ni00ZTYyLWE2MTAtOTc4ODI5OTI1M2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxumwYtVl+eCw/l7J8CkICP18c+84Wz9Keif gwrTiY6ORTgO6TjUZUNfsFnz9VQ42LkNeSXa48t7IwJvDlQJClTsGDFfN2XAwmem py4P4LNPZwhuQbxeENWG9MyRLPmuVs0kToQuuPNlzmBcwXQnpE2vXBmCG9eHilly ocfTWKEWk852s6pGWqNg9Q5opRidfokg/npvTfmYP/Bn3/PoI+MuQZ2x0Y1HuCTk o7Gil+MiSybgqQZi3Rd2S37DnJw1sz9TuRB7GHTmnxM14LS47C7glvz8QRXbl8h1 pdYaZvZtT9UyR5FNs/HJjp2BmgehWiDaAOtsyvYcWmRfIZbErwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCveV2T2OK8DjFmsgHPQvhB5he9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTliOTIwNTktZDJmNC0z ZjI3LWE3OWMtMGE5YTRhMGUyMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBVDB3sbRXtwEFj1wcrrqT7My5wyUaKyrV5p/TohhnSW18IDjBmO6Tl GFMzV9L7LlgAowoLdvxRAwkiHMrBOjwqYxqzvFFdPSvkEfNYlMSFfQK7kUEw7MgM /7nYNN8BzIBGnG1WvWgD/r8EAapMdPiWKnNGC3XPksG8I+EC+s7WYkA0/8V1hRl/ yYrPt29Ee/vLDYuDyj0KptYFZJE7dxpTugZpQsZD/X8+V01wlD0S5iL954dzmnb9 xN9e85niu+SvOqdHn47xLZ12bCzWbnJI2n7KBIHgGyIQHLXghkdRS93LaeKofTVH BlAxgcZqN5QZpz1j10XiBB1jitlPZABl -----END CERTIFICATE-----Generated at Tue Oct 6 19:57:18 2026 by rpki-client