$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: KxSSRdl1FOalyNr9/Jm3Kbd8lFE22ftrJ2dMVHMjiQw= Subject key identifier: E4:4F:7A:FF:75:9D:F8:45:4F:85:D2:4B:67:4F:66:79:CA:8D:C0:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988E2533B033E3382E1DA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:e2:53:3b:03:3e:33:82:e1:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba23fb00-d12d-4834-b3df-73b072c513b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:70:61:8a:09:1e:4f:d0:44:b3:e6:fa:c7: 0d:cf:ce:01:2d:32:ef:b8:28:e0:ad:4a:9c:d5:f4: a2:d2:1c:9d:e2:ce:3a:40:f0:ba:33:8f:16:d2:5a: b4:1f:04:e0:0b:4f:ea:21:d6:b1:d6:f9:9a:75:51: 79:7d:35:92:e8:69:27:ad:72:e2:cb:85:ec:d5:6c: 74:45:84:86:78:50:53:d0:11:8d:f3:7a:5d:06:b0: fa:59:c0:0b:04:e7:09:c9:28:09:1f:af:b0:eb:16: f5:9e:c9:56:da:b4:05:fc:48:d5:83:47:59:6d:74: a4:d1:de:be:76:b9:34:93:1a:b5:25:b0:e1:11:ed: 60:f4:41:c0:aa:51:49:e4:42:b8:a7:f4:9a:5d:a5: 7b:9c:b2:9f:c0:3d:39:7d:84:85:e1:e2:c5:45:b4: f7:e6:50:a0:33:c9:68:11:6e:08:a0:ea:12:c0:da: 35:b7:4b:eb:17:ac:ff:02:f4:20:53:00:e8:fc:12: 0c:4a:9f:2b:30:b6:e7:2a:2e:85:09:e0:db:ae:4b: f4:a6:b4:74:ba:a6:9b:21:23:1d:d5:bf:3e:c6:25: 00:0b:58:1a:4b:b9:fd:af:ce:24:a8:39:52:b5:11: a1:f9:9d:ff:74:fe:b8:b9:61:5d:68:92:8c:d9:72: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4F:7A:FF:75:9D:F8:45:4F:85:D2:4B:67:4F:66:79:CA:8D:C0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4b:19:37:7a:6a:7e:7f:a5:4d:7d:61:25:0e:b0:4a:a5:e3: 25:93:96:18:ad:08:76:c3:d8:c8:c8:89:b8:9c:49:b5:f7:c4: bf:b6:e9:6d:f1:27:c0:4f:d7:08:af:0c:ef:d5:07:21:a7:17: dc:40:f8:05:55:ed:41:ec:c5:16:e6:6e:ab:39:73:31:fb:13: ac:1d:36:19:8c:69:d6:ed:df:a5:97:28:3e:a7:37:d9:26:9f: 43:e3:ce:43:45:61:f6:70:79:5e:61:9f:a5:19:3a:cc:74:d6: 91:e0:a6:29:e4:50:64:0e:67:40:92:d5:3e:d0:1e:61:b2:74: 37:da:2e:36:81:11:8d:68:05:a6:1b:1f:1b:88:35:70:38:ee: 51:72:3c:1a:e9:e1:bc:d5:5e:7f:ea:27:95:0a:3f:0d:51:35: 15:6c:09:2b:1e:c0:5d:69:fc:07:aa:88:f0:df:28:e4:18:1c: cc:4d:a0:b4:dc:2c:e4:61:77:7c:4b:2e:28:a9:95:80:dc:bb: cd:10:ae:45:de:19:7d:36:f0:a7:20:36:cf:47:1d:7c:e5:f8: e3:d8:15:b4:d5:48:de:e2:25:35:d2:a1:e3:96:5e:1c:ff:f3: 6d:7a:c7:2f:60:bf:ff:71:7a:2b:27:1f:31:f9:6d:d4:23:0a: d2:7f:2a:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiOJTOwM+M4Lh2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmEyM2ZiMDAtZDEyZC00ODM0LWIzZGYtNzNiMDcyYzUxM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSJwYYoJHk/QRLPm+scNz84BLTLvuCjgrUqc 1fSi0hyd4s46QPC6M48W0lq0HwTgC0/qIdax1vmadVF5fTWS6GknrXLiy4Xs1Wx0 RYSGeFBT0BGN83pdBrD6WcALBOcJySgJH6+w6xb1nslW2rQF/EjVg0dZbXSk0d6+ drk0kxq1JbDhEe1g9EHAqlFJ5EK4p/SaXaV7nLKfwD05fYSF4eLFRbT35lCgM8lo EW4IoOoSwNo1t0vrF6z/AvQgUwDo/BIMSp8rMLbnKi6FCeDbrkv0prR0uqabISMd 1b8+xiUAC1gaS7n9r84kqDlStRGh+Z3/dP64uWFdaJKM2XJKRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFORPev91nfhFT4XSS2dPZnnKjcBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+Sxk3emp+f6VNfWElDrBKpeMlk5YYrQh2w9jIyIm4nEm198S/tult 8SfAT9cIrwzv1QchpxfcQPgFVe1B7MUW5m6rOXMx+xOsHTYZjGnW7d+llyg+pzfZ Jp9D485DRWH2cHleYZ+lGTrMdNaR4KYp5FBkDmdAktU+0B5hsnQ32i42gRGNaAWm Gx8biDVwOO5Rcjwa6eG81V5/6ieVCj8NUTUVbAkrHsBdafwHqojw3yjkGBzMTaC0 3CzkYXd8Sy4oqZWA3LvNEK5F3hl9NvCnIDbPRx185fjj2BW01Uje4iU10qHjll4c //NtescvYL//cXorJx8x+W3UIwrSfyrB -----END CERTIFICATE-----Generated at Thu Oct 8 01:13:48 2026 by rpki-client