$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa File: aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa (raw, json) Hash identifier: FGQpUMUZ4a0vwQy7jkfEkCJ2/RWL1MkcnhIxqxEJFIs= Subject key identifier: 8F:28:B0:2C:EF:70:D3:7C:5D:28:49:CD:A0:F6:36:04:91:A8:5F:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AC2AE8608EC3BADEB2180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396595 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:c2:ae:86:08:ec:3b:ad:eb:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41481ef3-1113-4537-a2ca-13e5e055d92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:69:81:69:68:db:85:85:b3:4b:c5:b0:ab: 38:c1:26:97:b7:ae:3e:dc:3f:2f:3f:76:17:ad:6f: 51:22:95:36:e3:51:c2:7c:8e:69:e4:72:3c:f8:55: 28:42:2d:10:55:58:c6:55:89:38:9e:b8:04:4e:78: e1:14:86:95:1b:72:40:45:87:c8:6f:79:17:04:ab: 72:06:82:15:1d:16:8c:20:f9:cb:18:2d:91:84:4d: 9e:25:7a:a8:b8:61:87:61:66:f8:2e:6c:a1:3a:1c: 61:56:0b:77:dc:9f:0d:4e:49:39:12:c3:e6:c6:1e: 6a:a9:98:3e:be:8a:4e:c1:5a:47:04:0f:2e:69:82: 38:8b:f8:df:42:de:ef:08:99:c0:07:e8:e8:4e:82: a2:ab:2c:51:b5:fc:96:98:59:61:a7:9c:cd:bb:30: 94:79:94:91:73:77:7c:df:f5:90:60:28:c4:29:f9: 7a:a9:36:f3:07:8a:b9:85:3f:38:9a:f5:55:1f:a0: 5a:dc:c6:9d:d7:fb:aa:d4:a3:62:60:4d:9d:4b:6d: 72:db:fb:c3:54:35:7a:da:fd:b1:9e:ed:51:89:18: 2a:fa:01:4f:56:72:5f:bf:59:cb:93:12:c8:2e:81: d4:d9:b7:0c:d9:aa:14:f4:aa:18:64:23:92:1c:be: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:B0:2C:EF:70:D3:7C:5D:28:49:CD:A0:F6:36:04:91:A8:5F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa8f8b51-73aa-3c6b-abcb-e516290bdbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:91:39:d3:19:a4:e5:3b:e1:e5:b2:ab:9e:4d:33:05:66:93: c3:6c:fd:d7:ad:7c:cb:7c:85:f1:77:03:41:6a:ea:9e:ee:e2: 8b:c1:b6:e1:13:77:cd:1e:d2:ff:9b:76:ce:94:e7:fb:46:d8: 5b:2a:c7:f7:09:09:0b:36:b9:5b:ab:9e:78:f8:58:15:14:e9: 68:49:b0:b6:ea:d3:6c:f3:90:3d:5c:ea:b9:be:ed:46:8e:85: cb:bd:b3:bc:dc:a5:85:6f:bc:fc:ba:d8:b9:94:54:af:f0:d0: d5:f7:56:34:27:cc:f7:08:38:30:68:3c:3f:e3:67:b0:da:c1: dc:d8:9d:ea:15:93:18:ea:9c:a3:ad:d0:1f:b3:5b:58:88:d3: 32:1e:c4:19:55:c1:e1:e2:f2:84:5c:ba:98:36:6f:7a:a2:ce: b9:23:3e:e1:68:ef:be:3f:33:bc:30:b2:e1:0e:05:82:35:90: 45:af:87:14:d4:b1:03:53:62:a8:c6:93:aa:27:34:4f:5f:43: a8:af:2c:68:19:e7:ca:82:9d:dd:35:e3:f0:7f:fb:ba:d0:fb: 4c:20:79:44:6f:78:a1:c9:ab:6f:b9:2c:0a:fd:7e:0a:0f:a2: 4c:22:08:30:57:1b:35:4e:cc:33:2c:c6:3a:02:6c:10:ee:b1: 11:24:22:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JisKuhgjsO63rIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDE0ODFlZjMtMTExMy00NTM3LWEyY2EtMTNlNWUwNTVkOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtylpgWlo24WFs0vFsKs4wSaXt64+3D8vP3YX rW9RIpU241HCfI5p5HI8+FUoQi0QVVjGVYk4nrgETnjhFIaVG3JARYfIb3kXBKty BoIVHRaMIPnLGC2RhE2eJXqouGGHYWb4LmyhOhxhVgt33J8NTkk5EsPmxh5qqZg+ vopOwVpHBA8uaYI4i/jfQt7vCJnAB+joToKiqyxRtfyWmFlhp5zNuzCUeZSRc3d8 3/WQYCjEKfl6qTbzB4q5hT84mvVVH6Ba3Mad1/uq1KNiYE2dS21y2/vDVDV62v2x nu1RiRgq+gFPVnJfv1nLkxLILoHU2bcM2aoU9KoYZCOSHL51jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8osCzvcNN8XShJzaD2NgSRqF+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE4ZjhiNTEtNzNhYS0z YzZiLWFiY2ItZTUxNjI5MGJkYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+ROdMZpOU74eWyq55NMwVmk8Ns/detfMt8hfF3A0Fq6p7u4ovBtuET d80e0v+bds6U5/tG2Fsqx/cJCQs2uVurnnj4WBUU6WhJsLbq02zzkD1c6rm+7UaO hcu9s7zcpYVvvPy62LmUVK/w0NX3VjQnzPcIODBoPD/jZ7DawdzYneoVkxjqnKOt 0B+zW1iI0zIexBlVweHi8oRcupg2b3qizrkjPuFo774/M7wwsuEOBYI1kEWvhxTU sQNTYqjGk6onNE9fQ6ivLGgZ58qCnd014/B/+7rQ+0wgeURveKHJq2+5LAr9fgoP okwiCDBXGzVOzDMsxjoCbBDusREkIhA= -----END CERTIFICATE-----Generated at Wed Oct 7 13:09:45 2026 by rpki-client