$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa File: af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json) Hash identifier: 8d0a+ednVzfIWfOd5R8XA4lU12kO9qyb6R0xBn2gjBA= Subject key identifier: 56:75:6E:11:BB:DF:48:4D:58:69:79:8E:AB:87:21:7A:92:43:A5:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973238F9DE52CC26EF3C800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:23:8f:9d:e5:2c:c2:6e:f3:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f6ebdb10-92f3-462f-b141-c50c7779a26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:5f:7b:87:bb:c1:d9:f3:74:f6:95:a2:1a: 02:f2:7a:d2:40:88:92:d8:d9:92:37:27:6d:6a:7c: 74:e4:d3:98:7a:ac:22:c4:4b:fd:f7:d5:13:0b:f6: ae:07:2d:b6:f2:d6:65:15:47:cb:bc:e7:16:b2:f8: d5:fa:8c:2d:aa:86:c5:64:11:9f:4b:d7:2f:c2:52: 23:ca:1b:7a:8f:4c:9c:d1:f1:27:d9:43:0c:a8:55: 7e:2c:4e:ed:ea:68:84:1d:de:96:cc:3b:8f:97:e7: 49:63:a1:45:dc:0a:ab:af:17:8b:e2:40:38:03:6f: 23:01:25:9c:c5:3c:5d:c5:95:e3:a9:b6:8a:29:2d: 2a:5b:e4:7c:d8:db:f9:72:1c:3c:77:7e:7a:8c:2d: 85:a6:a2:55:59:6f:74:24:65:c3:a4:a5:98:c8:0f: ea:c4:cc:b2:87:3a:9c:5f:db:43:81:55:04:7b:e4: 20:ba:6f:f1:08:bf:1b:73:a8:36:20:26:7e:91:c1: fe:58:1f:c8:14:2c:da:ef:42:4f:b6:09:f4:d4:4a: b8:52:68:68:b9:8e:b6:21:c0:22:53:27:81:15:f2: cd:de:55:83:3e:8d:fa:f3:59:c3:bf:71:f8:b1:6d: 1f:cc:e3:3b:a2:d8:5c:fa:31:05:f1:59:4f:59:c2: f0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:75:6E:11:BB:DF:48:4D:58:69:79:8E:AB:87:21:7A:92:43:A5:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:53:af:71:2b:c2:2e:42:78:3c:72:d6:18:b1:6d:ec:82:51: 86:a7:2c:28:63:c2:74:4e:07:f1:4b:9b:79:ee:95:e3:c1:f3: f2:55:f5:85:1e:1a:ba:00:cf:07:1f:a7:4e:9e:d9:04:85:51: 15:f3:1b:d5:07:f3:c2:e1:78:78:27:5c:e5:b9:d3:af:26:24: 06:b1:c0:c6:eb:cc:c1:49:93:e7:1a:a7:2d:e2:c0:29:6c:ef: 63:b5:9c:44:6e:fc:f5:f1:89:4c:c6:69:b5:5d:8d:6d:c0:8d: ea:af:49:12:85:6c:71:70:d3:c5:46:43:01:14:5d:1c:e9:c0: 1a:bf:13:69:87:e3:32:6a:73:b7:f0:ad:a0:8f:23:45:43:e9: 38:f0:c2:bc:57:60:1b:6b:ee:23:f3:85:39:7e:6b:96:c8:e1: 53:b9:87:dd:66:11:01:71:a1:19:4d:f6:9d:e2:6c:79:7b:19: 2d:fb:81:5d:5a:53:87:ff:dc:2d:b1:d2:68:16:be:c7:1d:cd: c6:70:99:15:bb:d5:18:0f:66:2a:77:89:36:4a:f1:3a:bf:3f: 67:b6:cb:12:d9:6f:f0:a2:8e:67:bb:4e:a9:7c:92:58:d8:a0: e6:47:7e:f0:14:79:3d:6d:d7:64:19:fa:5c:19:66:20:2d:d5: e7:26:c1:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JcyOPneUswm7zyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjZlYmRiMTAtOTJmMy00NjJmLWIxNDEtYzUwYzc3NzlhMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYVfe4e7wdnzdPaVohoC8nrSQIiS2NmSNydt anx05NOYeqwixEv999UTC/auBy228tZlFUfLvOcWsvjV+owtqobFZBGfS9cvwlIj yht6j0yc0fEn2UMMqFV+LE7t6miEHd6WzDuPl+dJY6FF3AqrrxeL4kA4A28jASWc xTxdxZXjqbaKKS0qW+R82Nv5chw8d356jC2FpqJVWW90JGXDpKWYyA/qxMyyhzqc X9tDgVUEe+Qgum/xCL8bc6g2ICZ+kcH+WB/IFCza70JPtgn01Eq4UmhouY62IcAi UyeBFfLN3lWDPo3681nDv3H4sW0fzOM7othc+jEF8VlPWcLwDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFZ1bhG730hNWGl5jquHIXqSQ6X7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4NTYxNGUtN2M5Mi0z NjQzLWI1NWMtNDcwZTVlYzMxZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYU69xK8IuQng8ctYYsW3sglGGpywoY8J0TgfxS5t57pXjwfPyVfWF Hhq6AM8HH6dOntkEhVEV8xvVB/PC4Xh4J1zludOvJiQGscDG68zBSZPnGqct4sAp bO9jtZxEbvz18YlMxmm1XY1twI3qr0kShWxxcNPFRkMBFF0c6cAavxNph+MyanO3 8K2gjyNFQ+k48MK8V2Aba+4j84U5fmuWyOFTuYfdZhEBcaEZTfad4mx5exkt+4Fd WlOH/9wtsdJoFr7HHc3GcJkVu9UYD2Yqd4k2SvE6vz9ntssS2W/woo5nu06pfJJY 2KDmR37wFHk9bddkGfpcGWYgLdXnJsER -----END CERTIFICATE-----Generated at Tue Oct 6 11:41:53 2026 by rpki-client