$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa File: b212bb31-dc6d-3c2f-a244-f88b92faf648.roa (raw, json) Hash identifier: 7mLld/tAgFGg57urhiaI3awfvPYfWLwvOZENZ+ZEcas= Subject key identifier: FA:37:26:60:88:A7:52:DF:DB:13:D1:17:E9:E2:D7:62:EF:64:A0:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973190C9CF56E6F97C4B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396585 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:19:0c:9c:f5:6e:6f:97:c4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ae4c277-4d2c-493a-b11e-30bfdfb79e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:ad:0e:4d:ca:45:0a:09:c5:3a:c6:cd:67: 92:21:e7:c7:5f:c7:6b:7d:46:c9:b6:2d:8d:5d:df: d8:33:35:97:e8:35:ce:d1:5d:a1:2d:fc:95:c0:3f: b8:b7:6b:2e:97:6a:95:1d:ce:5c:56:af:69:1d:cf: 0e:75:e8:10:24:bc:b4:19:7c:34:0c:d4:dc:11:19: 80:c7:66:69:33:4e:df:73:26:f0:78:50:fb:b4:f9: 49:ad:08:8b:1b:05:d6:19:6d:10:ad:42:ad:43:ed: 38:6c:5d:cf:f4:6b:8a:64:6e:d9:79:ad:21:2c:32: a5:39:5c:58:cc:7b:78:1f:07:1a:1a:23:d4:e2:8b: 6a:09:d2:17:a6:00:f9:97:07:d6:70:ec:e7:92:bc: f1:1d:57:34:51:89:1d:13:d5:52:cd:49:aa:de:fd: f0:3a:d3:60:77:0a:f1:93:90:5a:f8:ea:a3:12:84: df:35:cd:70:f6:be:26:fa:c6:80:03:61:b1:df:67: 3c:fa:f9:b5:c6:85:13:1a:f7:06:26:e6:7b:43:45: 46:a9:29:53:94:01:72:6f:19:53:41:0f:7f:d3:8f: 77:18:29:d4:77:6b:7c:64:e0:2a:ff:b1:a3:65:83: 20:5f:0a:34:f9:1d:7d:69:c6:54:03:24:b1:c4:de: e8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:37:26:60:88:A7:52:DF:DB:13:D1:17:E9:E2:D7:62:EF:64:A0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b212bb31-dc6d-3c2f-a244-f88b92faf648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:10:bf:46:f5:be:ff:02:34:b2:5d:45:9f:f8:a0:fd:91:81: 44:4d:50:93:26:29:7b:cf:8f:4c:55:95:c4:52:5e:12:d3:7c: 85:24:6e:00:57:9d:c2:53:59:a5:01:42:e8:e8:eb:27:35:c0: af:e7:12:0a:1e:cc:18:d8:5c:bd:01:f9:8e:12:35:f7:71:98: 0d:95:95:e8:f4:6e:a8:64:25:38:51:2c:be:62:db:f6:2e:b9: e5:8d:9d:98:c7:7b:ae:3c:b5:50:9a:cb:16:29:e4:3c:da:87: fd:b9:ab:65:01:ee:ba:b6:c4:c4:f2:2f:da:09:5a:d9:d2:43: 60:2c:e9:a3:92:0e:06:2c:7d:a5:e9:ab:23:66:b1:74:42:9e: 74:6c:d1:04:4b:2c:83:be:9e:47:c4:4a:9b:c8:b7:8a:44:b8: c7:fc:73:27:25:da:01:82:24:7f:82:b7:fe:a0:b6:5d:52:75: 38:81:63:ce:0c:2b:6f:c2:a7:04:5b:64:d3:ff:7e:e1:fd:20: 7b:a3:ff:56:f9:68:8a:9b:b4:54:5e:30:4a:2d:b6:d7:d4:7d: c2:94:15:29:b9:d3:44:15:21:71:2d:06:a8:5d:93:46:70:6e: b2:64:3a:8e:cb:21:cc:6a:e9:ee:2c:55:a2:68:3b:3a:3c:cc: a3:d8:0d:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JcxkMnPVub5fEsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFlNGMyNzctNGQyYy00OTNhLWIxMWUtMzBiZmRmYjc5ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCStDk3KRQoJxTrGzWeSIefHX8drfUbJti2N Xd/YMzWX6DXO0V2hLfyVwD+4t2sul2qVHc5cVq9pHc8OdegQJLy0GXw0DNTcERmA x2ZpM07fcybweFD7tPlJrQiLGwXWGW0QrUKtQ+04bF3P9GuKZG7Zea0hLDKlOVxY zHt4HwcaGiPU4otqCdIXpgD5lwfWcOznkrzxHVc0UYkdE9VSzUmq3v3wOtNgdwrx k5Ba+OqjEoTfNc1w9r4m+saAA2Gx32c8+vm1xoUTGvcGJuZ7Q0VGqSlTlAFybxlT QQ9/0493GCnUd2t8ZOAq/7GjZYMgXwo0+R19acZUAySxxN7oqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPo3JmCIp1Lf2xPRF+ni12LvZKDAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxMmJiMzEtZGM2ZC0z YzJmLWEyNDQtZjg4YjkyZmFmNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxEL9G9b7/AjSyXUWf+KD9kYFETVCTJil7z49MVZXEUl4S03yFJG4A V53CU1mlAULo6OsnNcCv5xIKHswY2Fy9AfmOEjX3cZgNlZXo9G6oZCU4USy+Ytv2 LrnljZ2Yx3uuPLVQmssWKeQ82of9uatlAe66tsTE8i/aCVrZ0kNgLOmjkg4GLH2l 6asjZrF0Qp50bNEESyyDvp5HxEqbyLeKRLjH/HMnJdoBgiR/grf+oLZdUnU4gWPO DCtvwqcEW2TT/37h/SB7o/9W+WiKm7RUXjBKLbbX1H3ClBUpudNEFSFxLQaoXZNG cG6yZDqOyyHMaunuLFWiaDs6PMyj2A0B -----END CERTIFICATE-----Generated at Tue Oct 6 15:08:30 2026 by rpki-client