$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa File: b4ff9d93-5144-396f-b11f-a879fe742559.roa (raw, json) Hash identifier: O8KAQskeWLhhuuTeJkSkMnaSbHQX8jNBRPMj21uDI8M= Subject key identifier: 19:6D:FD:1A:86:0E:B8:6D:71:2C:B2:28:FC:B0:C9:9B:8D:F2:0A:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497347378422E49330D1BE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396605 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:47:37:84:22:e4:93:30:d1:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f52b10e-37c3-4138-9a61-863dad6c91b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:24:0d:15:2a:e3:19:7a:a0:32:ff:c3:67: a7:5d:59:a1:6a:a1:4a:44:f5:80:5b:88:6c:7c:09: 44:d9:a6:bd:69:ae:43:84:b3:70:56:03:97:f3:98: b4:8d:97:9a:ec:6b:df:52:d1:a1:f6:83:5c:54:81: a4:2a:f2:9f:be:15:dc:59:a8:43:51:91:de:98:e3: d5:1e:f3:40:34:97:68:75:82:26:65:7c:8a:6c:d7: fc:8c:79:89:68:ff:3f:24:ff:86:81:3d:9c:25:cc: 46:82:14:e7:eb:3f:a2:12:fd:b5:d1:78:13:b1:cc: 2d:37:5b:47:f0:1d:84:07:7e:c9:d4:4b:09:04:81: b4:63:b3:af:d9:64:bd:0f:17:28:b4:63:3b:c6:8d: 00:49:9a:c9:fe:a8:32:f1:4c:c5:4b:33:4f:19:c6: 9a:7e:97:3f:e2:f6:43:ba:a4:72:c8:3b:81:bb:b0: 43:c7:26:91:5c:5d:8b:ec:a1:01:ca:5e:70:b5:ba: 0e:39:f0:4a:3a:be:d2:90:7d:16:72:e0:6a:17:e9: 38:11:c5:c4:f4:b6:d2:5e:2b:be:a6:a5:e5:3f:01: 6f:d3:32:a1:06:3a:54:8a:34:2e:dd:ae:d8:b8:de: bb:c0:85:e6:12:9e:f9:de:00:05:4e:fe:b7:4b:7e: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:FD:1A:86:0E:B8:6D:71:2C:B2:28:FC:B0:C9:9B:8D:F2:0A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4ff9d93-5144-396f-b11f-a879fe742559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:32:ab:69:da:85:d9:2b:f0:30:25:82:96:53:81:6f:65:3e: f0:2d:f3:47:44:67:66:69:18:8f:06:37:3e:cb:9c:b3:9d:56: 31:34:6f:02:f2:cd:3f:3a:28:fd:50:d3:ff:18:47:63:fb:85: 29:20:a5:0f:1a:bd:0c:40:df:35:fd:f2:47:0c:e0:b5:51:c2: 21:e5:34:1b:55:bb:94:86:8d:1c:ee:b1:5c:e9:01:5e:ff:40: b8:05:ed:91:07:41:59:22:1c:9a:60:4d:39:a5:c4:00:b8:01: 38:3a:a0:58:fa:ca:5c:d3:91:0c:73:28:b3:48:c0:77:bb:3c: 16:04:4e:4a:16:c1:00:fe:a2:68:cb:be:9b:fa:3e:93:9b:1a: 1f:fc:86:f5:3a:c1:bd:d5:26:30:e9:9c:9c:d7:93:5d:d2:83: 68:2e:18:20:84:e1:0d:99:82:04:77:7e:e4:64:e6:7b:b0:f0: 13:70:b6:88:68:43:bc:90:a7:1c:b5:03:97:5c:e5:b8:47:c4: 4b:4b:52:9f:b7:8e:3c:ef:1b:71:74:55:77:ba:31:06:4f:87: d2:12:c7:18:e5:5e:a7:ca:c4:06:75:7e:e1:79:12:7c:65:82: 96:e7:0a:e6:3d:18:37:5f:3a:53:ba:4a:9b:1c:9a:bd:ce:c8: c5:57:dc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0c3hCLkkzDRvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGY1MmIxMGUtMzdjMy00MTM4LTlhNjEtODYzZGFkNmM5MWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvYkDRUq4xl6oDL/w2enXVmhaqFKRPWAW4hs fAlE2aa9aa5DhLNwVgOX85i0jZea7GvfUtGh9oNcVIGkKvKfvhXcWahDUZHemOPV HvNANJdodYImZXyKbNf8jHmJaP8/JP+GgT2cJcxGghTn6z+iEv210XgTscwtN1tH 8B2EB37J1EsJBIG0Y7Ov2WS9DxcotGM7xo0ASZrJ/qgy8UzFSzNPGcaafpc/4vZD uqRyyDuBu7BDxyaRXF2L7KEByl5wtboOOfBKOr7SkH0WcuBqF+k4EcXE9LbSXiu+ pqXlPwFv0zKhBjpUijQu3a7YuN67wIXmEp753gAFTv63S34axQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlt/RqGDrhtcSyyKPywyZuN8gpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjRmZjlkOTMtNTE0NC0z OTZmLWIxMWYtYTg3OWZlNzQyNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUyq2nahdkr8DAlgpZTgW9lPvAt80dEZ2ZpGI8GNz7LnLOdVjE0bwLy zT86KP1Q0/8YR2P7hSkgpQ8avQxA3zX98kcM4LVRwiHlNBtVu5SGjRzusVzpAV7/ QLgF7ZEHQVkiHJpgTTmlxAC4ATg6oFj6ylzTkQxzKLNIwHe7PBYETkoWwQD+omjL vpv6PpObGh/8hvU6wb3VJjDpnJzXk13Sg2guGCCE4Q2ZggR3fuRk5nuw8BNwtoho Q7yQpxy1A5dc5bhHxEtLUp+3jjzvG3F0VXe6MQZPh9ISxxjlXqfKxAZ1fuF5Enxl gpbnCuY9GDdfOlO6Spscmr3OyMVX3G0= -----END CERTIFICATE-----Generated at Wed Oct 7 16:05:48 2026 by rpki-client