$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa File: b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa (raw, json) Hash identifier: PENvJByzX7/mD6wx79xeMb8+rr0Ds0+hf5b8WVvzBds= Subject key identifier: 38:E8:13:04:E5:44:A1:C9:9C:D6:12:FB:C2:B3:8A:BF:A9:9C:10:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49749E02DAE0850BA100BA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40647 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9e:02:da:e0:85:0b:a1:00:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77cffaa3-3b51-4f26-906a-724fee00c20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:b4:43:30:35:e5:34:2a:7d:41:9f:71:ea: 90:4d:36:29:36:3a:2b:f8:75:93:6b:d0:cf:d5:71: 9c:fc:d9:f3:d2:47:36:05:eb:cd:e5:89:d2:4a:d3: 9d:52:ab:a0:4e:d6:a3:c5:88:64:79:bc:ff:f1:95: 9b:c4:21:03:64:d3:7c:08:85:33:98:f9:7d:5a:70: 83:76:6e:36:fd:b8:b5:74:63:76:f2:cc:35:4c:fa: b6:f5:32:2b:e4:c9:9c:01:a5:89:db:85:ef:df:80: 16:83:7d:59:dd:79:7f:d7:cb:82:90:d7:ae:1e:eb: 68:ec:f1:73:aa:ac:f4:c5:aa:84:37:83:ed:9b:ef: a7:92:d0:60:b8:86:a5:fa:27:e6:97:3d:2a:63:2c: af:02:6f:af:73:40:f6:3b:dc:b5:10:33:19:bd:fd: 89:8b:8e:34:4f:ab:9f:de:9c:85:db:13:ce:6a:b9: d3:93:08:78:1a:4f:d9:da:53:e8:b0:84:4d:63:33: b1:81:f2:f5:6c:fd:dd:44:ae:c4:7c:da:04:b8:f6: 42:2a:4a:c6:2a:c3:f1:ba:96:b8:c0:9c:44:f8:69: 0e:18:b3:1f:81:47:07:44:d4:68:19:51:28:f6:56: 9f:15:ea:22:44:41:6b:9e:c3:d9:1e:8e:e2:24:72: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:13:04:E5:44:A1:C9:9C:D6:12:FB:C2:B3:8A:BF:A9:9C:10:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b567eca4-9c13-3464-a5df-3003d3c8f6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8c:dc:a2:a2:34:ff:11:00:4f:d1:9d:23:30:b6:ec:17:3c: 8c:be:1e:a7:8d:bf:4a:08:db:1f:98:da:f6:85:13:23:aa:c8: c9:97:5a:07:9f:6d:4a:c3:df:7b:fc:e8:2e:e1:7f:50:a9:67: 45:9c:b0:3a:79:d2:56:a7:96:85:ea:89:14:14:87:69:9b:a6: 9c:b3:c7:02:59:a4:02:84:ad:5e:1a:7e:2e:09:4b:b3:ce:6c: 4b:7b:47:ca:18:95:17:60:0d:d5:c2:f7:d7:9f:28:31:04:2c: ac:ea:43:1f:59:f1:20:5f:69:83:e5:78:90:de:bf:17:a5:d6: a8:9f:c6:53:47:79:9b:3b:3b:20:81:a4:bc:96:42:e4:1c:f6: 47:59:8f:7c:a1:a8:31:e2:cb:79:d9:e1:78:ff:33:9d:e6:50: 2f:19:fd:91:bf:37:34:1a:88:e5:f8:eb:18:5e:27:b4:5e:14: 3f:59:88:a5:d1:0b:3a:c0:98:52:88:4c:a8:11:0b:67:6c:27: e3:20:ed:f6:36:db:38:3a:0f:1a:1a:0a:3c:d8:7e:fa:7c:86: df:cd:77:88:59:d3:d3:3b:94:fd:90:61:f6:c2:c2:cb:ce:3a: e2:a5:53:49:5a:59:68:06:2f:de:99:26:2a:be:b8:8a:9a:4f: 66:59:3a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJ4C2uCFC6EAuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdjZmZhYTMtM2I1MS00ZjI2LTkwNmEtNzI0ZmVlMDBjMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU20QzA15TQqfUGfceqQTTYpNjor+HWTa9DP 1XGc/Nnz0kc2BevN5YnSStOdUqugTtajxYhkebz/8ZWbxCEDZNN8CIUzmPl9WnCD dm42/bi1dGN28sw1TPq29TIr5MmcAaWJ24Xv34AWg31Z3Xl/18uCkNeuHuto7PFz qqz0xaqEN4Ptm++nktBguIal+ifmlz0qYyyvAm+vc0D2O9y1EDMZvf2Ji440T6uf 3pyF2xPOarnTkwh4Gk/Z2lPosIRNYzOxgfL1bP3dRK7EfNoEuPZCKkrGKsPxupa4 wJxE+GkOGLMfgUcHRNRoGVEo9lafFeoiREFrnsPZHo7iJHK2nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjoEwTlRKHJnNYS+8Kzir+pnBCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU2N2VjYTQtOWMxMy0z NDY0LWE1ZGYtMzAwM2QzYzhmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2M3KKiNP8RAE/RnSMwtuwXPIy+HqeNv0oI2x+Y2vaFEyOqyMmXWgef bUrD33v86C7hf1CpZ0WcsDp50lanloXqiRQUh2mbppyzxwJZpAKErV4afi4JS7PO bEt7R8oYlRdgDdXC99efKDEELKzqQx9Z8SBfaYPleJDevxel1qifxlNHeZs7OyCB pLyWQuQc9kdZj3yhqDHiy3nZ4Xj/M53mUC8Z/ZG/NzQaiOX46xheJ7ReFD9ZiKXR CzrAmFKITKgRC2dsJ+Mg7fY22zg6DxoaCjzYfvp8ht/Nd4hZ09M7lP2QYfbCwsvO OuKlU0laWWgGL96ZJiq+uIqaT2ZZOnY= -----END CERTIFICATE-----Generated at Tue Oct 6 18:49:46 2026 by rpki-client