$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa File: ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa (raw, json) Hash identifier: NBIEsOPskvqISo+dN70VfQ4PVIv7EgOVcIaNkQkKpsQ= Subject key identifier: 2E:5A:E9:49:D9:16:10:FC:54:0C:FB:59:C9:1E:A4:C3:54:91:D4:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AD6BBA6426F7D11595A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397211 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d6:bb:a6:42:6f:7d:11:59:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a767c62-108c-44b4-aad9-2f4f60b2243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:31:9e:49:a4:f3:a9:24:e4:97:b0:19:15: 2b:c8:4f:10:17:78:df:6d:b0:52:57:5b:4a:ce:19: cb:20:d9:f8:61:ec:91:1f:c6:e1:68:00:de:83:c7: 5c:39:3e:ea:6f:60:7e:a9:cd:de:33:e6:ea:6d:ac: e1:83:60:3c:2b:25:c6:c9:e8:0a:22:12:01:3c:19: 26:98:e3:e3:a9:74:5d:dc:a7:a6:a4:b7:1f:fd:f8: d7:0e:37:52:9c:94:c3:50:3b:3c:e7:3e:59:d5:00: 71:26:ba:b8:68:81:06:32:30:c5:5c:72:4d:42:41: c1:ca:61:f4:57:d6:1b:a0:05:5d:d9:18:2f:5d:70: 81:a2:99:9f:48:16:42:d2:fb:8a:c4:50:9a:b0:e8: 49:04:47:75:5c:14:3d:ac:ed:c1:0f:40:2b:a8:da: b5:d4:8e:55:5c:c1:ea:56:0e:06:f1:03:8e:45:d4: 14:9e:8d:ac:bc:c7:9c:08:8c:fb:d8:69:61:6a:11: d5:63:05:d0:19:9c:81:67:f1:43:4e:c9:dc:f3:18: d1:64:1b:e7:95:89:02:7d:d8:2f:14:ed:3c:ee:14: bd:73:72:48:02:07:f2:98:ce:9b:75:11:09:f1:e3: 56:22:7f:b3:1b:52:13:a9:ff:bc:da:bf:13:3b:6d: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5A:E9:49:D9:16:10:FC:54:0C:FB:59:C9:1E:A4:C3:54:91:D4:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2d:fa:39:2a:f5:3f:56:f8:1e:a8:a1:60:e0:10:45:87:b7: 9d:53:a1:ed:5a:8f:98:47:1f:fa:b3:73:d7:0b:9e:a0:97:5b: 4d:18:d7:4a:5e:c6:f7:5d:23:51:cb:8b:9c:f2:6c:d1:60:4e: d8:b3:26:8e:13:27:85:bd:36:72:38:a6:b6:81:61:19:33:95: 14:32:d2:d9:bb:2a:11:e0:c3:3c:b5:39:0d:37:dd:7c:5c:05: 50:58:22:5f:63:5e:5f:87:42:05:06:f9:7c:5d:66:07:9c:3d: a2:0f:2b:ce:6e:2e:57:d0:0b:cc:f4:f0:d6:db:9f:9b:18:6b: fc:99:69:1f:50:ec:fc:73:4c:62:7d:f3:2d:ea:15:3a:63:9a: 0e:2f:c1:f1:86:bc:5d:55:9f:e3:0b:c2:78:08:5b:53:20:b4: 9d:77:d1:96:02:45:27:6f:de:ea:cf:c8:f3:4a:a4:c1:de:ca: 15:82:c5:a4:67:f5:a3:c3:66:c1:db:34:0c:81:5c:e7:85:b0: 03:22:73:49:71:97:d1:8e:79:c0:62:d5:8e:63:3f:3a:ce:15: 3f:36:59:1a:d1:ee:53:68:a9:ad:e9:64:d0:24:c4:44:73:2d: cc:6a:80:2b:5f:9c:0b:a6:8f:ef:70:74:94:c0:e8:1c:aa:e9: 83:43:e0:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jita7pkJvfRFZWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE3NjdjNjItMTA4Yy00NGI0LWFhZDktMmY0ZjYwYjIyNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN4xnkmk86kk5JewGRUryE8QF3jfbbBSV1tK zhnLINn4YeyRH8bhaADeg8dcOT7qb2B+qc3eM+bqbazhg2A8KyXGyegKIhIBPBkm mOPjqXRd3KempLcf/fjXDjdSnJTDUDs85z5Z1QBxJrq4aIEGMjDFXHJNQkHBymH0 V9YboAVd2RgvXXCBopmfSBZC0vuKxFCasOhJBEd1XBQ9rO3BD0ArqNq11I5VXMHq Vg4G8QOORdQUno2svMecCIz72GlhahHVYwXQGZyBZ/FDTsnc8xjRZBvnlYkCfdgv FO087hS9c3JIAgfymM6bdREJ8eNWIn+zG1ITqf+82r8TO23A4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5a6UnZFhD8VAz7WckepMNUkdSbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEyY2MyZWEtYjMzOS0z MTU5LWEzZjItNDJlOGIyOTQ5NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8t+jkq9T9W+B6ooWDgEEWHt51Toe1aj5hHH/qzc9cLnqCXW00Y10pe xvddI1HLi5zybNFgTtizJo4TJ4W9NnI4praBYRkzlRQy0tm7KhHgwzy1OQ033Xxc BVBYIl9jXl+HQgUG+XxdZgecPaIPK85uLlfQC8z08Nbbn5sYa/yZaR9Q7PxzTGJ9 8y3qFTpjmg4vwfGGvF1Vn+MLwngIW1MgtJ130ZYCRSdv3urPyPNKpMHeyhWCxaRn 9aPDZsHbNAyBXOeFsAMic0lxl9GOecBi1Y5jPzrOFT82WRrR7lNoqa3pZNAkxERz LcxqgCtfnAumj+9wdJTA6Byq6YND4N4= -----END CERTIFICATE-----Generated at Wed Oct 7 10:05:16 2026 by rpki-client