$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa File: bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa (raw, json) Hash identifier: nbxy8NjS1Hl6j7bLDixXJikLooZZXRHOVMW27XJYcpE= Subject key identifier: 2B:7B:00:43:A1:22:DD:60:4C:E5:A2:C7:1A:55:08:45:BC:B8:81:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49749B5CAE3E43F72409DD00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397203 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9b:5c:ae:3e:43:f7:24:09:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=58561b1f-810f-473f-b0a5-72640ed1c52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:6b:5e:09:90:fd:2a:65:da:a7:50:c7:4d: 8d:8c:32:ae:57:5e:30:d7:1d:50:7d:a5:bd:af:06: 69:0b:48:8b:e5:dd:ad:9f:ee:7d:22:a0:c5:43:8a: 54:fd:c5:61:b2:54:84:f2:6c:39:9c:a4:02:30:0c: 37:fc:a7:d8:1b:df:ac:1a:f7:6e:da:e2:2b:5f:eb: c5:6e:cd:69:f1:03:21:39:52:94:52:7c:4d:16:2d: 4b:75:3c:5c:56:9a:63:0f:91:07:84:31:bd:d1:d6: 8b:fb:5a:7c:46:41:3d:8c:33:b6:c1:43:ed:6b:0b: 88:db:2a:23:27:eb:a9:2a:72:53:3d:e7:82:5d:03: 78:87:ee:24:cf:a6:01:e6:b4:89:08:d0:be:e7:1b: 44:83:68:8d:dc:e3:67:c6:c6:be:ea:60:88:96:94: 3c:88:cc:96:49:52:42:7d:14:79:82:5a:09:c7:02: 77:61:0d:d3:2e:e2:b4:97:8c:97:86:0a:40:fb:ba: cb:78:98:29:97:7d:78:d0:19:0b:c1:97:ce:a3:9d: ab:5c:28:d6:eb:0e:13:74:19:b2:18:60:b2:5f:80: df:e0:3c:61:6b:f9:cf:93:b9:70:3a:3b:c6:9d:5d: 85:14:5e:a4:4c:fe:6f:d2:01:1d:ce:09:25:02:12: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:00:43:A1:22:DD:60:4C:E5:A2:C7:1A:55:08:45:BC:B8:81:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bdc6df2f-ed5f-3a77-b7e5-b90b3bc253c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e0:00:39:8f:78:44:6e:0f:ea:e1:5c:fe:d1:e1:61:97:de: 77:f5:81:8e:79:94:8f:d2:c9:df:db:35:f9:ba:55:12:3c:4f: 9e:0c:3c:3a:87:55:8e:a5:09:58:b1:fa:33:a0:c1:e1:56:37: 98:bf:41:13:58:c0:4e:df:21:fe:83:16:83:3c:91:05:d3:c3: da:08:a8:2d:9c:a6:69:42:29:75:18:bf:3e:ff:41:89:33:7c: c3:14:4c:c6:13:6e:a5:2d:23:18:0d:2f:6d:ad:22:1c:05:6d: 11:3d:3d:a7:da:d4:47:1a:7c:0c:2e:4b:11:0e:f7:b7:a7:31: 7b:6f:58:31:38:fb:99:fe:2c:13:ee:01:8d:54:6e:8a:1d:96: 07:c0:16:32:32:7a:ef:e0:7c:24:6d:98:97:ed:81:7f:33:0a: ff:de:4c:c6:3e:a1:cf:73:91:57:ab:31:25:37:95:57:9a:58: aa:36:37:8a:26:80:69:77:4f:9a:1d:cb:aa:44:71:aa:0d:8f: 42:33:02:fb:0e:b8:84:f5:e9:38:55:13:40:a3:76:1b:1f:c7: d6:24:5b:36:41:d1:ed:ac:07:d8:7f:c1:fb:89:96:a1:62:09: 63:d9:39:dd:61:83:bb:a0:22:ff:c4:a2:ee:c2:5e:83:8c:8b: 59:ce:19:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJtcrj5D9yQJ3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTg1NjFiMWYtODEwZi00NzNmLWIwYTUtNzI2NDBlZDFjNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskxrXgmQ/Spl2qdQx02NjDKuV14w1x1QfaW9 rwZpC0iL5d2tn+59IqDFQ4pU/cVhslSE8mw5nKQCMAw3/KfYG9+sGvdu2uIrX+vF bs1p8QMhOVKUUnxNFi1LdTxcVppjD5EHhDG90daL+1p8RkE9jDO2wUPtawuI2yoj J+upKnJTPeeCXQN4h+4kz6YB5rSJCNC+5xtEg2iN3ONnxsa+6mCIlpQ8iMyWSVJC fRR5gloJxwJ3YQ3TLuK0l4yXhgpA+7rLeJgpl3140BkLwZfOo52rXCjW6w4TdBmy GGCyX4Df4Dxha/nPk7lwOjvGnV2FFF6kTP5v0gEdzgklAhKkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt7AEOhIt1gTOWixxpVCEW8uIGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmRjNmRmMmYtZWQ1Zi0z YTc3LWI3ZTUtYjkwYjNiYzI1M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHgADmPeERuD+rhXP7R4WGX3nf1gY55lI/Syd/bNfm6VRI8T54MPDqH VY6lCVix+jOgweFWN5i/QRNYwE7fIf6DFoM8kQXTw9oIqC2cpmlCKXUYvz7/QYkz fMMUTMYTbqUtIxgNL22tIhwFbRE9Pafa1EcafAwuSxEO97enMXtvWDE4+5n+LBPu AY1UboodlgfAFjIyeu/gfCRtmJftgX8zCv/eTMY+oc9zkVerMSU3lVeaWKo2N4om gGl3T5ody6pEcaoNj0IzAvsOuIT16ThVE0Cjdhsfx9YkWzZB0e2sB9h/wfuJlqFi CWPZOd1hg7ugIv/Eou7CXoOMi1nOGSc= -----END CERTIFICATE-----Generated at Tue Oct 6 14:24:59 2026 by rpki-client