$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa File: c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa (raw, json) Hash identifier: 0hu86VU9T5fu1inCQNfDpjRx+s1Kw8hd7TDIxYEBLBs= Subject key identifier: 6C:93:78:33:32:2D:E4:24:B2:6E:B0:76:FD:FF:DC:18:4D:A7:4F:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49885E887C62EFD6BD774400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36632 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:5e:88:7c:62:ef:d6:bd:77:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4953c4a-9d0d-4534-9e8c-d0479b5d72bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:86:7d:78:a7:43:9a:34:2e:2b:12:cf:a7:84: 8c:ef:5f:55:56:fb:04:d1:15:b8:f5:5e:97:7c:61: 90:ad:e3:78:15:bc:c8:2e:64:99:5f:cc:5c:61:eb: ec:54:ba:5a:9f:37:09:59:62:c0:1c:10:a2:61:7b: f4:ce:38:e8:8d:82:c8:2a:bc:5f:28:a4:21:ce:d4: 3c:85:28:06:b9:d7:db:20:22:dd:9a:db:8f:b7:25: 72:9d:2d:ae:b6:73:95:97:1f:b9:00:3b:0c:e7:2f: 61:cb:5c:b2:f6:8d:f4:f3:0c:e0:7d:22:e8:b5:87: 0c:f0:22:d4:13:03:03:fb:7a:d8:db:fc:93:dc:7b: c5:4d:c3:99:5a:53:f2:61:a0:bb:69:4b:83:74:28: 5f:da:d1:9b:e4:6c:05:2e:de:2e:9b:df:20:7d:7c: 7b:9e:8f:21:2d:9b:9b:41:51:d8:cd:6e:b8:dd:1e: 10:03:67:8a:aa:16:d0:da:5e:33:4c:b7:76:48:f4: 63:71:51:c8:07:5d:a8:0d:bd:de:33:36:1d:70:db: 23:aa:b0:2d:21:f6:07:5e:8b:6c:24:f5:57:85:32: a0:80:24:f6:d0:c6:29:44:31:8d:10:ff:04:b6:a0: 00:0f:05:11:f4:b8:d2:92:fd:f1:56:e1:d5:7d:2c: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:93:78:33:32:2D:E4:24:B2:6E:B0:76:FD:FF:DC:18:4D:A7:4F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2c7a741-0423-3b9d-9769-a1f80de2f8ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a4:66:13:fc:39:77:7c:eb:34:03:81:b2:8c:da:b1:e9:73: 05:a6:95:ee:30:1b:62:5d:4b:a8:9a:e1:74:e7:9d:68:04:5d: 82:d7:01:2c:30:6f:c2:0e:b0:88:28:89:d6:21:38:6f:bf:c4: b7:7d:10:80:5d:91:86:7e:88:3a:f7:99:c5:06:97:9a:48:06: f8:e5:4a:7f:3b:4c:3e:d6:91:f2:3c:f8:19:23:71:12:82:f6: f9:c3:25:77:d1:72:38:94:af:70:e8:a9:5f:70:b2:a7:19:86: f1:d0:78:c4:66:b2:8d:86:1b:e6:8f:b2:fa:90:7a:ee:36:a4: 9c:e1:98:50:0f:e9:65:8d:59:00:18:98:5a:46:75:b4:1a:fa: bb:1a:b3:c9:71:f8:7d:5e:8d:98:e3:5a:9b:f3:41:fb:24:1c: 51:c0:76:8f:b4:bd:c2:4a:2d:04:4f:12:1c:68:84:bf:1a:5f: b7:36:e5:19:be:00:0b:18:e8:84:ca:a1:5d:da:3a:b1:b7:28: 7a:f3:93:ee:5f:cc:05:41:8f:b7:79:13:9b:80:f8:a7:50:23: 8c:72:f2:14:00:fa:90:9d:df:bf:c8:6c:b8:e3:16:cf:6f:5a: 8b:5b:f7:a4:37:ea:eb:f7:56:19:34:1d:6d:33:42:24:2d:c7: e1:78:93:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiF6IfGLv1r13RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ5NTNjNGEtOWQwZC00NTM0LTllOGMtZDA0NzliNWQ3MmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Z9eKdDmjQuKxLPp4SM719VVvsE0RW49V6X fGGQreN4FbzILmSZX8xcYevsVLpanzcJWWLAHBCiYXv0zjjojYLIKrxfKKQhztQ8 hSgGudfbICLdmtuPtyVynS2utnOVlx+5ADsM5y9hy1yy9o308wzgfSLotYcM8CLU EwMD+3rY2/yT3HvFTcOZWlPyYaC7aUuDdChf2tGb5GwFLt4um98gfXx7no8hLZub QVHYzW643R4QA2eKqhbQ2l4zTLd2SPRjcVHIB12oDb3eMzYdcNsjqrAtIfYHXots JPVXhTKggCT20MYpRDGNEP8EtqAADwUR9LjSkv3xVuHVfSzDdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGyTeDMyLeQksm6wdv3/3BhNp08wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJjN2E3NDEtMDQyMy0z YjlkLTk3NjktYTFmODBkZTJmOGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJpGYT/Dl3fOs0A4GyjNqx6XMFppXuMBtiXUuomuF0551oBF2C1wEs MG/CDrCIKInWIThvv8S3fRCAXZGGfog695nFBpeaSAb45Up/O0w+1pHyPPgZI3ES gvb5wyV30XI4lK9w6KlfcLKnGYbx0HjEZrKNhhvmj7L6kHruNqSc4ZhQD+lljVkA GJhaRnW0Gvq7GrPJcfh9Xo2Y41qb80H7JBxRwHaPtL3CSi0ETxIcaIS/Gl+3NuUZ vgALGOiEyqFd2jqxtyh685PuX8wFQY+3eRObgPinUCOMcvIUAPqQnd+/yGy44xbP b1qLW/ekN+rr91YZNB1tM0IkLcfheJNk -----END CERTIFICATE-----Generated at Wed Oct 7 08:01:39 2026 by rpki-client