$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa File: c552578b-7c14-3bff-b55f-c620ce75bda2.roa (raw, json) Hash identifier: uZ2ecEuVJMWUmp2wxwNBHjf9Pr5Xv39JB6FcQMXFGYY= Subject key identifier: FE:E6:E0:8E:C0:49:0E:0E:6E:1A:15:04:8C:D1:D1:50:41:8F:42:96 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498A2B62FBC2C1B585144D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36631 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:2b:62:fb:c2:c1:b5:85:14:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b9714073-cbd4-46d6-9cde-49b7c0084bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:80:bb:a7:c3:33:f3:ec:ec:f6:3c:50:b3: c0:a1:6f:55:78:85:69:56:77:2d:14:ce:65:ef:0f: 39:d0:c6:05:a6:df:27:b3:04:9d:60:17:eb:b9:d6: 2a:11:cc:a1:96:8f:fa:67:a6:3e:ab:9f:42:71:c5: 04:60:c5:f0:57:12:56:ef:7a:19:84:46:83:1c:b0: 28:cb:7e:9b:8c:ad:f4:61:e1:d4:7c:aa:74:f8:67: 4c:b3:33:0b:ec:cf:71:92:c8:ef:2e:f4:4f:ad:67: 7b:c3:a5:c5:82:9a:22:c1:50:25:54:c6:3a:4c:da: ae:12:20:94:18:d8:b0:7f:2f:d6:53:67:b1:05:09: 01:26:ae:0d:2a:e1:e0:7f:e6:6f:f0:21:11:f1:4b: 72:96:d8:82:3e:0d:46:83:20:d7:98:d8:d5:75:ed: 31:53:31:f0:b9:ba:42:2b:4f:8e:93:fe:34:07:82: ce:c9:87:f9:2d:5f:64:b5:45:b8:d3:a0:48:71:3c: 7b:46:5d:98:93:7c:4d:c3:cb:1e:af:e9:92:2c:94: 55:e6:e5:10:ef:a0:c5:8b:23:87:b1:95:c5:41:0c: af:5c:8d:49:16:03:b9:83:cd:53:85:1b:ad:56:04: a0:7a:ea:f3:00:4b:73:a3:e9:31:45:72:e6:83:fd: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:E0:8E:C0:49:0E:0E:6E:1A:15:04:8C:D1:D1:50:41:8F:42:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c552578b-7c14-3bff-b55f-c620ce75bda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:da:db:9b:df:d6:3f:de:84:a4:11:88:cf:60:f0:69:45:9d: 2a:e3:87:b2:a7:cf:71:9e:1f:e6:e7:8b:cf:fa:38:6b:52:45: 3d:a8:bf:b0:d0:da:33:d1:3c:b5:82:15:dc:ec:3f:76:0a:96: af:1a:00:c7:1a:d4:be:69:21:97:59:7b:80:9c:24:50:6e:56: ec:d7:8c:05:49:a7:49:a6:c9:ce:83:95:0b:85:ba:2f:2f:8a: c5:87:bb:90:ba:e0:d8:0c:07:59:2e:80:32:e5:82:2e:d0:b4: bb:b5:04:c3:85:00:d6:84:b0:aa:ba:b5:1d:d0:c9:74:47:6b: 0a:c7:e2:5a:24:b1:bf:d9:d9:1d:7d:56:6d:05:66:d2:30:15: 13:f5:9f:a9:7e:b5:b5:6b:97:78:1f:f3:64:d0:c8:5d:b0:1e: 09:68:62:f0:99:87:16:ec:f7:98:c7:e0:b9:a0:8c:44:b7:4f: 34:e1:21:e6:b1:ec:f9:67:15:96:21:9b:80:85:db:03:6f:30: 4d:eb:46:b5:c0:0a:a8:29:97:82:48:ad:bf:11:d2:6f:ad:3c: 21:2f:42:67:56:fd:3e:58:78:64:16:c0:5f:fc:13:ed:ac:05: d7:40:64:e5:5f:35:01:17:53:42:b1:dc:0a:92:71:61:03:5d: ef:7e:6f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiiti+8LBtYUUTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk3MTQwNzMtY2JkNC00NmQ2LTljZGUtNDliN2MwMDg0YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgGAu6fDM/Ps7PY8ULPAoW9VeIVpVnctFM5l 7w850MYFpt8nswSdYBfrudYqEcyhlo/6Z6Y+q59CccUEYMXwVxJW73oZhEaDHLAo y36bjK30YeHUfKp0+GdMszML7M9xksjvLvRPrWd7w6XFgpoiwVAlVMY6TNquEiCU GNiwfy/WU2exBQkBJq4NKuHgf+Zv8CER8UtyltiCPg1GgyDXmNjVde0xUzHwubpC K0+Ok/40B4LOyYf5LV9ktUW406BIcTx7Rl2Yk3xNw8ser+mSLJRV5uUQ76DFiyOH sZXFQQyvXI1JFgO5g81ThRutVgSgeurzAEtzo+kxRXLmg/2QBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7m4I7ASQ4ObhoVBIzR0VBBj0KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzU1MjU3OGItN2MxNC0z YmZmLWI1NWYtYzYyMGNlNzViZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXa25vf1j/ehKQRiM9g8GlFnSrjh7Knz3GeH+bni8/6OGtSRT2ov7DQ 2jPRPLWCFdzsP3YKlq8aAMca1L5pIZdZe4CcJFBuVuzXjAVJp0mmyc6DlQuFui8v isWHu5C64NgMB1kugDLlgi7QtLu1BMOFANaEsKq6tR3QyXRHawrH4loksb/Z2R19 Vm0FZtIwFRP1n6l+tbVrl3gf82TQyF2wHgloYvCZhxbs95jH4LmgjES3TzThIeax 7PlnFZYhm4CF2wNvME3rRrXACqgpl4JIrb8R0m+tPCEvQmdW/T5YeGQWwF/8E+2s BddAZOVfNQEXU0Kx3AqScWEDXe9+b8k= -----END CERTIFICATE-----Generated at Wed Oct 7 04:31:11 2026 by rpki-client