$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa File: c8b3dff7-8897-3692-893d-51a768f982fa.roa (raw, json) Hash identifier: Cl8meC4zrOmL7iYEJ3wy+BVbcWSCOUzZqMFXxpxVF98= Subject key identifier: CF:82:5E:C9:72:A7:23:D9:F5:93:46:FF:2A:2A:CB:94:02:46:98:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AB9655F55F7C0A6BE0BB0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36620 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:b9:65:5f:55:f7:c0:a6:be:0b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b9ebb06-3c88-4811-b7ca-ab46f30e7663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:69:4a:80:6b:72:0b:a7:f1:66:f4:9d:53: f4:9a:32:34:3d:15:13:25:bb:a3:85:18:11:2e:45: b4:b6:48:92:72:1a:53:a2:14:d9:28:41:e7:3b:04: 6f:16:b1:01:cf:c9:72:63:d1:59:01:cb:ae:a2:95: 74:08:fd:84:14:d3:19:58:83:3f:46:55:52:16:bf: a8:26:a8:71:33:fe:64:0f:c9:df:9c:56:32:5d:af: 0a:b0:9d:3d:0e:e8:e1:53:61:92:1d:96:29:1f:9e: 28:92:96:77:5a:0e:00:b1:0a:76:e3:8a:66:59:35: 64:64:04:2f:e5:f4:40:87:bd:a0:ff:1a:e1:8e:a4: 1e:cc:f0:86:fe:1c:4d:d3:fd:62:f6:1e:c9:da:a0: 31:fd:16:6d:14:d9:2c:5b:19:66:c4:8a:33:be:a9: dc:37:3f:44:6a:a7:b8:59:ac:e0:8e:3c:d4:ac:09: 08:d7:25:07:33:88:21:0e:81:74:2e:bf:61:3d:90: cd:c0:e1:e9:ae:ac:85:ee:ec:44:f8:6f:54:43:91: b7:c9:f2:2c:af:af:53:0f:0a:bd:0b:45:0a:26:12: af:33:79:aa:e6:ca:5c:60:27:1e:24:35:f7:79:cf: 64:36:6f:27:2b:86:ee:60:28:bc:87:f7:5e:e6:8b: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:82:5E:C9:72:A7:23:D9:F5:93:46:FF:2A:2A:CB:94:02:46:98:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2a:8e:c1:96:a3:e2:21:a3:3d:e8:77:55:a9:9a:27:cb:4a: f8:a4:03:34:1f:c0:dc:74:31:7a:d5:15:9d:d3:c9:bd:f6:2b: ed:14:cb:92:b5:8f:d0:61:c7:18:59:48:6d:6f:ab:32:7b:d4: fb:3b:03:34:03:06:ac:f8:0f:41:45:82:ea:67:5a:db:7e:be: f0:f4:36:70:13:8b:27:ac:10:25:34:3e:af:66:04:25:b6:83: f6:20:ba:c0:17:6c:f8:09:19:4c:18:6a:a0:90:f2:52:7c:66: b4:d4:9e:e0:39:d3:b9:18:67:40:a1:30:66:46:4d:a0:02:e0: 70:7e:39:f8:fd:3c:db:5a:f5:a3:92:c1:34:48:d8:25:1b:45: d4:09:c4:34:2f:17:89:db:3d:65:4d:ca:fc:dc:d1:2b:a2:49: 3f:3c:86:1e:3b:e3:8a:27:df:bf:99:12:e4:68:e2:d3:77:c0: 20:bf:68:75:57:d0:15:df:8f:50:0e:d2:19:2c:3e:28:26:22: 87:08:a6:0c:b1:af:fc:d1:c0:3f:67:d4:a7:96:c9:a3:7e:58: 4a:11:67:88:1d:c1:b3:f5:2d:79:3b:08:fd:9a:08:02:6c:6e: 43:29:97:94:03:76:e6:c8:0e:34:51:b1:c0:b1:af:1e:7f:fc: b6:59:32:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JirllX1X3wKa+C7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI5ZWJiMDYtM2M4OC00ODExLWI3Y2EtYWI0NmYzMGU3NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTZpSoBrcgun8Wb0nVP0mjI0PRUTJbujhRgR LkW0tkiSchpTohTZKEHnOwRvFrEBz8lyY9FZAcuuopV0CP2EFNMZWIM/RlVSFr+o JqhxM/5kD8nfnFYyXa8KsJ09DujhU2GSHZYpH54okpZ3Wg4AsQp244pmWTVkZAQv 5fRAh72g/xrhjqQezPCG/hxN0/1i9h7J2qAx/RZtFNksWxlmxIozvqncNz9Eaqe4 WazgjjzUrAkI1yUHM4ghDoF0Lr9hPZDNwOHprqyF7uxE+G9UQ5G3yfIsr69TDwq9 C0UKJhKvM3mq5spcYCceJDX3ec9kNm8nK4buYCi8h/de5ouSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+CXslypyPZ9ZNG/yoqy5QCRpjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhiM2RmZjctODg5Ny0z NjkyLTg5M2QtNTFhNzY4Zjk4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQqjsGWo+Ihoz3od1WpmifLSvikAzQfwNx0MXrVFZ3Tyb32K+0Uy5K1 j9BhxxhZSG1vqzJ71Ps7AzQDBqz4D0FFgupnWtt+vvD0NnATiyesECU0Pq9mBCW2 g/YgusAXbPgJGUwYaqCQ8lJ8ZrTUnuA507kYZ0ChMGZGTaAC4HB+Ofj9PNta9aOS wTRI2CUbRdQJxDQvF4nbPWVNyvzc0SuiST88hh4744on37+ZEuRo4tN3wCC/aHVX 0BXfj1AO0hksPigmIocIpgyxr/zRwD9n1KeWyaN+WEoRZ4gdwbP1LXk7CP2aCAJs bkMpl5QDdubIDjRRscCxrx5//LZZMsU= -----END CERTIFICATE-----Generated at Tue Oct 6 17:46:46 2026 by rpki-client