$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa File: cd506063-bc38-3ca7-adcf-ef0907ec2013.roa (raw, json) Hash identifier: HGtOHp8kD4ZJc2HdGTwiAceeZB0ydyERLbsAaTvhu0w= Subject key identifier: A5:41:52:C1:6E:99:61:09:AA:59:CB:EB:7C:60:4B:0B:7B:B3:D1:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498749DD52929B2B77F85B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:49:dd:52:92:9b:2b:77:f8:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=892c0119-07d8-4513-a2fa-eb2eb80c0fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:48:03:97:aa:44:ea:95:ed:e6:ae:22:22: 91:62:81:2b:f0:d7:48:48:2c:66:41:bc:ee:57:0c: bf:1e:78:07:81:c9:e2:a5:de:80:0a:b9:88:b2:1f: 07:59:18:a3:bd:8c:9e:e4:23:24:7d:48:d9:2f:01: 71:bd:a8:22:3b:3b:dd:60:49:55:f9:5f:a9:60:df: 34:9c:44:6b:ad:e9:f2:45:07:b6:85:b2:c7:07:b5: 0b:d1:82:00:c9:b6:aa:45:84:8b:60:60:5a:ad:a0: 9a:1d:7b:b9:b9:24:a4:03:3d:fa:d3:55:74:40:1e: 4f:c4:1f:b2:c8:ea:96:fd:b4:a5:7a:49:66:a7:9e: 18:8b:bd:44:4f:ec:a2:36:eb:9f:31:9c:88:db:26: 11:c8:b9:bb:52:21:12:0e:4c:13:43:38:bc:69:2f: a2:c9:a3:10:5e:dc:bd:d3:3a:b8:69:a0:65:1c:4d: df:94:dc:ac:3e:49:f7:a9:ce:7b:b6:de:79:6b:db: 19:47:fc:be:36:87:d6:61:97:03:00:e7:41:66:ec: 85:6c:23:ca:9f:b0:67:a0:5f:55:cb:bb:9d:18:fd: 51:5b:16:cf:11:cf:a5:75:2f:ba:1a:35:af:07:24: 44:ec:93:dc:9d:af:3c:02:a4:5f:bd:89:16:81:56: c4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:52:C1:6E:99:61:09:AA:59:CB:EB:7C:60:4B:0B:7B:B3:D1:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:72:d9:71:d0:a7:41:32:e3:2c:d6:89:66:5c:03:1a:81:dc: b1:7b:72:33:dd:45:64:c2:a3:92:98:8f:d0:8d:17:f9:0b:15: 09:8e:2f:b7:29:9e:a5:49:5e:c8:74:9d:8c:da:52:49:3c:c0: 93:b8:8e:89:bc:7b:d7:a1:91:61:0f:67:12:d7:f9:c6:7d:a6: c6:51:22:d6:3b:4d:f9:1f:df:d8:a2:ee:33:74:43:31:c2:9e: 0b:28:b0:6f:0b:40:34:d4:f9:57:ae:b6:c2:30:7f:1e:a3:11: 13:cb:5a:bd:19:57:fc:ee:39:77:5a:d2:4f:28:70:09:b4:0e: 1c:c7:3b:5f:68:0d:09:43:95:fc:85:0c:dd:ca:43:19:a3:29: c0:71:80:7f:77:ac:b4:dd:a4:84:3d:98:40:d9:5a:67:1f:e8: b2:73:16:5f:60:7e:cf:da:99:e4:e6:e3:d0:0a:5b:5a:d0:95: f1:b2:3a:cb:ba:54:45:36:51:7d:f5:6e:26:84:f2:7b:44:01: f9:da:3d:90:38:73:6f:13:59:6c:e7:d5:6d:f1:f6:54:01:6c: ab:ba:a2:2a:5f:00:c5:d0:75:d9:a1:96:fc:3e:40:54:c1:ce: b1:23:3b:e3:76:f0:ab:53:4c:79:81:1b:45:88:c0:cd:6b:f3: 40:d6:8a:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jh0ndUpKbK3f4W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODkyYzAxMTktMDdkOC00NTEzLWEyZmEtZWIyZWI4MGMwZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/1IA5eqROqV7eauIiKRYoEr8NdISCxmQbzu Vwy/HngHgcnipd6ACrmIsh8HWRijvYye5CMkfUjZLwFxvagiOzvdYElV+V+pYN80 nERrrenyRQe2hbLHB7UL0YIAybaqRYSLYGBaraCaHXu5uSSkAz3601V0QB5PxB+y yOqW/bSleklmp54Yi71ET+yiNuufMZyI2yYRyLm7UiESDkwTQzi8aS+iyaMQXty9 0zq4aaBlHE3flNysPkn3qc57tt55a9sZR/y+NofWYZcDAOdBZuyFbCPKn7BnoF9V y7udGP1RWxbPEc+ldS+6GjWvByRE7JPcna88AqRfvYkWgVbEKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKVBUsFumWEJqlnL63xgSwt7s9FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1MDYwNjMtYmMzOC0z Y2E3LWFkY2YtZWYwOTA3ZWMyMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlctlx0KdBMuMs1olmXAMagdyxe3Iz3UVkwqOSmI/QjRf5CxUJji+3 KZ6lSV7IdJ2M2lJJPMCTuI6JvHvXoZFhD2cS1/nGfabGUSLWO035H9/You4zdEMx wp4LKLBvC0A01PlXrrbCMH8eoxETy1q9GVf87jl3WtJPKHAJtA4cxztfaA0JQ5X8 hQzdykMZoynAcYB/d6y03aSEPZhA2VpnH+iycxZfYH7P2pnk5uPQClta0JXxsjrL ulRFNlF99W4mhPJ7RAH52j2QOHNvE1ls59Vt8fZUAWyruqIqXwDF0HXZoZb8PkBU wc6xIzvjdvCrU0x5gRtFiMDNa/NA1oqR -----END CERTIFICATE-----Generated at Wed Oct 7 07:59:47 2026 by rpki-client