$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa File: ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa (raw, json) Hash identifier: pyGqo08V6+B0wriMcEVvHQNoy3eJAqTSLeYFm1mhFjU= Subject key identifier: D2:64:72:AD:1E:88:D2:87:86:51:3C:13:DD:A7:7A:87:1C:36:48:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973572B2818FC360D5D03C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27544 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:57:2b:28:18:fc:36:0d:5d:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c7314904-b538-46c9-8c57-4a5f56955b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:dd:17:82:ac:85:03:06:48:a0:d7:e3:5a: 65:f8:4d:5b:a7:9e:b8:83:9c:56:7b:0c:11:36:f6: c9:58:48:34:20:3e:b4:2e:3a:3c:7f:99:b5:14:6b: 7d:eb:9e:99:d2:c6:d2:f2:5d:24:ae:87:61:97:8d: fc:44:2b:15:e9:41:2d:73:f2:48:72:68:62:01:14: 85:15:f5:65:43:67:7f:92:22:ef:46:53:77:d6:cc: de:b8:67:91:89:0d:60:1e:95:2b:96:a0:6f:05:11: 16:88:6d:1a:d6:f4:8f:8d:ce:14:dc:ee:9e:12:2f: 45:7e:20:46:80:a8:02:d1:25:16:cf:ab:8f:64:c4: cf:e9:d0:fb:33:32:73:0c:39:29:7e:71:36:01:42: 41:f5:11:db:d7:30:8c:91:cd:c4:4a:bd:24:29:70: b0:83:c6:e5:44:77:15:b5:25:fd:ae:05:25:f9:53: 14:cf:0a:19:1b:ae:eb:b5:b2:76:dc:5d:ff:be:82: 30:a5:c7:60:f4:17:7c:a0:de:85:8e:c9:f4:33:4f: 9e:0e:24:6a:8a:19:e1:aa:31:a8:02:60:35:e7:7b: 28:55:a1:91:b4:0b:7c:81:e3:c9:1e:95:27:37:ef: ae:b0:5b:0c:64:9c:a0:92:8c:24:da:e4:a3:31:c9: 58:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:64:72:AD:1E:88:D2:87:86:51:3C:13:DD:A7:7A:87:1C:36:48:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce77bbe3-2bd7-3030-bccc-4b00551bae3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d4:ed:de:08:2e:2b:4a:a4:9f:7f:38:11:0c:52:e5:e3:11: bd:5a:21:71:c7:a5:bd:72:e4:7a:d3:24:db:cb:35:ad:d9:42: 9e:58:01:ba:55:6b:ed:c2:30:88:b3:63:49:b0:41:af:5f:84: 9a:94:80:16:c4:0a:8d:c5:7d:96:90:b7:53:e5:c9:12:21:bd: 35:0c:58:6a:22:13:7d:ec:08:c5:9c:ec:65:7b:b5:43:63:b5: 70:e2:2c:8a:db:3c:5d:92:39:88:23:98:b1:e9:3f:4f:fc:d5: bb:18:3d:bc:2c:ad:d1:0e:b3:e0:3b:78:d7:c5:70:d3:ee:b1: b6:63:8c:13:5b:2a:f1:42:f4:d8:9b:23:20:14:90:e4:bb:fc: 7f:69:18:5c:1d:f3:48:93:ce:dc:f2:b8:3b:db:9d:a6:66:65: 73:b2:e2:d6:f8:9d:21:eb:ed:f9:17:23:d2:1f:d8:13:f5:b4: 1d:79:33:f0:bd:b7:64:b8:f3:32:7e:d3:f3:fd:28:05:2e:2c: 62:01:24:e2:5a:76:fe:03:20:12:a5:df:67:4c:c4:ef:f8:a3: 1f:ed:de:6a:8a:00:dd:95:db:55:52:f4:f4:aa:a1:6b:d7:b1: c5:15:9e:47:a7:c1:d9:1b:f4:27:31:5d:81:8a:ff:f0:e6:06: 31:bc:d5:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc1crKBj8Ng1dA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzczMTQ5MDQtYjUzOC00NmM5LThjNTctNGE1ZjU2OTU1YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOHdF4KshQMGSKDX41pl+E1bp564g5xWewwR NvbJWEg0ID60Ljo8f5m1FGt9656Z0sbS8l0krodhl438RCsV6UEtc/JIcmhiARSF FfVlQ2d/kiLvRlN31szeuGeRiQ1gHpUrlqBvBREWiG0a1vSPjc4U3O6eEi9FfiBG gKgC0SUWz6uPZMTP6dD7MzJzDDkpfnE2AUJB9RHb1zCMkc3ESr0kKXCwg8blRHcV tSX9rgUl+VMUzwoZG67rtbJ23F3/voIwpcdg9Bd8oN6Fjsn0M0+eDiRqihnhqjGo AmA153soVaGRtAt8gePJHpUnN++usFsMZJygkowk2uSjMclY7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNJkcq0eiNKHhlE8E92neoccNkhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U3N2JiZTMtMmJkNy0z MDMwLWJjY2MtNGIwMDU1MWJhZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBa1O3eCC4rSqSffzgRDFLl4xG9WiFxx6W9cuR60yTbyzWt2UKeWAG6 VWvtwjCIs2NJsEGvX4SalIAWxAqNxX2WkLdT5ckSIb01DFhqIhN97AjFnOxle7VD Y7Vw4iyK2zxdkjmII5ix6T9P/NW7GD28LK3RDrPgO3jXxXDT7rG2Y4wTWyrxQvTY myMgFJDku/x/aRhcHfNIk87c8rg7252mZmVzsuLW+J0h6+35FyPSH9gT9bQdeTPw vbdkuPMyftPz/SgFLixiASTiWnb+AyASpd9nTMTv+KMf7d5qigDdldtVUvT0qqFr 17HFFZ5Hp8HZG/QnMV2Biv/w5gYxvNXx -----END CERTIFICATE-----Generated at Tue Oct 6 21:56:38 2026 by rpki-client