$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa File: d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa (raw, json) Hash identifier: ubzrKPL3PxSsG1rVgJ4XkshB0H+YLfxjof4FSNBAWvs= Subject key identifier: BA:74:1C:7D:8B:AA:25:F3:46:ED:78:71:8B:21:E9:71:BE:9D:01:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B69FC43E4C59819DA3660 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396566 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:69:fc:43:e4:c5:98:19:da:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c3423da-6531-4d07-b86a-80681cdeff0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:72:ac:d5:85:74:17:43:85:00:7b:cd:b1:a6: cc:ad:47:9c:7c:b0:e9:cf:3d:73:fa:10:e2:e1:b5: c8:48:e9:c1:25:23:d4:3e:1e:40:fc:cd:42:48:61: ca:81:8c:f4:96:29:d6:d1:c3:5f:32:55:4e:c4:aa: 0b:cb:d0:c0:e1:4c:a0:7b:26:64:22:a5:b4:a2:24: db:56:25:6e:d3:8e:9b:6c:40:dc:d1:88:cb:93:45: d4:2c:76:f7:98:d1:fc:dd:2c:12:26:f8:74:3b:2c: 48:40:30:ed:b6:ac:2d:0b:f6:71:07:6c:fc:86:69: 9f:c3:53:4f:d0:91:15:d3:5d:34:f5:f8:5c:17:bf: 5d:05:2a:ee:a8:79:4c:d4:b0:7e:f8:29:79:a2:06: 8c:f0:bb:53:93:c8:ab:3b:08:a7:97:5a:eb:9c:ef: cd:23:f4:1b:2b:dd:81:88:26:2d:df:26:cc:6e:9b: 90:0d:5a:8a:ea:81:6c:4d:f8:a0:9d:ab:36:4b:99: 84:d1:58:56:a8:98:f2:5b:be:9a:68:68:41:a7:d6: 75:03:0c:64:5e:b7:46:44:b9:5b:98:19:cf:79:3f: 35:72:04:91:d5:72:16:78:08:6e:74:9f:31:33:f8: e3:5d:16:7b:95:a5:70:21:46:21:d4:6d:03:4d:c0: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:74:1C:7D:8B:AA:25:F3:46:ED:78:71:8B:21:E9:71:BE:9D:01:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0b:51:19:98:16:bb:37:47:54:aa:df:0c:07:54:a4:4d:c9: e8:a2:d2:94:8a:eb:a4:5a:8b:c2:62:88:df:a8:8c:52:1b:4e: ff:8a:53:1c:39:ea:73:62:ba:8a:17:3a:e2:d9:e9:34:f0:fe: bd:3c:53:c9:78:f1:e4:34:90:cc:c7:38:87:1a:95:c5:64:0f: 39:50:fe:f0:d2:7b:3c:7a:bb:a1:04:fb:f3:cb:41:03:18:f4: 18:30:5f:e5:40:14:3d:16:f6:15:77:8c:de:60:0f:7b:07:08: ce:68:9c:b9:4f:29:f1:90:3b:8d:00:4c:db:85:49:74:79:7d: ad:97:4e:1a:13:26:25:00:f2:28:56:4b:15:8b:b8:ba:ef:65: bc:c6:20:42:f5:19:b6:80:dd:37:2a:d6:63:9d:f8:1e:50:a6: 95:29:cd:d0:ea:6f:30:98:d8:e2:d7:60:42:9c:48:16:d4:36: 4d:cd:d3:8d:6e:c3:91:a4:db:5c:77:d3:9a:10:32:45:b6:7d: 9d:0a:8e:79:5b:73:99:02:c6:e8:53:a7:4c:51:9f:70:87:3f: e0:d0:ed:88:20:77:ab:f0:25:2c:3f:40:0e:09:97:33:9a:a6: e6:9d:36:d6:c2:46:12:08:61:16:d7:47:e1:06:0d:71:df:93: 5a:04:3a:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Ji2n8Q+TFmBnaNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWMzNDIzZGEtNjUzMS00ZDA3LWI4NmEtODA2ODFjZGVmZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Ks1YV0F0OFAHvNsabMrUecfLDpzz1z+hDi 4bXISOnBJSPUPh5A/M1CSGHKgYz0linW0cNfMlVOxKoLy9DA4UygeyZkIqW0oiTb ViVu046bbEDc0YjLk0XULHb3mNH83SwSJvh0OyxIQDDttqwtC/ZxB2z8hmmfw1NP 0JEV01009fhcF79dBSruqHlM1LB++Cl5ogaM8LtTk8irOwinl1rrnO/NI/QbK92B iCYt3ybMbpuQDVqK6oFsTfignas2S5mE0VhWqJjyW76aaGhBp9Z1AwxkXrdGRLlb mBnPeT81cgSR1XIWeAhudJ8xM/jjXRZ7laVwIUYh1G0DTcA9dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLp0HH2LqiXzRu14cYsh6XG+nQFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDQyM2U1YWQtNTY0Ni0z YzkzLWI5NmEtZTkxZDQ5YzBhMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIC1EZmBa7N0dUqt8MB1SkTcnootKUiuukWovCYojfqIxSG07/ilMc OepzYrqKFzri2ek08P69PFPJePHkNJDMxziHGpXFZA85UP7w0ns8eruhBPvzy0ED GPQYMF/lQBQ9FvYVd4zeYA97BwjOaJy5TynxkDuNAEzbhUl0eX2tl04aEyYlAPIo VksVi7i672W8xiBC9Rm2gN03KtZjnfgeUKaVKc3Q6m8wmNji12BCnEgW1DZNzdON bsORpNtcd9OaEDJFtn2dCo55W3OZAsboU6dMUZ9whz/g0O2IIHer8CUsP0AOCZcz mqbmnTbWwkYSCGEW10fhBg1x35NaBDp/ -----END CERTIFICATE-----Generated at Tue Oct 6 22:58:48 2026 by rpki-client