$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa File: d67b0840-5b69-323a-8043-56445d6c580b.roa (raw, json) Hash identifier: CeEKUuS4YMD3sVUZpZ4eKIKoCvTA5pmmxgsZ8DOl5AM= Subject key identifier: 76:01:8C:DA:B2:11:19:51:DB:CA:FA:E2:0F:D0:7F:18:7C:11:DD:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972D3325057B1407ADF69A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396542 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d3:32:50:57:b1:40:7a:df:69:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2be5a70c-276d-4716-87ac-4f76d099fcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:e3:b4:fc:21:e2:43:ac:2e:f0:a3:2b:82: ed:0b:ff:20:3c:e9:76:0b:6d:a0:22:3f:2f:8c:ec: 12:9e:04:e2:54:19:26:f0:28:ab:62:86:b6:cd:42: fe:86:23:6b:af:3b:19:1e:26:1e:4f:c8:27:b6:d7: 62:71:c9:c1:8a:11:b1:b3:00:f9:b6:9f:66:63:1a: f4:a4:55:51:2e:4f:57:51:7e:8b:c4:f4:62:5b:49: 72:5d:c6:0a:88:db:3e:dd:f3:d9:88:3b:8e:17:64: f1:d6:09:d7:28:d4:18:82:32:26:20:ca:2b:d0:f0: 79:48:c7:6a:c9:97:4d:4a:f8:0d:56:2e:4d:ea:23: d0:11:5a:f8:6e:ed:18:79:4e:00:3f:8d:aa:fd:80: 54:3f:ab:d0:24:21:e3:d9:ab:fe:d3:f8:89:c8:da: 2a:74:4f:8a:93:bf:c5:2e:33:cb:b0:a5:fa:3d:d4: 74:89:d3:5d:bb:82:36:c4:51:2e:b6:8d:a2:dd:6d: 8a:f6:14:9a:ad:fb:a8:63:c8:40:63:d1:bd:de:b5: d1:f4:15:2f:87:ae:59:ee:9a:f8:3c:d5:d2:d7:af: 56:84:3e:f1:cb:c2:1c:14:ae:52:27:e6:cf:e3:39: fa:d8:cf:73:e3:31:c3:b1:8e:3b:ce:b3:68:0d:89: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:8C:DA:B2:11:19:51:DB:CA:FA:E2:0F:D0:7F:18:7C:11:DD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:79:ee:29:ee:42:86:19:1f:3f:a9:96:b8:35:00:b8:d2:ff: 42:8b:78:04:90:d8:84:75:bf:9b:ff:78:e7:c1:d1:a7:43:02: 3f:f8:3e:77:77:0a:e0:c0:19:e3:2f:ff:cd:e4:ad:ed:c1:f5: 13:35:9d:08:b6:68:24:94:e9:6b:99:0f:bd:0c:83:bf:a7:0c: a3:d4:5a:2c:e6:ee:8b:28:ba:d9:a5:9c:1d:de:e4:0e:ab:9b: 1c:cc:ed:b0:e9:a1:70:7f:7a:65:a1:61:e5:5f:6e:99:b6:eb: cb:bc:23:36:ed:12:b3:67:6b:7e:7c:5b:18:a3:82:6d:47:5b: 99:e6:2e:a7:d6:fe:71:38:fb:b8:ce:33:42:19:05:66:15:5b: 81:cb:e9:28:58:bb:c5:de:2d:48:1d:0a:4f:c1:86:03:08:87: 4b:d7:34:40:b9:a3:2b:60:31:d1:2b:9a:c8:68:21:28:5d:6f: b3:17:d0:8a:a9:c7:56:c9:86:9b:2e:1b:c6:5d:21:b8:fd:65: df:af:51:bd:e1:01:66:03:c4:bd:fb:45:da:2a:2e:21:99:fc: 1f:07:6b:87:47:05:61:3f:e4:3f:43:74:32:05:f8:cf:40:5c: f6:fb:05:d6:6a:14:cd:41:c3:0c:a0:9c:e3:32:b1:8f:7c:32: 5f:89:18:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JctMyUFexQHrfaaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmJlNWE3MGMtMjc2ZC00NzE2LTg3YWMtNGY3NmQwOTlmY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9/jtPwh4kOsLvCjK4LtC/8gPOl2C22gIj8v jOwSngTiVBkm8CirYoa2zUL+hiNrrzsZHiYeT8gnttdiccnBihGxswD5tp9mYxr0 pFVRLk9XUX6LxPRiW0lyXcYKiNs+3fPZiDuOF2Tx1gnXKNQYgjImIMor0PB5SMdq yZdNSvgNVi5N6iPQEVr4bu0YeU4AP42q/YBUP6vQJCHj2av+0/iJyNoqdE+Kk7/F LjPLsKX6PdR0idNdu4I2xFEuto2i3W2K9hSarfuoY8hAY9G93rXR9BUvh65Z7pr4 PNXS169WhD7xy8IcFK5SJ+bP4zn62M9z4zHDsY47zrNoDYmrHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHYBjNqyERlR28r64g/Qfxh8Ed3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY3YjA4NDAtNWI2OS0z MjNhLTgwNDMtNTY0NDVkNmM1ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtee4p7kKGGR8/qZa4NQC40v9Ci3gEkNiEdb+b/3jnwdGnQwI/+D53 dwrgwBnjL//N5K3twfUTNZ0ItmgklOlrmQ+9DIO/pwyj1Fos5u6LKLrZpZwd3uQO q5sczO2w6aFwf3ploWHlX26ZtuvLvCM27RKzZ2t+fFsYo4JtR1uZ5i6n1v5xOPu4 zjNCGQVmFVuBy+koWLvF3i1IHQpPwYYDCIdL1zRAuaMrYDHRK5rIaCEoXW+zF9CK qcdWyYabLhvGXSG4/WXfr1G94QFmA8S9+0XaKi4hmfwfB2uHRwVhP+Q/Q3QyBfjP QFz2+wXWahTNQcMMoJzjMrGPfDJfiRjg -----END CERTIFICATE-----Generated at Tue Oct 6 11:33:45 2026 by rpki-client