$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa File: d99a1a8e-8070-330f-870d-379bea3a53c5.roa (raw, json) Hash identifier: wGCXfuM4CbcxoFNTnHZ1Kay6DEey04BY9Kfz6PMKeuo= Subject key identifier: 24:5C:4D:DA:E8:90:45:4C:D3:ED:78:FB:06:4C:CE:04:43:95:4A:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C2F896DAEAC99D0D60400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396549 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:2f:89:6d:ae:ac:99:d0:d6:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=829f9c7d-7c72-43e2-970c-f2c8fbb6c770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:c0:ff:90:3d:9b:f6:bd:f0:47:0e:0f:81: 3c:92:32:e2:07:46:bd:5c:e8:b7:76:d6:3b:0f:85: b6:9f:7c:d4:f1:ff:fb:5c:e2:4d:77:6c:c7:f7:91: c5:91:1f:c2:d4:85:f3:66:22:a1:b8:89:04:0b:ed: 8f:42:c6:18:a9:57:2a:b7:0a:51:8c:9b:e6:37:7a: d6:72:74:15:8b:40:0c:98:30:54:f7:f8:c5:7b:fb: 68:87:9a:08:f3:96:42:69:40:58:08:da:88:df:04: 82:59:5d:3f:3d:1a:e1:1f:05:57:83:85:71:db:c7: 7c:bb:77:89:95:8e:79:e2:75:2f:ea:6c:3d:d8:33: bf:5f:c0:fb:66:64:d1:71:77:bd:b6:8a:b5:7b:ba: 11:b0:85:11:61:e7:a0:59:fd:74:66:76:9a:59:d4: 22:1f:42:a0:ed:73:b8:b9:38:13:98:52:57:38:5b: e8:bd:a9:05:24:7a:09:d7:63:52:1c:c4:1c:21:ed: 04:6a:dd:42:e8:65:be:58:99:2a:9c:b9:d6:22:bb: 68:b3:ad:ac:35:10:7f:f9:2d:86:4c:d3:e6:3b:33: 2a:46:64:84:2d:f9:04:4b:c6:dd:5e:ef:07:d7:e7: 19:55:df:7f:66:62:0c:1f:25:5a:2f:56:c3:78:ef: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5C:4D:DA:E8:90:45:4C:D3:ED:78:FB:06:4C:CE:04:43:95:4A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d99a1a8e-8070-330f-870d-379bea3a53c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:34:db:51:77:83:e4:c3:06:1b:c3:3b:8e:2b:7d:a8:bf:cc: cf:7c:66:28:35:41:50:4a:08:67:f2:3f:a5:c7:66:98:bc:75: 71:aa:c2:ca:ad:81:68:d3:68:a2:ad:02:1e:52:b5:4f:e5:58: 36:5d:c4:9f:b7:df:f3:27:91:e2:34:02:b9:b9:f2:23:c1:3f: e6:a2:a0:0a:79:0d:6b:18:92:b5:e5:d5:7d:52:76:ea:59:fa: 76:1f:fe:ba:3f:da:01:b6:8c:27:52:b8:c5:e3:08:70:66:e7: 14:32:b7:dc:31:37:e6:e5:42:4b:00:58:35:1e:8f:15:08:49: e1:a8:64:c6:34:74:b0:72:c7:38:cb:d9:6a:2d:14:00:34:ce: 65:1d:a4:b0:8a:55:d5:70:ea:54:06:85:0a:63:26:60:1b:ba: 8c:1e:9e:52:0d:02:e5:62:99:8d:4b:fb:76:d2:cf:07:44:45: 07:73:da:b1:e7:f8:86:99:96:19:66:8c:aa:de:29:c3:9d:fe: 0d:14:bd:e4:00:35:47:9d:a1:96:4e:fd:1b:6d:3f:9a:59:b4: 16:62:5f:7a:36:6d:26:4d:db:7a:a3:57:37:24:db:63:b7:b1: 17:2d:71:52:ac:01:15:60:9a:b7:a5:bb:29:b6:d1:62:de:a3: a6:eb:9a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjC+Jba6smdDWBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI5ZjljN2QtN2M3Mi00M2UyLTk3MGMtZjJjOGZiYjZjNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqozA/5A9m/a98EcOD4E8kjLiB0a9XOi3dtY7 D4W2n3zU8f/7XOJNd2zH95HFkR/C1IXzZiKhuIkEC+2PQsYYqVcqtwpRjJvmN3rW cnQVi0AMmDBU9/jFe/toh5oI85ZCaUBYCNqI3wSCWV0/PRrhHwVXg4Vx28d8u3eJ lY554nUv6mw92DO/X8D7ZmTRcXe9toq1e7oRsIURYeegWf10ZnaaWdQiH0Kg7XO4 uTgTmFJXOFvovakFJHoJ12NSHMQcIe0Eat1C6GW+WJkqnLnWIrtos62sNRB/+S2G TNPmOzMqRmSELfkES8bdXu8H1+cZVd9/ZmIMHyVaL1bDeO8KrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRcTdrokEVM0+14+wZMzgRDlUozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDk5YTFhOGUtODA3MC0z MzBmLTg3MGQtMzc5YmVhM2E1M2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIw021F3g+TDBhvDO44rfai/zM98Zig1QVBKCGfyP6XHZpi8dXGqwsqt gWjTaKKtAh5StU/lWDZdxJ+33/MnkeI0Arm58iPBP+aioAp5DWsYkrXl1X1SdupZ +nYf/ro/2gG2jCdSuMXjCHBm5xQyt9wxN+blQksAWDUejxUISeGoZMY0dLByxzjL 2WotFAA0zmUdpLCKVdVw6lQGhQpjJmAbuowenlINAuVimY1L+3bSzwdERQdz2rHn +IaZlhlmjKreKcOd/g0UveQANUedoZZO/RttP5pZtBZiX3o2bSZN23qjVzck22O3 sRctcVKsARVgmreluym20WLeo6brmmc= -----END CERTIFICATE-----Generated at Wed Oct 7 04:28:32 2026 by rpki-client