$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa File: dea0163b-a1dc-39da-b708-1302f54a1bf0.roa (raw, json) Hash identifier: g4Epa5onRbYnpekfKpVfXAUyn3bMKTbtxSWwulCwwRw= Subject key identifier: BE:77:25:7C:87:EA:B4:E2:98:C1:A8:25:74:9F:7F:AB:2E:5A:DB:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B18E9F2EDFA7A42E7E2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396576 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:18:e9:f2:ed:fa:7a:42:e7:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=abbbedfa-8b28-4469-95d2-d27bdf709848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:27:2f:92:94:4a:fb:e5:de:1c:9c:1a:9d: ca:dc:c1:e8:b8:b4:26:57:e6:8e:f2:b1:ec:3c:7b: 4e:47:11:d0:3d:80:b8:a0:0a:b7:27:0a:c7:9b:f8: 2e:40:01:9d:0e:39:ae:21:c0:16:a0:18:5d:ee:80: c7:70:7d:de:f6:70:a6:67:70:b1:54:fb:6e:a7:98: bb:ff:31:4b:2d:97:d3:3a:77:22:5c:e5:57:85:c4: 10:be:fa:94:26:35:92:7b:00:ed:dc:84:45:7a:08: 63:14:67:30:28:03:6d:18:c4:85:bb:e9:45:12:c5: 14:0f:b1:ba:6b:31:28:aa:ab:fc:89:ec:b1:eb:3f: 8c:a0:2c:01:3a:e6:f6:9a:ae:e1:59:b8:8b:9d:38: 5a:f5:65:a5:3b:f5:5a:93:36:1c:2c:33:ca:ba:59: 88:fe:61:92:c4:25:b4:b9:02:03:60:a9:65:ab:7c: 5d:28:3b:94:16:00:d4:78:e1:ec:4f:b1:c3:48:a2: 59:e1:d7:7e:c4:e8:ca:8a:b7:83:d3:ec:6e:25:49: 91:95:3a:39:42:cf:d2:06:f1:fd:c1:65:4f:d8:40: 15:19:00:18:f7:54:a6:e7:62:c4:23:68:d6:16:ed: e1:b6:c6:03:12:5b:ba:23:19:e8:5a:c5:ab:ab:71: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:77:25:7C:87:EA:B4:E2:98:C1:A8:25:74:9F:7F:AB:2E:5A:DB:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:34:6f:d9:ce:0e:4f:a1:0a:e1:cd:b5:cc:de:f7:fc:06:bd: 21:28:2d:f8:5e:1f:a0:c3:2a:fb:59:eb:b7:0e:ea:5e:a9:74: 8e:3d:17:51:ad:98:31:d3:af:ea:4a:d9:93:13:31:22:1d:11: 5c:da:e1:d3:1a:5c:1f:1a:b2:c5:db:c7:5f:c7:24:c1:a1:4d: e1:54:55:58:0d:ed:2f:33:5f:53:17:31:9b:1d:23:29:94:a7: 91:9f:5f:61:77:17:64:64:d8:ee:01:4e:e1:32:a2:f1:8c:2a: 85:3f:62:31:52:a0:04:24:84:4c:dd:5b:ea:eb:53:8e:a5:6b: 43:0c:48:35:dc:14:30:68:03:a6:a2:5b:14:3d:a0:b0:75:bf: 93:fc:3a:12:86:87:5b:3f:ff:1b:8d:70:da:af:47:a3:ed:ee: e0:62:dc:3e:81:e7:07:c4:b2:57:3e:56:ce:b4:d9:53:a2:e8: 3d:ae:0e:db:86:be:01:2e:6f:7d:5e:67:53:e6:cd:36:d8:05: 50:94:e0:34:61:e8:cd:9c:88:57:7b:c0:aa:d3:49:a1:0b:2a: 36:63:0d:84:39:94:e5:58:79:68:d9:2b:99:ad:ef:1d:30:8f: ee:6f:95:c6:d1:02:a5:a0:f2:82:f8:d7:33:8d:55:43:ac:40: f4:a1:e8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jixjp8u36ekLn4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWJiYmVkZmEtOGIyOC00NDY5LTk1ZDItZDI3YmRmNzA5ODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrsnL5KUSvvl3hycGp3K3MHouLQmV+aO8rHs PHtORxHQPYC4oAq3JwrHm/guQAGdDjmuIcAWoBhd7oDHcH3e9nCmZ3CxVPtup5i7 /zFLLZfTOnciXOVXhcQQvvqUJjWSewDt3IRFeghjFGcwKANtGMSFu+lFEsUUD7G6 azEoqqv8ieyx6z+MoCwBOub2mq7hWbiLnTha9WWlO/VakzYcLDPKulmI/mGSxCW0 uQIDYKllq3xdKDuUFgDUeOHsT7HDSKJZ4dd+xOjKireD0+xuJUmRlTo5Qs/SBvH9 wWVP2EAVGQAY91Sm52LEI2jWFu3htsYDElu6IxnoWsWrq3F/uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL53JXyH6rTimMGoJXSff6suWtvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVhMDE2M2ItYTFkYy0z OWRhLWI3MDgtMTMwMmY1NGExYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs0b9nODk+hCuHNtcze9/wGvSEoLfheH6DDKvtZ67cO6l6pdI49F1Gt mDHTr+pK2ZMTMSIdEVza4dMaXB8assXbx1/HJMGhTeFUVVgN7S8zX1MXMZsdIymU p5GfX2F3F2Rk2O4BTuEyovGMKoU/YjFSoAQkhEzdW+rrU46la0MMSDXcFDBoA6ai WxQ9oLB1v5P8OhKGh1s//xuNcNqvR6Pt7uBi3D6B5wfEslc+Vs602VOi6D2uDtuG vgEub31eZ1PmzTbYBVCU4DRh6M2ciFd7wKrTSaELKjZjDYQ5lOVYeWjZK5mt7x0w j+5vlcbRAqWg8oL41zONVUOsQPSh6Kk= -----END CERTIFICATE-----Generated at Tue Oct 6 21:03:15 2026 by rpki-client