$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa File: 04295114-d569-3b51-8f9e-4ba4ee41f486.roa (raw, json) Hash identifier: ByCM2Itgrv5CibGlLf8Sq2gd9dGgbQlfuYwXol726Fo= Subject key identifier: 6F:8C:80:F7:92:0B:D3:02:05:C1:05:38:6F:E6:8A:07:08:B2:CA:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498821198D56385F45AD3B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396549 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:21:19:8d:56:38:5f:45:ad:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af769d8f-0610-4107-bada-c5eab53cf0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:c0:cc:77:96:70:fd:e0:25:77:22:f6:2c: a1:16:9a:b7:06:4b:e9:44:d1:69:f3:6c:ea:78:a6: 2c:bf:7f:e2:b9:92:01:f6:36:69:96:cc:15:6b:ed: 09:dc:78:cb:3a:e9:7c:3c:40:b6:fb:4f:fa:de:83: ef:00:8e:b8:66:da:fe:c0:dd:db:be:88:a7:ba:ba: b0:81:5a:52:8e:f9:de:b8:6e:63:b4:a7:17:bf:7f: a9:82:80:3a:83:09:5e:f9:46:a3:05:ad:8d:9a:d4: 7b:ed:4a:d2:b5:cb:d7:df:7d:87:b5:d5:89:64:0e: 9d:e3:f8:39:7a:4e:02:36:38:11:86:36:c1:1c:63: 01:4d:47:6f:3d:31:ab:56:c9:3e:d5:66:21:2e:a3: 93:61:0a:ae:ca:9f:19:ff:86:2c:05:29:73:8d:0a: 83:f2:37:6b:6f:d1:30:d3:44:d3:59:9c:3d:25:ff: d6:06:da:5f:f2:b6:c3:a8:0c:b5:60:6f:1b:7b:41: d5:13:09:3d:6e:b4:60:a8:a2:2d:db:2c:67:11:04: a8:e7:47:bc:1e:36:b8:44:0f:d6:cd:2a:2b:25:e4: 49:0c:6c:73:d5:f6:0f:21:d3:33:e8:0b:27:ca:92: f9:25:c5:7a:69:76:7d:25:5f:96:b4:b3:4c:9b:d9: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:80:F7:92:0B:D3:02:05:C1:05:38:6F:E6:8A:07:08:B2:CA:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:41:b5:02:9b:e6:cd:79:61:f0:38:f1:d2:03:51:38:19:85: 5d:0b:ca:b4:61:33:d6:1d:2a:fb:96:e1:8a:56:2f:3d:e5:66: ea:21:39:99:18:0a:2e:a5:06:ff:c0:da:6f:1d:91:38:42:c3: 49:3b:81:71:7a:47:4f:48:e8:d1:74:23:28:23:54:eb:75:b2: 09:8e:12:f1:c7:c3:d5:68:35:4c:44:07:4b:99:3a:59:54:ca: 65:c7:25:cd:c0:cf:88:77:c7:f5:46:d5:f7:14:e8:9b:fd:f7: 78:06:90:09:11:b7:58:1e:75:3e:54:05:13:f4:27:8d:dc:99: ce:af:38:69:d9:6b:ef:92:59:a6:e4:98:81:7b:8e:b6:7b:a2: f7:9c:ef:70:8f:66:0b:72:ce:ce:4a:bc:51:54:bc:84:e7:92: 0d:d8:50:b7:34:36:a2:33:b0:38:1e:6a:56:aa:fc:a7:91:88: 04:36:1c:b1:e8:0f:80:93:b7:d2:e7:47:ac:9e:d8:20:81:c1: 80:e9:5a:cb:ae:83:88:3d:7c:97:82:53:be:20:f0:5b:f5:12: b1:e3:d6:20:4b:5c:44:b8:4c:3b:67:d4:73:aa:83:3a:f4:f9: ea:19:70:51:ea:e1:01:91:f3:6b:3c:1d:d7:dd:6f:b2:ca:ba: f0:d8:9f:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiCEZjVY4X0WtOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY3NjlkOGYtMDYxMC00MTA3LWJhZGEtYzVlYWI1M2NmMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wDAzHeWcP3gJXci9iyhFpq3BkvpRNFp82zq eKYsv3/iuZIB9jZplswVa+0J3HjLOul8PEC2+0/63oPvAI64Ztr+wN3bvoinurqw gVpSjvneuG5jtKcXv3+pgoA6gwle+UajBa2NmtR77UrStcvX332HtdWJZA6d4/g5 ek4CNjgRhjbBHGMBTUdvPTGrVsk+1WYhLqOTYQquyp8Z/4YsBSlzjQqD8jdrb9Ew 00TTWZw9Jf/WBtpf8rbDqAy1YG8be0HVEwk9brRgqKIt2yxnEQSo50e8Hja4RA/W zSorJeRJDGxz1fYPIdMz6AsnypL5JcV6aXZ9JV+WtLNMm9nwVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG+MgPeSC9MCBcEFOG/migcIssptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQyOTUxMTQtZDU2OS0z YjUxLThmOWUtNGJhNGVlNDFmNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPQbUCm+bNeWHwOPHSA1E4GYVdC8q0YTPWHSr7luGKVi895WbqITmZ GAoupQb/wNpvHZE4QsNJO4FxekdPSOjRdCMoI1TrdbIJjhLxx8PVaDVMRAdLmTpZ VMplxyXNwM+Id8f1RtX3FOib/fd4BpAJEbdYHnU+VAUT9CeN3JnOrzhp2Wvvklmm 5JiBe462e6L3nO9wj2YLcs7OSrxRVLyE55IN2FC3NDaiM7A4HmpWqvynkYgENhyx 6A+Ak7fS50esntgggcGA6VrLroOIPXyXglO+IPBb9RKx49YgS1xEuEw7Z9RzqoM6 9PnqGXBR6uEBkfNrPB3X3W+yyrrw2J98 -----END CERTIFICATE-----Generated at Sat Sep 26 06:15:00 2026 by rpki-client