$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa File: 3b069af5-8b25-354c-8d61-259a5210c9bd.roa (raw, json) Hash identifier: 96wWvgv4DSS3sYntuCZQoN5i8TTRXfe+UjGYj7Atz6k= Subject key identifier: D2:1E:79:0C:C6:4E:A2:6B:8A:6E:1D:57:F6:15:2E:D5:0B:FE:63:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BF52586246B2E789C97D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397199 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:f5:25:86:24:6b:2e:78:9c:97:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5539c6a9-faba-41fd-b8b9-4db6f0fb691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:91:d5:ea:13:08:b0:43:2a:ae:ea:f5:1a: 82:37:cd:3e:d3:71:29:0b:e4:db:5b:f9:9c:9d:2f: 64:b7:9f:a2:3f:f3:2f:a0:d2:bb:56:48:f3:e7:d4: b2:06:d9:0f:30:a5:ca:17:60:22:73:32:03:4c:b3: c1:f4:85:03:cd:f4:91:d7:cf:02:ac:c8:b7:a6:b3: b2:4b:1b:dd:11:61:b8:2c:69:e4:df:89:f2:d9:c3: 5c:a8:37:b8:9e:c8:d0:76:c7:57:82:89:c9:b8:e4: e3:37:8e:5c:61:01:e0:67:b2:fe:a8:c2:4d:e5:7a: af:0b:db:c1:de:33:ce:0b:0d:9d:75:42:31:64:62: 5b:4d:32:9f:20:a5:e6:09:db:62:aa:15:8a:8c:fe: 6b:a0:ea:0c:47:24:bf:3a:77:3b:2c:96:f0:b7:66: 77:c7:0b:c6:49:cb:28:a4:13:5e:0c:40:8d:dc:e0: 91:28:87:22:c5:f6:0f:47:f7:3d:54:d1:6b:96:99: 9b:a4:9b:9e:a3:37:65:2a:bc:9a:c4:df:7b:e6:ae: 6e:b4:0f:81:5e:ce:e1:86:b8:89:b1:e9:6f:d2:90: f2:cb:52:27:c8:c2:c4:59:cf:08:36:a1:55:08:21: 2c:7d:1f:a5:ff:2d:96:b9:fc:21:96:05:f5:d1:8a: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1E:79:0C:C6:4E:A2:6B:8A:6E:1D:57:F6:15:2E:D5:0B:FE:63:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bc:2e:81:a0:d8:da:53:9b:50:53:a3:96:e6:ed:45:d0:be: 71:12:1f:ed:f4:1d:72:11:6f:c8:c9:9b:68:44:1d:d5:c8:76: 73:95:5e:e2:5c:1a:64:fb:85:6a:40:18:3e:f7:70:f8:64:de: de:1d:4a:c5:2d:e5:8b:67:f0:f8:01:dc:35:a3:d9:0d:13:13: 91:ca:4c:8e:6a:22:f4:93:e4:e1:c6:9b:e1:7a:44:aa:42:0d: 5a:73:6c:68:74:35:de:49:f6:a5:34:ee:1f:ea:93:05:2d:ae: 4b:8d:65:d6:7b:3e:0f:2b:2e:79:0c:2e:c5:93:d9:66:1d:e6: e0:01:9e:ae:fe:95:23:d5:17:00:43:f4:48:48:d1:21:a7:f3: 70:ba:fe:58:4b:75:8a:7e:38:b5:b2:e1:34:76:3b:34:76:15: d6:b9:97:49:3e:bc:a5:82:ac:39:b7:dc:d5:15:3c:06:f5:5d: be:46:d3:94:1f:b5:46:a9:07:69:50:87:7e:77:35:c2:2b:14: 63:30:28:0c:a8:29:6b:31:b7:14:dc:ab:ba:47:95:7a:6a:1a: 8c:eb:81:ee:8e:78:cc:88:82:1c:58:4d:3f:ef:97:63:51:70: 11:6d:07:fe:07:39:67:f7:64:4d:83:fc:75:91:94:18:18:df: 2b:dc:58:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji/UlhiRrLnicl9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUzOWM2YTktZmFiYS00MWZkLWI4YjktNGRiNmYwZmI2OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKR1eoTCLBDKq7q9RqCN80+03EpC+TbW/mc nS9kt5+iP/MvoNK7Vkjz59SyBtkPMKXKF2AiczIDTLPB9IUDzfSR188CrMi3prOy SxvdEWG4LGnk34ny2cNcqDe4nsjQdsdXgonJuOTjN45cYQHgZ7L+qMJN5XqvC9vB 3jPOCw2ddUIxZGJbTTKfIKXmCdtiqhWKjP5roOoMRyS/Onc7LJbwt2Z3xwvGScso pBNeDECN3OCRKIcixfYPR/c9VNFrlpmbpJueozdlKryaxN975q5utA+BXs7hhriJ selv0pDyy1InyMLEWc8INqFVCCEsfR+l/y2WufwhlgX10YpbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIeeQzGTqJrim4dV/YVLtUL/mOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IwNjlhZjUtOGIyNS0z NTRjLThkNjEtMjU5YTUyMTBjOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC68LoGg2NpTm1BTo5bm7UXQvnESH+30HXIRb8jJm2hEHdXIdnOVXuJc GmT7hWpAGD73cPhk3t4dSsUt5Ytn8PgB3DWj2Q0TE5HKTI5qIvST5OHGm+F6RKpC DVpzbGh0Nd5J9qU07h/qkwUtrkuNZdZ7Pg8rLnkMLsWT2WYd5uABnq7+lSPVFwBD 9EhI0SGn83C6/lhLdYp+OLWy4TR2OzR2Fda5l0k+vKWCrDm33NUVPAb1Xb5G05Qf tUapB2lQh353NcIrFGMwKAyoKWsxtxTcq7pHlXpqGozrge6OeMyIghxYTT/vl2NR cBFtB/4HOWf3ZE2D/HWRlBgY3yvcWBg= -----END CERTIFICATE-----Generated at Sun Sep 27 12:28:43 2026 by rpki-client