$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa File: 523ef6f6-d440-330b-aad0-be8d682f4c42.roa (raw, json) Hash identifier: WCAxTIHUDnjS8kWEcCwijbMzf9AAx65oF1HhoV2aCpU= Subject key identifier: 8A:8A:B0:D6:97:AA:DE:84:EB:54:EF:D2:DB:80:BA:EC:06:AE:58:07 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973116D12FFDF938755E080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20431 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:11:6d:12:ff:df:93:87:55:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77f1ecfd-614a-4004-87d8-f2d880666066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:00:ea:ff:fc:cf:33:cb:96:d2:8e:2a:dc:85: 99:7b:54:aa:81:b1:81:14:69:a3:96:6a:72:05:30: 1a:aa:50:09:d8:c4:00:9d:e6:f2:0e:57:44:c9:f6: b2:b2:d2:6f:52:4d:f6:fb:01:4a:7d:d5:b7:10:a8: a8:2e:9f:a9:b7:38:c3:54:53:16:f0:7c:bb:c6:3a: 34:29:e4:68:4d:77:2c:53:15:c5:89:9b:b7:ec:dc: e1:e6:86:c8:fa:19:00:59:6d:57:a9:b5:a2:b8:a0: f5:94:dd:d7:7f:e7:f1:ce:66:6c:99:d9:fa:6a:01: fb:99:57:4a:ee:aa:5b:0c:35:3f:cb:31:4c:33:f2: 92:26:bc:78:40:2b:1b:d4:d2:bb:ef:18:2e:24:38: 49:be:13:39:78:da:34:90:1d:16:3d:42:b8:56:6d: a9:cf:6d:b6:1a:3c:19:06:40:b7:68:60:fa:e5:dc: 4f:9e:55:2b:8a:f8:ce:b2:2c:83:51:0a:dc:85:ba: 25:5f:59:c8:79:fb:4a:f0:e9:18:84:d9:ee:f7:25: 6c:19:e8:5e:53:0b:d2:88:d0:63:a4:73:94:11:14: 2c:80:c6:29:5b:f3:34:89:2a:c1:81:fd:85:87:be: ae:c1:4a:11:aa:1e:47:6e:2b:4d:00:6d:75:cc:b2: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8A:B0:D6:97:AA:DE:84:EB:54:EF:D2:DB:80:BA:EC:06:AE:58:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b6:99:ee:85:5f:35:ff:b4:ed:02:95:e1:a9:2b:a5:b5:a5: 13:57:b9:c1:9c:5b:06:99:80:35:09:97:12:5f:15:1d:5b:57: 75:2d:1c:8e:e4:f1:25:9b:2b:86:9f:24:18:59:ee:9e:cb:65: d1:de:19:cc:6e:f8:97:78:1a:d0:b1:a4:85:96:52:74:c0:e7: b5:cf:df:49:5f:c3:e2:04:65:75:4f:e6:70:8c:4a:5d:7c:6d: 7e:61:96:dc:47:0b:4d:b2:4d:75:3f:96:f8:27:55:8b:4e:d6: f7:ec:92:02:95:59:86:56:fd:eb:54:94:b4:a1:1f:fc:37:7c: a0:40:f2:c1:82:81:91:63:4f:89:69:8d:95:2a:f3:c7:86:70: 01:a3:29:e9:4a:70:1f:c7:ae:a9:cf:3a:3c:aa:4a:5a:1c:42: 50:74:b2:ea:9a:1e:8d:a0:4c:2c:69:0e:00:42:92:32:4a:13: c1:f9:8a:c1:ab:8b:30:8d:a7:83:b2:b2:18:6e:7c:90:f9:89: 73:44:04:a1:c0:bb:b8:a2:48:9f:9e:de:6d:7d:69:1a:da:aa: 77:36:71:cc:fe:58:82:e9:23:f7:4d:8b:c8:6c:c3:62:1f:90: d0:ad:9c:72:4f:73:61:20:5c:50:71:47:c5:c2:0b:5a:ea:02: 17:5a:f8:92 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JcxFtEv/fk4dV4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdmMWVjZmQtNjE0YS00MDA0LTg3ZDgtZjJkODgwNjY2MDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wDq//zPM8uW0o4q3IWZe1SqgbGBFGmjlmpy BTAaqlAJ2MQAnebyDldEyfaystJvUk32+wFKfdW3EKioLp+ptzjDVFMW8Hy7xjo0 KeRoTXcsUxXFiZu37Nzh5obI+hkAWW1XqbWiuKD1lN3Xf+fxzmZsmdn6agH7mVdK 7qpbDDU/yzFMM/KSJrx4QCsb1NK77xguJDhJvhM5eNo0kB0WPUK4Vm2pz222GjwZ BkC3aGD65dxPnlUrivjOsiyDUQrchbolX1nIeftK8OkYhNnu9yVsGeheUwvSiNBj pHOUERQsgMYpW/M0iSrBgf2Fh76uwUoRqh5HbitNAG11zLKv9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIqKsNaXqt6E61Tv0tuAuuwGrlgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTIzZWY2ZjYtZDQ0MC0z MzBiLWFhZDAtYmU4ZDY4MmY0YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9tpnuhV81/7TtApXhqSultaUTV7nBnFsGmYA1CZcSXxUdW1d1LRyO 5PElmyuGnyQYWe6ey2XR3hnMbviXeBrQsaSFllJ0wOe1z99JX8PiBGV1T+ZwjEpd fG1+YZbcRwtNsk11P5b4J1WLTtb37JIClVmGVv3rVJS0oR/8N3ygQPLBgoGRY0+J aY2VKvPHhnABoynpSnAfx66pzzo8qkpaHEJQdLLqmh6NoEwsaQ4AQpIyShPB+YrB q4swjaeDsrIYbnyQ+YlzRAShwLu4okifnt5tfWka2qp3NnHM/liC6SP3TYvIbMNi H5DQrZxyT3NhIFxQcUfFwgta6gIXWviS -----END CERTIFICATE-----Generated at Fri Sep 25 22:01:45 2026 by rpki-client