$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5271afb-1b33-3c5e-be34-622e42889215.roa File: d5271afb-1b33-3c5e-be34-622e42889215.roa (raw, json) Hash identifier: 1/IOnjwApJpqzKU+wTeXu4yurlWdE/drtCfeadz4OL8= Subject key identifier: 44:20:9B:F4:94:86:3E:5B:D7:53:CE:86:70:EC:F9:B6:47:1B:B6:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987EABBA79DE044A74B7E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5271afb-1b33-3c5e-be34-622e42889215.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396594 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:ea:bb:a7:9d:e0:44:a7:4b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=825afcfa-b7d8-4ca0-a177-b98f263941a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:4a:80:c8:5b:77:ea:55:dc:6d:96:d9:8f: 62:8b:c6:d2:55:49:cc:9e:1a:12:66:ab:ec:39:60: 1d:af:29:9e:3b:f7:45:52:11:84:50:c5:cc:4e:6b: cc:7d:a5:0e:24:34:60:5e:ec:77:c5:63:38:ce:a7: 7a:db:f6:6d:4d:4d:88:19:e3:b9:4c:a1:fb:74:6b: 58:de:0a:a5:8a:06:c7:10:ea:48:ec:20:f5:27:3a: fd:2a:72:18:07:ef:0b:f2:62:a3:ce:23:96:74:09: e3:cc:51:3d:50:6e:eb:d6:e5:0d:2c:fc:98:33:f3: 59:49:eb:9b:5d:27:9c:e7:80:9a:ff:36:d7:78:fe: 02:70:89:cf:2e:45:b0:ea:c5:59:d0:03:de:c3:98: 4c:d9:ab:25:e6:c2:b7:c9:2b:b5:b9:cb:01:f0:e9: ad:21:4d:33:fc:03:72:02:a3:98:e4:1b:bb:4a:97: f8:66:ea:6e:18:6a:ba:de:2c:67:e6:c5:94:83:d0: f7:ce:2c:26:c3:d7:7a:48:97:86:36:6e:2f:8e:48: 08:bf:9b:95:98:6b:5a:b3:3d:cb:97:90:a8:57:54: ca:50:08:fc:0c:6d:ec:54:ca:ef:7c:a2:13:29:7c: c4:6b:4a:31:93:f1:78:ce:93:fc:f0:f2:6e:9a:84: b6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:9B:F4:94:86:3E:5B:D7:53:CE:86:70:EC:F9:B6:47:1B:B6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d5271afb-1b33-3c5e-be34-622e42889215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f3:91:28:3d:af:8d:21:5e:a1:a7:af:72:61:74:27:91:a4: ef:df:87:ec:96:91:d5:c7:bc:73:f1:26:70:43:1e:71:a1:1c: 07:48:cb:96:b5:64:4e:0f:06:99:7c:63:79:d2:2c:a9:8b:06: c3:b4:16:85:58:1e:80:c9:6c:5b:35:3d:f1:4a:66:31:e9:f9: 96:43:39:43:e7:e2:4a:d8:23:0b:24:51:19:a5:c8:0a:bd:7a: c3:83:6a:23:c8:7c:07:15:a4:8e:0d:c4:0a:29:2c:54:ea:ce: 63:ca:6e:4d:0d:1c:80:d4:8f:bc:43:3f:28:65:3d:1e:7d:d3: 73:32:f3:0b:a8:32:5d:68:7e:70:e7:a6:95:47:ef:6f:7a:23: b6:a6:75:6e:39:97:41:db:ed:64:b2:73:a5:c8:2d:57:87:d3: 74:59:79:94:e3:41:56:64:6f:a8:6e:c7:ad:76:22:8e:3e:ef: 2f:0f:05:41:08:a0:52:7a:08:4c:ac:a4:46:8b:ee:9c:05:79: 20:04:98:83:ae:35:62:01:21:78:4d:95:1e:6a:7e:30:a5:6c: 3d:85:f4:2f:a9:99:b5:92:f2:c8:06:22:bd:89:5d:49:bf:82: 6d:9c:ab:c0:a8:40:8b:0f:00:67:ea:72:41:ac:1b:27:ba:4f: 09:8f:4c:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jh+q7p53gRKdLfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI1YWZjZmEtYjdkOC00Y2EwLWExNzctYjk4ZjI2Mzk0MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb1KgMhbd+pV3G2W2Y9ii8bSVUnMnhoSZqvs OWAdrymeO/dFUhGEUMXMTmvMfaUOJDRgXux3xWM4zqd62/ZtTU2IGeO5TKH7dGtY 3gqligbHEOpI7CD1Jzr9KnIYB+8L8mKjziOWdAnjzFE9UG7r1uUNLPyYM/NZSeub XSec54Ca/zbXeP4CcInPLkWw6sVZ0APew5hM2asl5sK3ySu1ucsB8OmtIU0z/ANy AqOY5Bu7Spf4ZupuGGq63ixn5sWUg9D3ziwmw9d6SJeGNm4vjkgIv5uVmGtasz3L l5CoV1TKUAj8DG3sVMrvfKITKXzEa0oxk/F4zpP88PJumoS2cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEQgm/SUhj5b11POhnDs+bZHG7ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDUyNzFhZmItMWIzMy0z YzVlLWJlMzQtNjIyZTQyODg5MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA885EoPa+NIV6hp69yYXQnkaTv34fslpHVx7xz8SZwQx5xoRwHSMuW tWRODwaZfGN50iypiwbDtBaFWB6AyWxbNT3xSmYx6fmWQzlD5+JK2CMLJFEZpcgK vXrDg2ojyHwHFaSODcQKKSxU6s5jym5NDRyA1I+8Qz8oZT0efdNzMvMLqDJdaH5w 56aVR+9veiO2pnVuOZdB2+1ksnOlyC1Xh9N0WXmU40FWZG+obsetdiKOPu8vDwVB CKBSeghMrKRGi+6cBXkgBJiDrjViASF4TZUean4wpWw9hfQvqZm1kvLIBiK9iV1J v4JtnKvAqECLDwBn6nJBrBsnuk8Jj0z/ -----END CERTIFICATE-----Generated at Fri Sep 25 19:10:28 2026 by rpki-client