$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa File: ed339504-718c-35d3-bec2-47a590c70f2c.roa (raw, json) Hash identifier: LJIoV/kylXGaD0BbCnA8+q6yhrzeE/IETUJJ4VxEbzY= Subject key identifier: 77:6D:66:6A:7A:94:3D:61:17:FE:13:4C:29:B0:F4:42:05:7B:D5:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974A87133D67CF8B695B870 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36623 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a8:71:33:d6:7c:f8:b6:95:b8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=619c2451-4cf0-4f63-9f1f-3357824be546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:a1:a0:03:07:93:67:29:10:92:0c:01:d4: 16:c6:25:57:6c:64:48:85:8b:14:61:73:88:06:a3: 05:68:b5:c4:ed:bb:ba:95:e9:8c:48:92:f2:04:3d: de:a6:d6:f1:36:e7:7f:3a:89:1b:12:ea:66:eb:7e: 87:e6:8e:c7:d7:fc:15:1a:f1:87:fd:05:0d:e7:78: c6:13:47:7f:af:75:91:77:4b:8e:ea:0c:b5:cf:8b: 2d:fe:61:fe:79:69:68:42:3a:ff:ae:43:7b:71:70: 04:99:42:08:f9:bb:b8:5c:3b:95:1c:40:03:22:28: 26:01:01:e4:14:20:87:c3:4b:eb:9d:18:c9:7d:0e: e9:4c:09:2f:da:e6:cb:85:01:8b:ac:5b:62:66:da: 9e:59:95:38:df:bf:29:05:c9:fa:c5:a3:aa:0d:6b: ab:35:a3:38:81:c6:3b:bf:1e:63:74:8d:65:e9:2a: ec:c2:f2:70:31:cc:0d:5f:6a:9f:8d:80:0c:95:81: f1:c4:bd:26:d0:1c:ee:ea:76:7a:6c:ca:4d:bd:9a: a0:2f:db:8a:23:8d:75:72:c9:d5:20:2d:fc:df:8c: 9e:49:35:66:2f:4d:81:f0:91:90:33:e4:a1:5d:55: 3b:40:2e:d5:ee:b5:fe:05:7e:29:db:dd:a2:2c:ea: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6D:66:6A:7A:94:3D:61:17:FE:13:4C:29:B0:F4:42:05:7B:D5:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ed339504-718c-35d3-bec2-47a590c70f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:de:a5:73:9c:af:c6:64:6c:e5:af:03:05:d3:5c:f3:18:4d: 36:0e:7c:d2:7c:cf:47:c8:fa:cc:85:a5:4d:84:d0:d0:06:49: 27:d9:53:28:22:a6:6f:01:c8:9d:eb:b0:8f:14:c9:57:f1:39: fa:22:f6:d0:e0:26:d1:f0:fb:ab:e0:69:fd:45:fd:f4:c3:24: a4:9e:94:67:59:d0:fb:46:33:28:25:09:0c:5b:e5:f4:8f:db: b5:37:8e:96:b3:48:7a:0b:af:97:91:ec:5d:32:6d:20:bf:ec: 9d:5a:1a:33:1e:c4:e1:47:7c:4d:f6:cd:c5:b6:0e:46:0c:b9: 68:12:5c:0c:65:c6:aa:25:19:34:9e:09:3e:bb:19:83:d4:36: 31:e5:32:8f:39:c0:65:0b:ff:d4:ad:20:4e:6e:c5:d2:83:fc: 48:82:f1:10:8a:23:45:fc:6a:10:82:3f:2a:07:b2:dd:6c:a6: c1:76:92:de:13:e5:39:a3:dc:14:62:23:ec:fe:e8:a1:4d:f9: 1a:86:3b:43:ab:24:08:ae:37:b8:f7:9b:5d:cd:b5:9f:cc:13: 71:61:bf:b2:24:4e:27:6b:0a:d3:a6:1d:17:db:a1:97:6f:a7: 7a:7d:5c:b2:04:dc:8d:16:fc:c1:51:d0:27:90:bf:fb:df:30: e8:80:16:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKhxM9Z8+LaVuHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjE5YzI0NTEtNGNmMC00ZjYzLTlmMWYtMzM1NzgyNGJlNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseKhoAMHk2cpEJIMAdQWxiVXbGRIhYsUYXOI BqMFaLXE7bu6lemMSJLyBD3eptbxNud/OokbEupm636H5o7H1/wVGvGH/QUN53jG E0d/r3WRd0uO6gy1z4st/mH+eWloQjr/rkN7cXAEmUII+bu4XDuVHEADIigmAQHk FCCHw0vrnRjJfQ7pTAkv2ubLhQGLrFtiZtqeWZU4378pBcn6xaOqDWurNaM4gcY7 vx5jdI1l6SrswvJwMcwNX2qfjYAMlYHxxL0m0Bzu6nZ6bMpNvZqgL9uKI411csnV IC3834yeSTVmL02B8JGQM+ShXVU7QC7V7rX+BX4p292iLOoZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdtZmp6lD1hF/4TTCmw9EIFe9UUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWQzMzk1MDQtNzE4Yy0z NWQzLWJlYzItNDdhNTkwYzcwZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjepXOcr8ZkbOWvAwXTXPMYTTYOfNJ8z0fI+syFpU2E0NAGSSfZUygi pm8ByJ3rsI8UyVfxOfoi9tDgJtHw+6vgaf1F/fTDJKSelGdZ0PtGMyglCQxb5fSP 27U3jpazSHoLr5eR7F0ybSC/7J1aGjMexOFHfE32zcW2DkYMuWgSXAxlxqolGTSe CT67GYPUNjHlMo85wGUL/9StIE5uxdKD/EiC8RCKI0X8ahCCPyoHst1spsF2kt4T 5Tmj3BRiI+z+6KFN+RqGO0OrJAiuN7j3m13NtZ/ME3Fhv7IkTidrCtOmHRfboZdv p3p9XLIE3I0W/MFR0CeQv/vfMOiAFp4= -----END CERTIFICATE-----Generated at Sat Sep 26 09:19:07 2026 by rpki-client