$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa File: f8363202-68f3-396a-a17b-6bc148c1773e.roa (raw, json) Hash identifier: JKu1+/EghxWPdsqO2M3iTS0YQmSxokqSmWWFjPzbImk= Subject key identifier: 28:FC:01:1E:8B:24:74:B9:80:47:ED:5B:28:1C:12:CA:97:7C:20:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974270D3C91D5DAE8909380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:27:0d:3c:91:d5:da:e8:90:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61da5151-402a-4196-921d-c62a0ad5dc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:65:4d:ee:af:6c:9f:52:56:ad:5a:0a:d9: 10:70:7a:20:30:0f:bc:bc:d1:c8:85:49:2f:19:83: 80:62:2c:59:0e:5f:b4:a9:49:b9:92:a4:70:76:bf: 17:8f:65:63:c3:e9:47:c6:79:05:49:b2:de:a5:62: 88:8b:ba:98:0b:a0:66:a3:9e:95:7c:54:8f:fc:93: ab:c5:e6:70:a4:a6:e8:b8:3f:7d:66:21:bf:8a:23: 79:18:31:43:b8:f3:21:57:82:c8:b9:95:5e:3c:58: a3:df:c3:08:47:0f:36:44:44:41:25:cd:46:47:8f: 34:ba:9c:fb:a4:99:84:47:e4:7b:fc:68:b4:35:d3: ee:9c:11:f8:77:52:32:b8:09:59:50:77:08:b7:f2: db:75:31:c1:0b:1d:34:94:53:71:ff:f7:80:7c:89: 59:3f:8e:a5:20:c0:16:15:c8:9e:fe:ba:a6:d3:91: e5:ee:2f:31:a0:6c:2f:24:fa:e8:f7:41:21:d9:33: 49:bc:ae:8f:0e:3c:63:e9:4c:5d:ab:2b:2a:bb:89: 35:ef:c4:15:72:5d:49:27:c3:ad:63:a5:78:d2:26: 94:2d:0f:ae:7f:0f:1c:79:c4:bf:ad:4f:0c:16:f0: 73:c4:13:34:db:db:ef:e5:06:2d:dc:a6:f5:98:b5: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:01:1E:8B:24:74:B9:80:47:ED:5B:28:1C:12:CA:97:7C:20:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8363202-68f3-396a-a17b-6bc148c1773e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f1:c1:4f:79:c5:4b:ab:85:c3:c4:81:ec:c2:3f:38:76:1e: 72:f5:08:52:52:09:d1:97:fe:16:bc:0e:70:8a:a3:47:1e:66: ba:49:33:7a:8b:12:f0:d5:de:d6:3b:1f:c2:f4:51:56:7c:17: e4:8a:55:6a:11:e4:c3:85:d4:08:97:65:d6:3b:33:db:19:29: 73:1c:b6:13:ce:7d:78:ad:11:48:9e:ac:7c:de:c8:55:d0:53: 3b:db:c8:af:0e:a6:cd:d9:5a:7b:fd:12:57:58:ca:7e:7e:8c: 42:c3:6e:95:56:a7:3c:d8:49:da:d8:5f:6f:ab:a9:17:e4:58: 9c:ee:e9:56:fd:73:6b:ff:7b:0f:ec:f3:1f:94:55:c1:2b:a7: 28:70:be:5b:97:66:e3:43:aa:97:07:25:00:70:58:33:c8:c8: 01:22:cb:da:2d:03:b7:ab:62:c4:60:ba:27:ff:c4:46:72:ce: f1:fa:b2:1b:37:fd:3a:d8:b9:93:94:00:6f:6b:f2:94:c6:99: 5e:69:12:88:c4:8e:b8:03:43:aa:e7:87:08:ad:ad:10:8a:02: 26:37:b8:45:ad:49:5b:d3:a8:26:a5:8f:9d:68:48:1d:80:d6: 2c:91:b5:0c:6f:d7:f5:df:13:3a:b7:0f:da:ed:ce:45:20:64: a4:d2:1c:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdCcNPJHV2uiQk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFkYTUxNTEtNDAyYS00MTk2LTkyMWQtYzYyYTBhZDVkYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHRlTe6vbJ9SVq1aCtkQcHogMA+8vNHIhUkv GYOAYixZDl+0qUm5kqRwdr8Xj2Vjw+lHxnkFSbLepWKIi7qYC6Bmo56VfFSP/JOr xeZwpKbouD99ZiG/iiN5GDFDuPMhV4LIuZVePFij38MIRw82RERBJc1GR480upz7 pJmER+R7/Gi0NdPunBH4d1IyuAlZUHcIt/LbdTHBCx00lFNx//eAfIlZP46lIMAW Fcie/rqm05Hl7i8xoGwvJPro90Eh2TNJvK6PDjxj6Uxdqysqu4k178QVcl1JJ8Ot Y6V40iaULQ+ufw8cecS/rU8MFvBzxBM029vv5QYt3Kb1mLVQ6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCj8AR6LJHS5gEftWygcEsqXfCA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjgzNjMyMDItNjhmMy0z OTZhLWExN2ItNmJjMTQ4YzE3NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC8cFPecVLq4XDxIHswj84dh5y9QhSUgnRl/4WvA5wiqNHHma6STN6 ixLw1d7WOx/C9FFWfBfkilVqEeTDhdQIl2XWOzPbGSlzHLYTzn14rRFInqx83shV 0FM728ivDqbN2Vp7/RJXWMp+foxCw26VVqc82Ena2F9vq6kX5Fic7ulW/XNr/3sP 7PMflFXBK6cocL5bl2bjQ6qXByUAcFgzyMgBIsvaLQO3q2LEYLon/8RGcs7x+rIb N/062LmTlABva/KUxpleaRKIxI64A0Oq54cIra0QigImN7hFrUlb06gmpY+daEgd gNYskbUMb9f13xM6tw/a7c5FIGSk0hw1 -----END CERTIFICATE-----Generated at Fri Sep 25 18:08:34 2026 by rpki-client