$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa File: 04295114-d569-3b51-8f9e-4ba4ee41f486.roa (raw, json) Hash identifier: vIQ6t3QthRUFVul2R26luZcIeRe6Z9hz3unqHzjxjMw= Subject key identifier: B7:00:62:5C:4C:24:18:67:6E:0E:98:B1:5C:72:E4:D6:67:5D:E2:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902937AD4DFDDB0025D6E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396549 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:29:37:ad:4d:fd:db:00:25:d6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=447d01f0-e501-4cda-823b-dd9a4934ec89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:12:4c:c9:17:f3:7f:eb:13:90:ff:81:44: 55:7a:79:96:95:ec:6d:25:dd:71:83:a5:45:37:ec: 58:b5:1e:20:5c:16:9b:e1:50:82:6c:8f:38:df:70: 8a:3e:bc:43:ff:fc:5a:d3:6d:08:99:d1:c3:87:ec: 89:f8:b7:cf:46:5d:5f:8e:67:fb:df:c5:c8:33:dd: 5e:35:bc:75:17:69:ee:eb:fb:6f:ef:3f:36:bc:b7: 71:c9:90:2a:94:6f:28:33:c2:36:cb:64:0f:7e:1f: 56:cb:a0:78:6e:ec:ac:75:aa:cc:32:3a:b6:b7:eb: 0a:d9:55:ba:6a:b7:25:72:a8:f6:85:2b:69:e9:f0: a2:49:2f:6f:67:64:9d:3e:d6:6a:e9:d2:b5:bf:0f: b7:fd:55:94:46:5c:3c:fb:d9:c3:01:ec:ad:f5:6f: 78:e2:83:d7:86:dd:b5:42:92:6b:8c:a1:ba:b1:55: de:4e:d3:17:04:0d:07:a5:34:84:04:d9:5b:41:bf: b7:c6:a3:69:45:8b:b4:6a:fc:18:e9:42:19:c6:ed: 14:1e:73:76:5f:15:58:35:d1:2f:ed:09:a8:1a:0a: bb:84:1f:2d:aa:9d:d7:3a:da:7e:29:21:ed:fb:44: 1e:8d:fa:dc:9a:78:39:c1:14:08:21:22:6e:4b:2e: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:62:5C:4C:24:18:67:6E:0E:98:B1:5C:72:E4:D6:67:5D:E2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/04295114-d569-3b51-8f9e-4ba4ee41f486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c5:25:00:c0:b7:dc:16:55:44:d7:e3:56:cd:2a:05:d9:7b: 51:e2:70:3f:b2:22:84:36:f1:a7:f2:9c:58:8c:ea:ed:73:36: 2b:b9:27:f4:bb:3d:8f:bd:33:b4:3a:15:d9:7e:1d:7c:fe:a9: 28:0f:f0:c2:00:97:3e:bf:a4:77:89:a3:2b:03:f1:0c:8b:e3: b1:fd:0b:85:c0:ce:b6:6a:84:3c:ac:71:05:74:14:61:14:2f: 5f:0d:4a:7c:63:4d:c4:d4:6e:9b:64:ef:ae:b0:d6:66:cc:1b: 87:7c:b8:4a:ab:f4:2b:aa:3d:5b:e0:9e:30:59:22:d6:0d:b2: fa:0b:5a:7c:af:2d:11:5a:6c:87:09:a6:ee:78:60:aa:ff:20: be:98:2b:d6:a9:b2:22:0f:4f:8a:2b:05:e0:fa:82:ab:4b:e3: 67:cc:32:1d:90:11:f2:4e:b2:f0:37:09:a9:67:fe:39:28:ef: e0:23:cf:9e:f3:20:a0:db:c5:7a:9b:db:71:f0:40:20:59:cf: 2d:96:ad:c8:85:f3:20:b6:b2:b9:6f:31:a9:73:6f:2e:6d:82: 46:8c:c6:91:61:41:eb:bc:d6:99:52:89:a4:36:33:f0:1a:0f: e7:9d:1f:4f:35:8f:72:d1:ce:59:bd:4f:eb:22:13:1a:1a:ba: b0:ce:45:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCk3rU392wAl1uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDQ3ZDAxZjAtZTUwMS00Y2RhLTgyM2ItZGQ5YTQ5MzRlYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdUSTMkX83/rE5D/gURVenmWlextJd1xg6VF N+xYtR4gXBab4VCCbI8433CKPrxD//xa020ImdHDh+yJ+LfPRl1fjmf738XIM91e Nbx1F2nu6/tv7z82vLdxyZAqlG8oM8I2y2QPfh9Wy6B4buysdarMMjq2t+sK2VW6 arclcqj2hStp6fCiSS9vZ2SdPtZq6dK1vw+3/VWURlw8+9nDAeyt9W944oPXht21 QpJrjKG6sVXeTtMXBA0HpTSEBNlbQb+3xqNpRYu0avwY6UIZxu0UHnN2XxVYNdEv 7QmoGgq7hB8tqp3XOtp+KSHt+0Qejfrcmng5wRQIISJuSy6BOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLcAYlxMJBhnbg6YsVxy5NZnXeKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQyOTUxMTQtZDU2OS0z YjUxLThmOWUtNGJhNGVlNDFmNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCxSUAwLfcFlVE1+NWzSoF2XtR4nA/siKENvGn8pxYjOrtczYruSf0 uz2PvTO0OhXZfh18/qkoD/DCAJc+v6R3iaMrA/EMi+Ox/QuFwM62aoQ8rHEFdBRh FC9fDUp8Y03E1G6bZO+usNZmzBuHfLhKq/Qrqj1b4J4wWSLWDbL6C1p8ry0RWmyH CabueGCq/yC+mCvWqbIiD0+KKwXg+oKrS+NnzDIdkBHyTrLwNwmpZ/45KO/gI8+e 8yCg28V6m9tx8EAgWc8tlq3IhfMgtrK5bzGpc28ubYJGjMaRYUHrvNaZUomkNjPw Gg/nnR9PNY9y0c5ZvU/rIhMaGrqwzkUc -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:30 2026 by rpki-client