$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa File: 09c8695b-7372-327c-857b-fadecae21334.roa (raw, json) Hash identifier: RHnGg00j7Pu8N/RVpjPTf+otK93misfRN2nVO1FSh+g= Subject key identifier: 01:3D:EA:79:3E:FC:A4:BE:E0:AF:AA:3F:68:99:E4:F5:C2:79:AE:AD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FF0C3D7489F8B6FCDD280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396564 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:f0:c3:d7:48:9f:8b:6f:cd:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=73c6b920-4ff3-4c9a-ab59-e373e775eef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:1c:77:40:2b:ca:c6:0a:9b:cf:0a:6d:8e: a8:2c:0c:d7:ff:e0:95:6e:79:2f:15:de:90:73:f5: 5b:b7:30:c1:50:5d:cf:be:aa:d0:9b:41:c1:30:31: 98:38:2a:a8:8a:95:19:4c:a7:1d:4c:14:99:5e:ce: 88:7d:73:30:85:49:4b:0a:8c:5a:26:e4:ad:a8:d9: a1:8e:54:6e:3c:7d:d3:c2:23:96:93:e6:db:ff:35: 2a:97:75:6e:9b:de:d7:f3:97:e4:95:71:fe:f1:8c: de:15:3c:4b:5c:70:2c:ac:76:26:54:98:e2:10:26: a9:27:b7:82:26:8b:02:ef:01:c1:eb:32:1d:20:57: c0:7e:da:49:35:a1:b1:f2:34:37:fb:74:6e:68:a1: 3a:94:97:0f:f0:29:6c:f9:82:3c:f4:02:07:aa:9d: 01:91:cd:a1:63:d6:9d:f7:81:81:95:72:25:52:e1: 36:38:f7:08:9c:b5:5e:f8:b7:40:d1:ab:2e:86:92: e1:f4:1c:6c:db:3e:7b:d3:eb:17:71:46:fe:0e:0c: 38:8b:fc:8d:3f:4d:cd:08:34:e1:70:e2:d0:0a:cb: 0e:f5:1f:f1:2e:7f:92:18:14:94:6b:ab:b6:04:3c: 2f:3d:c5:05:bc:c9:bc:c0:6e:9b:7e:98:42:34:d9: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3D:EA:79:3E:FC:A4:BE:E0:AF:AA:3F:68:99:E4:F5:C2:79:AE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09c8695b-7372-327c-857b-fadecae21334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:72:dd:49:cb:ef:2d:5f:66:db:dc:14:57:44:1b:6d:87:9a: a8:1c:31:b4:ae:8c:c4:20:b8:e6:18:65:e1:c3:07:a5:60:c4: d5:4f:c8:72:0b:18:62:99:7d:c2:26:6c:ee:1f:d4:e8:2b:f3: ca:07:9f:21:bc:a3:cc:13:70:38:51:76:d4:88:f0:13:10:b0: 17:fb:38:ca:8f:b5:76:6a:79:6f:d0:55:6a:62:46:8b:ab:26: 1d:2f:fe:28:e0:c6:6a:4f:d7:ce:55:73:95:c0:8d:10:66:a0: 1f:9e:fc:49:d5:ff:2d:6a:d1:78:71:37:92:f0:0a:a2:90:f4: 37:16:d8:27:a9:7d:73:1d:82:28:9e:bd:e5:b4:92:81:41:38: a6:7b:3c:f0:01:b8:7d:5f:1a:71:17:d4:6e:90:99:02:aa:6e: a5:a0:64:51:82:ee:70:cc:74:f7:25:f2:50:f3:5a:a8:27:6c: 76:04:c7:f5:5a:37:de:56:a9:39:4d:d1:5c:85:36:4e:a6:3f: 3d:3d:37:50:21:8b:9e:8e:8b:0b:88:71:e3:f1:3a:0d:ce:ba: a3:d1:77:76:10:de:44:a7:1a:d7:84:fd:86:2c:6c:6f:e5:97: ba:c3:f4:c1:97:36:1a:25:67:46:ad:6d:6d:c8:60:70:30:45: 13:a0:31:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/DD10ifi2/N0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzNjNmI5MjAtNGZmMy00YzlhLWFiNTktZTM3M2U3NzVlZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZocd0ArysYKm88KbY6oLAzX/+CVbnkvFd6Q c/VbtzDBUF3PvqrQm0HBMDGYOCqoipUZTKcdTBSZXs6IfXMwhUlLCoxaJuStqNmh jlRuPH3TwiOWk+bb/zUql3Vum97X85fklXH+8YzeFTxLXHAsrHYmVJjiECapJ7eC JosC7wHB6zIdIFfAftpJNaGx8jQ3+3RuaKE6lJcP8Cls+YI89AIHqp0Bkc2hY9ad 94GBlXIlUuE2OPcInLVe+LdA0asuhpLh9Bxs2z570+sXcUb+Dgw4i/yNP03NCDTh cOLQCssO9R/xLn+SGBSUa6u2BDwvPcUFvMm8wG6bfphCNNn60wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAE96nk+/KS+4K+qP2iZ5PXCea6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDljODY5NWItNzM3Mi0z MjdjLTg1N2ItZmFkZWNhZTIxMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjct1Jy+8tX2bb3BRXRBtth5qoHDG0rozEILjmGGXhwwelYMTVT8hy CxhimX3CJmzuH9ToK/PKB58hvKPME3A4UXbUiPATELAX+zjKj7V2anlv0FVqYkaL qyYdL/4o4MZqT9fOVXOVwI0QZqAfnvxJ1f8tatF4cTeS8AqikPQ3FtgnqX1zHYIo nr3ltJKBQTimezzwAbh9XxpxF9RukJkCqm6loGRRgu5wzHT3JfJQ81qoJ2x2BMf1 WjfeVqk5TdFchTZOpj89PTdQIYuejosLiHHj8ToNzrqj0Xd2EN5EpxrXhP2GLGxv 5Ze6w/TBlzYaJWdGrW1tyGBwMEUToDFG -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:17 2026 by rpki-client