$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa File: 0aaa9039-dcca-3276-9c89-56abd2b01248.roa (raw, json) Hash identifier: 3FMxfJBuwmFoUY2J4b0S/AI70RbLusVNStSsR8nLNtQ= Subject key identifier: 18:CB:66:8B:8E:F5:FC:CA:A4:13:AD:60:36:C5:BB:4B:A7:03:68:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA798061F1605FF2D5D1AFF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27544 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:06:1f:16:05:ff:2d:5d:1a:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=882d3ace-fd2b-4b7c-acf6-400aa5e55141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:35:94:31:d7:fd:8c:8c:1d:b0:9f:5c:e5: 06:ba:7a:6c:92:d6:41:e2:e1:d2:50:1b:31:4d:31: 92:aa:4d:d9:9d:a1:01:f2:00:d6:98:d6:c5:37:d0: e6:c5:9f:1c:36:26:74:ed:d2:c1:fc:fc:89:e4:17: d3:9d:91:d4:f0:57:9c:23:8e:04:af:21:b5:54:69: a6:d3:83:08:1c:a9:dd:0a:37:8b:d1:78:c0:9f:c4: 49:7f:12:46:9d:2e:75:ca:e6:90:ac:f7:c2:0e:ad: 6e:8b:88:6d:f0:ee:ee:90:5e:97:e4:96:08:d1:9f: 76:18:fd:d2:91:b5:14:a5:45:07:eb:b7:dc:eb:16: 46:c7:99:9a:62:c0:31:c8:24:65:4a:32:0e:a8:56: 84:9e:53:a7:b2:a7:e7:16:6b:f6:fa:51:39:d8:26: 83:fd:c5:00:2d:12:1a:59:a1:64:af:74:d9:a4:2d: 38:bd:cf:57:88:57:45:a2:c8:51:1a:7b:47:07:38: 7b:6b:8b:09:80:b4:f0:4f:cd:f8:e2:98:26:fb:25: e3:fb:fd:90:13:20:9b:30:94:28:8d:1f:2e:90:86: 62:c0:16:b1:bb:36:54:b8:69:f2:f5:cf:6d:de:0b: ff:5b:1f:be:3f:a3:11:86:36:d8:fb:7d:c7:6e:69: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CB:66:8B:8E:F5:FC:CA:A4:13:AD:60:36:C5:BB:4B:A7:03:68:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a4:cc:1e:bd:29:14:f5:90:a0:73:53:8e:9d:1c:2a:56:4d: a9:53:55:f0:9f:87:8f:03:32:25:5d:bc:d3:12:ad:4d:54:46: cd:9d:6d:c9:4d:1b:74:e1:aa:3a:92:38:e9:51:81:06:c5:9d: d8:e3:44:27:e1:29:50:5b:7a:4f:27:6b:11:71:af:3a:6f:12: df:a3:ad:4d:2b:5e:bd:1c:9a:ca:c9:09:b4:b1:dc:74:85:f5: 62:1a:a5:ef:c3:08:cc:eb:21:17:13:be:c8:2c:57:58:92:15: cd:d3:96:4d:4d:86:f2:a2:f7:6e:b2:93:b4:14:48:aa:ab:69: 49:f8:3d:b5:a7:c4:15:69:b5:e3:e2:ef:2c:03:2a:bc:e2:25: cd:ce:20:62:23:0a:de:34:5b:5d:df:f9:16:b3:8f:1d:6f:71: 03:4c:25:df:70:70:7d:a7:95:70:ee:50:ae:f6:6d:6e:a9:f3: 8e:0a:70:25:ec:d3:cb:a2:08:ef:e6:10:1e:b6:20:e6:16:4c: d7:e5:b6:62:4e:7b:6f:2f:05:42:bf:d3:90:6a:15:86:37:03: 30:8e:65:d5:a0:89:e3:89:8c:80:1b:26:e4:26:55:ae:ee:b1: 29:9f:f2:a0:b6:d6:40:ad:e1:72:58:19:73:e4:3b:2b:9a:c7: 0a:71:b1:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAYfFgX/LV0a/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODgyZDNhY2UtZmQyYi00YjdjLWFjZjYtNDAwYWE1ZTU1MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoE1lDHX/YyMHbCfXOUGunpsktZB4uHSUBsx TTGSqk3ZnaEB8gDWmNbFN9DmxZ8cNiZ07dLB/PyJ5BfTnZHU8FecI44EryG1VGmm 04MIHKndCjeL0XjAn8RJfxJGnS51yuaQrPfCDq1ui4ht8O7ukF6X5JYI0Z92GP3S kbUUpUUH67fc6xZGx5maYsAxyCRlSjIOqFaEnlOnsqfnFmv2+lE52CaD/cUALRIa WaFkr3TZpC04vc9XiFdFoshRGntHBzh7a4sJgLTwT8344pgm+yXj+/2QEyCbMJQo jR8ukIZiwBaxuzZUuGny9c9t3gv/Wx++P6MRhjbY+33HbmmWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjLZouO9fzKpBOtYDbFu0unA2giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFhYTkwMzktZGNjYS0z Mjc2LTljODktNTZhYmQyYjAxMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSkzB69KRT1kKBzU46dHCpWTalTVfCfh48DMiVdvNMSrU1URs2dbclN G3ThqjqSOOlRgQbFndjjRCfhKVBbek8naxFxrzpvEt+jrU0rXr0cmsrJCbSx3HSF 9WIape/DCMzrIRcTvsgsV1iSFc3Tlk1NhvKi926yk7QUSKqraUn4PbWnxBVptePi 7ywDKrziJc3OIGIjCt40W13f+Razjx1vcQNMJd9wcH2nlXDuUK72bW6p844KcCXs 08uiCO/mEB62IOYWTNfltmJOe28vBUK/05BqFYY3AzCOZdWgieOJjIAbJuQmVa7u sSmf8qC21kCt4XJYGXPkOyuaxwpxsU0= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:26 2026 by rpki-client