$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e860b25-a824-30d3-93c1-2888d96a7751.roa File: 0e860b25-a824-30d3-93c1-2888d96a7751.roa (raw, json) Hash identifier: YaWEeoU/3+PNzwlGupU+xMaigLK6hkLHHd+Y2WDWX6k= Subject key identifier: 32:6D:36:67:A7:53:A7:92:D8:39:28:B6:78:8A:E0:C5:D5:C7:8E:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900020338C313B8B4EDFE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e860b25-a824-30d3-93c1-2888d96a7751.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396574 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:00:20:33:8c:31:3b:8b:4e:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f773d5ea-ef3c-4341-904f-944a46fd6388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c6:70:e7:c6:15:40:4c:3b:d6:61:c6:7e:94: 35:26:c3:68:d5:ee:78:38:d4:a1:17:98:77:4c:90: ee:4b:dc:03:67:8c:78:6e:34:c9:f1:28:b4:c6:8d: f3:9a:6d:37:89:4d:1b:a9:1b:94:79:a7:4d:82:d0: e1:82:98:72:10:88:e4:d7:38:c4:b5:2c:3b:18:41: e2:ed:66:9b:a5:3a:5d:2a:d2:80:c3:97:a1:df:ec: 6d:df:a0:41:12:3e:52:ff:c3:e2:f1:42:a8:c3:5b: 8d:9d:a1:43:47:34:40:e2:05:09:12:df:3b:5b:7b: 17:6a:34:c4:35:cf:bb:88:b2:6d:9a:6a:6f:96:58: d6:eb:b8:f8:d4:69:02:03:cf:ef:4b:36:7b:05:8b: 16:c2:e8:be:41:2e:fb:55:8d:4a:60:dd:9e:87:32: eb:e3:d2:61:07:46:df:ca:0d:37:f4:89:ce:92:0d: 75:9b:c9:4d:4f:1a:05:78:3f:0a:19:26:c4:be:f2: 53:b4:23:a8:e6:51:be:bc:43:f5:6a:73:76:a0:e7: 62:d6:43:a9:6f:c7:a9:0f:7c:ee:38:b9:fd:75:6f: 1a:1c:8e:1d:8d:67:d9:48:d0:55:68:43:f6:30:d6: 85:7e:b1:b3:50:3c:54:bc:d6:ba:25:c7:bd:6d:98: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:36:67:A7:53:A7:92:D8:39:28:B6:78:8A:E0:C5:D5:C7:8E:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e860b25-a824-30d3-93c1-2888d96a7751.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:79:b9:fa:31:59:e1:f3:61:bc:3f:23:e8:f2:cc:32:8e:52: c0:23:b3:2d:15:ef:d4:7e:43:a2:7a:cc:c5:9f:d2:05:a8:03: ff:f0:3e:01:1f:f2:57:57:bd:3a:13:45:e6:56:15:5a:00:4d: d5:4f:51:da:5d:70:08:42:5c:a5:89:12:b0:37:4c:44:55:d5: 30:96:e1:44:55:3d:6c:f3:da:c7:8d:4a:2d:af:3e:a0:b2:64: 50:64:73:f9:80:a9:d3:04:ca:a6:ae:97:41:74:d0:71:88:fa: b5:51:ed:ac:4a:be:6e:4c:66:76:36:38:99:b4:2b:ed:cc:aa: d9:83:bd:43:4e:aa:a7:8b:65:2c:be:bd:e1:f3:1e:9e:ca:38: 30:8e:a4:d4:9b:3e:50:0b:52:60:11:72:99:f1:ff:56:0f:3b: 81:cf:73:b4:f5:9e:b1:17:03:21:17:ef:6b:23:00:b3:eb:5c: 53:94:be:d0:d9:ee:4a:5d:a2:dc:ac:5f:d5:b5:0b:a3:4f:4f: b5:fb:12:94:a7:65:42:38:eb:3c:63:ea:89:63:97:1d:7f:85: 81:27:3a:d7:62:9e:4b:52:87:c0:2b:83:59:12:2e:16:e4:fe: 08:f5:e7:5d:3f:71:76:bb:a7:e7:5f:6e:fe:c7:fb:12:3b:98: 4b:5e:99:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAAgM4wxO4tO3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Zjc3M2Q1ZWEtZWYzYy00MzQxLTkwNGYtOTQ0YTQ2ZmQ2Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisZw58YVQEw71mHGfpQ1JsNo1e54ONShF5h3 TJDuS9wDZ4x4bjTJ8Si0xo3zmm03iU0bqRuUeadNgtDhgphyEIjk1zjEtSw7GEHi 7WabpTpdKtKAw5eh3+xt36BBEj5S/8Pi8UKow1uNnaFDRzRA4gUJEt87W3sXajTE Nc+7iLJtmmpvlljW67j41GkCA8/vSzZ7BYsWwui+QS77VY1KYN2ehzLr49JhB0bf yg039InOkg11m8lNTxoFeD8KGSbEvvJTtCOo5lG+vEP1anN2oOdi1kOpb8epD3zu OLn9dW8aHI4djWfZSNBVaEP2MNaFfrGzUDxUvNa6Jce9bZiNjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDJtNmenU6eS2DkotniK4MXVx47pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGU4NjBiMjUtYTgyNC0z MGQzLTkzYzEtMjg4OGQ5NmE3NzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArebn6MVnh82G8PyPo8swyjlLAI7MtFe/UfkOieszFn9IFqAP/8D4B H/JXV706E0XmVhVaAE3VT1HaXXAIQlyliRKwN0xEVdUwluFEVT1s89rHjUotrz6g smRQZHP5gKnTBMqmrpdBdNBxiPq1Ue2sSr5uTGZ2NjiZtCvtzKrZg71DTqqni2Us vr3h8x6eyjgwjqTUmz5QC1JgEXKZ8f9WDzuBz3O09Z6xFwMhF+9rIwCz61xTlL7Q 2e5KXaLcrF/VtQujT0+1+xKUp2VCOOs8Y+qJY5cdf4WBJzrXYp5LUofAK4NZEi4W 5P4I9eddP3F2u6fnX27+x/sSO5hLXpnl -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:53 2026 by rpki-client