$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa File: 0f0aac1e-83cb-3953-814a-150b44c1756d.roa (raw, json) Hash identifier: FZeeMQzCDszuu8ZFy9Z80mNLz1ZiDXIqlnKZmUoB1PQ= Subject key identifier: C4:C0:A6:42:39:3D:A4:84:03:1E:67:AD:3C:69:41:F2:C9:0E:8E:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902FD166AEC00FEBA26AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397198 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:2f:d1:66:ae:c0:0f:eb:a2:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d69984bb-cd01-4277-a8d6-87fe0b88b863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:ae:1a:9e:c3:35:be:54:40:51:aa:00:c5: 15:6a:7d:c5:5e:56:c2:0a:5b:90:02:28:fa:e5:a6: 1f:6d:4a:12:4b:3c:90:3d:55:fa:f9:e6:03:92:20: 9b:41:8a:66:05:f1:f6:de:71:11:57:39:ff:b4:8a: 85:80:9f:ee:5e:a2:ac:c5:85:9e:c0:75:63:50:be: a0:49:f7:5c:e0:1b:4e:64:8c:15:55:f2:f0:2b:40: 42:53:b2:27:71:a5:cd:da:86:81:3d:1b:dd:b7:fe: 9a:da:aa:90:87:af:a9:ab:ed:4c:2e:88:02:94:0c: 1b:f9:1a:96:4d:56:05:29:91:dd:6f:45:9c:56:2e: 85:da:71:de:1a:a8:6d:4e:46:23:6f:3b:2c:83:6a: 97:2d:12:f7:da:6d:7d:0b:07:29:19:05:73:73:31: 20:28:7c:eb:fb:dc:bf:66:60:32:4d:66:8c:45:a0: 80:5a:54:bc:2a:cb:4b:7c:8e:05:17:6d:05:3c:47: 94:b1:1f:ac:fb:f7:bd:cb:c9:42:78:20:14:a7:25: 40:a2:61:6d:39:17:23:b6:b0:2e:fc:60:48:3a:28: 19:a3:47:b9:c5:87:cc:d9:d0:58:ac:86:83:1d:dc: ea:f8:58:d6:bc:4f:54:ed:b1:87:7d:81:d8:32:8d: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C0:A6:42:39:3D:A4:84:03:1E:67:AD:3C:69:41:F2:C9:0E:8E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5f:b6:aa:13:0d:2f:b7:f9:8a:b9:46:64:19:0e:9f:4b:f7: f6:84:5c:0b:7e:8a:ca:bb:ac:e7:41:9a:d5:d3:5d:cd:2b:ad: 42:9e:f8:8d:4c:16:19:24:f2:9c:69:8f:e0:c3:f8:67:9c:f2: ae:23:4e:5a:b1:63:56:ff:12:9d:08:fb:33:93:94:18:f6:59: 5d:6a:97:a5:4c:61:c6:0d:fe:f6:f4:f9:8a:af:ff:71:af:67: e4:ae:23:4e:72:a4:70:a4:26:3f:81:58:ac:e3:11:d5:8d:fe: 7b:54:51:6b:53:26:43:31:5a:38:62:5a:ea:d5:af:17:d8:18: 64:4b:20:4f:96:42:40:2d:b8:ce:a5:2f:8c:4f:40:73:c3:84: ac:1a:08:37:bb:4d:c5:50:6b:a9:a4:0a:ad:8c:65:14:51:af: a3:ab:9f:90:5f:bd:eb:7e:72:ee:ae:db:ce:85:7b:7f:f0:f1: 09:82:19:d7:60:44:eb:fb:91:d5:34:b9:f9:ec:2f:df:6a:22: 7b:4a:c1:0c:6d:6d:fb:2c:7b:e5:17:ed:28:e1:a2:d7:56:30: ee:4c:2b:28:20:10:cd:a6:ac:db:94:76:20:df:53:b1:a4:ba: 13:16:fc:62:d7:f5:c8:11:dd:91:f8:05:66:ad:62:46:3d:04: f2:ea:a6:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkC/RZq7AD+uiasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY5OTg0YmItY2QwMS00Mjc3LWE4ZDYtODdmZTBiODhiODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqyuGp7DNb5UQFGqAMUVan3FXlbCCluQAij6 5aYfbUoSSzyQPVX6+eYDkiCbQYpmBfH23nERVzn/tIqFgJ/uXqKsxYWewHVjUL6g Sfdc4BtOZIwVVfLwK0BCU7IncaXN2oaBPRvdt/6a2qqQh6+pq+1MLogClAwb+RqW TVYFKZHdb0WcVi6F2nHeGqhtTkYjbzssg2qXLRL32m19CwcpGQVzczEgKHzr+9y/ ZmAyTWaMRaCAWlS8KstLfI4FF20FPEeUsR+s+/e9y8lCeCAUpyVAomFtORcjtrAu /GBIOigZo0e5xYfM2dBYrIaDHdzq+FjWvE9U7bGHfYHYMo2qqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMTApkI5PaSEAx5nrTxpQfLJDo4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwYWFjMWUtODNjYi0z OTUzLTgxNGEtMTUwYjQ0YzE3NTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOX7aqEw0vt/mKuUZkGQ6fS/f2hFwLforKu6znQZrV013NK61CnviN TBYZJPKcaY/gw/hnnPKuI05asWNW/xKdCPszk5QY9lldapelTGHGDf729PmKr/9x r2fkriNOcqRwpCY/gVis4xHVjf57VFFrUyZDMVo4Ylrq1a8X2BhkSyBPlkJALbjO pS+MT0Bzw4SsGgg3u03FUGuppAqtjGUUUa+jq5+QX73rfnLurtvOhXt/8PEJghnX YETr+5HVNLn57C/faiJ7SsEMbW37LHvlF+0o4aLXVjDuTCsoIBDNpqzblHYg31Ox pLoTFvxi1/XIEd2R+AVmrWJGPQTy6qbF -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:35 2026 by rpki-client