$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa File: 1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa (raw, json) Hash identifier: J4E9pLL1Z53eM2OX+8tZOkHsTdCxFsZpoi6gtPh9qjI= Subject key identifier: E9:6F:54:84:36:59:86:FD:09:BE:60:5A:A3:FD:06:14:4A:C4:FE:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79028807A9BFF9224EBE100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36624 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:28:80:7a:9b:ff:92:24:eb:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=86dcc4d9-28c0-4a7b-a6f0-4096b0e0cba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:5b:10:7d:7c:9c:d1:b0:59:3d:7e:68:b5: cd:80:2e:e6:af:42:0c:0a:b2:61:12:75:93:7f:7b: a7:fd:73:d9:49:5c:87:45:3e:bd:cc:de:23:6c:4a: 43:fe:43:be:11:31:99:3d:2a:b7:62:a8:b2:3f:96: c2:ef:13:a4:f5:1c:b5:1a:8c:3b:29:52:c5:66:8a: 4b:21:74:94:62:a1:c2:cb:fd:98:ac:69:50:3b:0f: 6e:cc:31:18:79:cb:a2:01:64:f4:97:5a:d9:ea:7b: e7:f1:d6:01:bc:e7:ce:fd:da:75:5b:ff:9d:57:c6: 4a:3e:03:b9:73:fb:94:4d:ec:91:fc:5b:7e:1d:24: 0b:ba:2d:5d:9f:7e:72:a9:58:97:7c:81:76:70:8a: f6:1a:95:31:57:47:ff:32:2b:f5:7f:6e:a2:8f:ef: dd:e0:84:dd:a7:00:38:82:e9:cb:3e:8a:b1:35:8d: c3:19:f0:96:c5:a3:93:7c:5c:b2:89:44:cf:23:df: 5a:40:d3:8d:58:54:1b:11:81:3d:a2:87:3b:c8:6e: 74:ba:1b:67:31:9a:88:22:7d:fb:12:5b:12:3b:cd: 0d:9c:ec:23:13:f5:ba:f0:2e:53:20:a2:c6:4b:ac: d7:4d:68:3a:1d:86:42:b7:16:ea:ea:ce:2b:63:4b: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:54:84:36:59:86:FD:09:BE:60:5A:A3:FD:06:14:4A:C4:FE:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a8145bd-4e33-3bfc-a167-9d1b6ac18e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:07:a7:4e:5d:3d:06:ff:95:7f:4f:bc:48:ca:dd:ed:1f:bf: 5b:6e:44:a4:ff:dd:2d:2b:b2:17:d9:68:1a:45:11:1c:a8:49: 0d:28:9e:75:2f:14:9b:d4:d7:a8:8e:8d:17:5d:ec:7e:ce:85: f8:be:ce:eb:4f:cf:2a:1d:d4:55:a0:a4:79:83:35:86:c0:07: 5b:be:11:f0:80:8a:03:08:46:15:3a:fd:ef:1b:1d:69:85:5d: bc:ac:f2:8d:fe:e0:34:eb:ad:33:fa:b3:b3:df:37:68:bc:0e: 18:e4:42:ee:fc:fb:36:73:08:bf:7c:9d:38:17:61:be:10:85: 00:cd:99:38:0c:b5:71:12:5a:47:c7:86:6b:9b:b7:4d:ec:8c: 30:8f:f2:21:4d:ea:11:7d:e7:f0:67:28:36:d5:9d:11:44:b6: c1:06:9b:91:03:a7:5d:7e:86:1c:c1:c5:02:70:f0:55:f7:de: 7e:57:b5:32:c2:4f:38:9f:78:d8:63:a3:85:f1:98:f9:e7:93: 77:15:77:71:6b:b3:14:e5:5a:86:1d:9a:12:3b:dd:67:51:e6: 3d:59:3b:86:06:54:56:a7:14:2d:65:d8:d8:b5:47:ae:98:b4: 7e:07:02:7d:8a:b7:ae:c4:5c:57:38:d9:79:e9:e6:a4:08:04: aa:f3:43:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCiAepv/kiTr4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODZkY2M0ZDktMjhjMC00YTdiLWE2ZjAtNDA5NmIwZTBjYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlbEH18nNGwWT1+aLXNgC7mr0IMCrJhEnWT f3un/XPZSVyHRT69zN4jbEpD/kO+ETGZPSq3YqiyP5bC7xOk9Ry1Gow7KVLFZopL IXSUYqHCy/2YrGlQOw9uzDEYecuiAWT0l1rZ6nvn8dYBvOfO/dp1W/+dV8ZKPgO5 c/uUTeyR/Ft+HSQLui1dn35yqViXfIF2cIr2GpUxV0f/Miv1f26ij+/d4ITdpwA4 gunLPoqxNY3DGfCWxaOTfFyyiUTPI99aQNONWFQbEYE9ooc7yG50uhtnMZqIIn37 ElsSO80NnOwjE/W68C5TIKLGS6zXTWg6HYZCtxbq6s4rY0uUuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOlvVIQ2WYb9Cb5gWqP9BhRKxP6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE4MTQ1YmQtNGUzMy0z YmZjLWExNjctOWQxYjZhYzE4ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1B6dOXT0G/5V/T7xIyt3tH79bbkSk/90tK7IX2WgaRREcqEkNKJ51 LxSb1Neojo0XXex+zoX4vs7rT88qHdRVoKR5gzWGwAdbvhHwgIoDCEYVOv3vGx1p hV28rPKN/uA0660z+rOz3zdovA4Y5ELu/Ps2cwi/fJ04F2G+EIUAzZk4DLVxElpH x4Zrm7dN7Iwwj/IhTeoRfefwZyg21Z0RRLbBBpuRA6ddfoYcwcUCcPBV995+V7Uy wk84n3jYY6OF8Zj555N3FXdxa7MU5VqGHZoSO91nUeY9WTuGBlRWpxQtZdjYtUeu mLR+BwJ9ireuxFxXONl56eakCASq80N1 -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:42 2026 by rpki-client