$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa File: 1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa (raw, json) Hash identifier: OlAI3+xBlDrowcoRDlrcuzGLigEIFf5DcDmCB/UeNfw= Subject key identifier: D7:8D:E6:3B:B3:E1:1B:A7:3F:9D:95:D8:02:A3:0F:E0:14:F9:B4:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790026449C419E4B3860580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396605 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:02:64:49:c4:19:e4:b3:86:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bee6cca3-80a0-4e3c-a347-430ba8c0d9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:15:8a:d6:1d:48:9d:af:8d:32:29:9e:4d:79: 09:a8:7a:06:fd:25:2f:e2:c4:30:70:3a:c9:be:03: 19:e9:6a:2b:3c:9f:3f:1b:a6:a0:33:bf:d8:9e:1e: c6:e2:5c:77:cc:d7:e3:15:77:39:9c:1e:60:0f:24: c9:73:6e:a1:9a:60:02:6a:97:75:52:0c:c1:b7:9b: 76:aa:23:20:f8:3d:6d:69:32:a0:60:34:02:64:50: 29:a6:2d:4e:b4:3a:c5:fb:c3:db:ab:46:3f:fc:13: 03:7c:6e:72:f9:df:99:4b:73:35:8f:5c:a8:0c:ec: e5:0a:7b:a1:94:d5:5c:0c:7c:0d:da:ee:08:b7:b2: bd:14:85:38:5c:bb:f4:00:e4:cc:22:48:89:47:7f: d5:6c:c8:c2:bf:b4:ba:a9:b7:48:c6:15:59:56:9e: 3f:a3:43:43:97:eb:6e:18:33:da:47:cd:e8:59:d7: 02:1e:91:0e:0f:39:27:34:3a:cf:e3:86:e7:c1:cb: 8a:41:11:6c:1c:f7:30:37:f3:f3:4d:9e:98:e3:66: cf:d6:02:bd:92:3d:5e:fe:9d:4c:47:42:b4:87:a9: dc:46:bb:da:a5:fe:ab:71:9e:96:14:1a:8d:27:5c: de:b1:24:19:18:ea:ab:79:10:02:51:51:6f:21:c2: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8D:E6:3B:B3:E1:1B:A7:3F:9D:95:D8:02:A3:0F:E0:14:F9:B4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1cb29fa5-9a0e-3cfa-b152-05d5cdf7e956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7a:a0:b2:65:61:a6:49:18:d1:15:96:bd:4b:52:21:3e:7a: e6:5b:9c:a4:28:1c:dc:fa:b9:94:08:b2:57:fa:55:9b:4b:42: a6:61:ed:f7:10:7b:bb:48:6a:c6:5c:69:18:c5:6a:20:ba:74: b9:66:91:5a:c2:57:62:b1:6c:89:f8:f4:03:da:d9:5e:7d:76: 16:c9:3c:17:00:ce:ba:3f:83:45:ca:f6:71:15:0b:fa:a5:15: e8:59:8d:8b:80:fb:de:70:c6:07:ef:30:51:cb:45:f3:26:88: f4:c9:43:81:a4:13:2d:87:1c:30:fb:0b:29:ab:08:8a:40:63: 7f:8f:b8:1a:93:ed:e5:0e:fb:7d:08:0f:cd:46:9d:94:65:6a: 85:df:7f:2a:11:3a:3e:8f:8b:1c:e8:e5:6b:a2:6c:a0:49:19: 4a:bf:37:50:a6:ae:7d:ad:86:ad:ba:97:2b:35:30:cf:9e:91: 37:11:a6:36:61:9b:77:18:31:53:88:c6:91:8f:86:51:b6:c1: ba:61:cb:e3:cd:7d:99:17:35:36:a6:36:09:3a:c2:43:0b:ab: fd:7a:ec:dd:1b:20:f2:91:4f:52:e6:f5:6d:82:24:ca:7f:c9: 8a:9f:f7:47:bb:ca:56:60:8b:95:f8:7d:e8:98:83:a1:8e:42: a2:49:59:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAJkScQZ5LOGBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmVlNmNjYTMtODBhMC00ZTNjLWEzNDctNDMwYmE4YzBkOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRWK1h1Ina+NMimeTXkJqHoG/SUv4sQwcDrJ vgMZ6WorPJ8/G6agM7/Ynh7G4lx3zNfjFXc5nB5gDyTJc26hmmACapd1UgzBt5t2 qiMg+D1taTKgYDQCZFAppi1OtDrF+8Pbq0Y//BMDfG5y+d+ZS3M1j1yoDOzlCnuh lNVcDHwN2u4It7K9FIU4XLv0AOTMIkiJR3/VbMjCv7S6qbdIxhVZVp4/o0NDl+tu GDPaR83oWdcCHpEODzknNDrP44bnwcuKQRFsHPcwN/PzTZ6Y42bP1gK9kj1e/p1M R0K0h6ncRrvapf6rcZ6WFBqNJ1zesSQZGOqreRACUVFvIcLUlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNeN5juz4RunP52V2AKjD+AU+bTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNiMjlmYTUtOWEwZS0z Y2ZhLWIxNTItMDVkNWNkZjdlOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBweqCyZWGmSRjRFZa9S1IhPnrmW5ykKBzc+rmUCLJX+lWbS0KmYe33 EHu7SGrGXGkYxWogunS5ZpFawldisWyJ+PQD2tlefXYWyTwXAM66P4NFyvZxFQv6 pRXoWY2LgPvecMYH7zBRy0XzJoj0yUOBpBMthxww+wspqwiKQGN/j7gak+3lDvt9 CA/NRp2UZWqF338qETo+j4sc6OVromygSRlKvzdQpq59rYatupcrNTDPnpE3EaY2 YZt3GDFTiMaRj4ZRtsG6YcvjzX2ZFzU2pjYJOsJDC6v9euzdGyDykU9S5vVtgiTK f8mKn/dHu8pWYIuV+H3omIOhjkKiSVk4 -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:38 2026 by rpki-client