$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: 7Nh7c8J6UeQBuk1/yc0vlFdmZspqslpVgyxKDWxPN8w= Subject key identifier: B6:B6:F6:48:93:ED:CD:11:3F:F0:48:91:85:AF:A1:99:1D:33:07:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7986B55EC6EE1C0C79A1600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:6b:55:ec:6e:e1:c0:c7:9a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=01d09c02-0a89-43ec-9834-fc4be4b30af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:0e:d2:54:da:45:78:91:51:a3:e7:2c:8d: 11:34:91:98:b7:83:e3:04:6e:2f:00:79:66:b6:99: 0e:99:47:64:22:07:79:8e:a7:ae:a7:05:da:37:a9: 78:37:8c:77:17:fb:a1:36:f3:b5:42:58:d2:b5:17: 01:20:4e:2b:0f:4d:ab:a8:a1:32:46:68:66:fe:a0: 30:71:df:da:9d:4f:f8:10:03:2a:44:62:29:93:61: fc:7b:d5:13:87:b9:85:ff:4c:49:db:44:57:1f:28: 2f:6d:9d:fb:52:1f:d5:f1:1e:0a:d2:db:b5:5e:45: d2:75:15:31:62:0b:0f:7e:9d:c8:7b:6b:82:c9:6b: d7:ce:50:07:b0:58:f9:03:d5:ab:13:db:4e:f9:df: 06:33:7d:aa:6d:39:84:d9:b0:e3:36:21:aa:cd:e4: c5:96:26:d7:75:a1:00:31:7f:5e:57:68:b6:34:12: cc:e7:f0:bc:2e:75:b8:37:b7:17:8c:86:cd:e3:ad: 76:f2:79:0f:e0:40:48:c7:61:7d:96:17:88:56:9e: 8b:79:07:ef:3f:1e:69:34:dc:e1:3d:ff:3e:fb:69: 85:2b:e6:bc:ee:43:f0:4b:b4:e7:7a:1d:50:d5:d5: d3:bf:af:b3:f6:bb:5f:f7:5f:64:cb:55:f7:85:74: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:F6:48:93:ED:CD:11:3F:F0:48:91:85:AF:A1:99:1D:33:07:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:12:23:57:d3:7d:fa:38:57:ad:69:87:15:4b:85:52:4e:a3: 04:f1:6b:06:51:57:ff:b0:b7:e7:e6:79:85:b6:34:bd:fb:8a: 38:e7:12:16:e3:ae:04:85:be:82:e3:73:80:58:97:d4:54:b8: f4:fd:8f:f5:6c:ea:98:f7:c8:e5:28:9e:aa:d6:d9:fb:6e:05: 21:43:56:c4:e7:05:28:7e:24:9a:c8:a4:64:f9:a6:ca:96:4e: fa:3e:2b:8b:31:01:49:1b:9e:0f:b0:d9:ae:30:24:55:40:af: 85:6f:f9:6e:a1:bc:2a:aa:40:0e:80:ae:53:6c:87:62:f1:70: ed:36:da:08:8a:03:19:8d:c5:2d:9c:bb:74:23:b4:60:1d:33: 8e:29:51:6c:36:5b:99:9d:ee:27:5a:e0:8f:e6:df:fd:cf:7c: 0e:9f:b8:f4:47:2a:2b:ce:04:00:96:18:f6:84:f6:48:9e:f3: 3a:91:f3:d4:f2:8b:34:57:45:5b:df:24:ba:85:f6:24:8c:3c: d7:42:84:74:0c:a3:d2:b6:94:57:41:21:04:38:ec:78:71:85: f1:f6:db:57:12:2c:7f:68:7e:b9:ab:4f:b2:d9:70:3c:ff:17: 7f:ff:d1:08:cd:1c:c3:bf:09:f5:49:97:02:06:da:ad:ec:83: 62:2f:ae:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGtV7G7hwMeaFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDFkMDljMDItMGE4OS00M2VjLTk4MzQtZmM0YmU0YjMwYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGoO0lTaRXiRUaPnLI0RNJGYt4PjBG4vAHlm tpkOmUdkIgd5jqeupwXaN6l4N4x3F/uhNvO1QljStRcBIE4rD02rqKEyRmhm/qAw cd/anU/4EAMqRGIpk2H8e9UTh7mF/0xJ20RXHygvbZ37Uh/V8R4K0tu1XkXSdRUx YgsPfp3Ie2uCyWvXzlAHsFj5A9WrE9tO+d8GM32qbTmE2bDjNiGqzeTFlibXdaEA MX9eV2i2NBLM5/C8LnW4N7cXjIbN46128nkP4EBIx2F9lheIVp6LeQfvPx5pNNzh Pf8++2mFK+a87kPwS7Tneh1Q1dXTv6+z9rtf919ky1X3hXTMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa29kiT7c0RP/BIkYWvoZkdMwc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGISI1fTffo4V61phxVLhVJOowTxawZRV/+wt+fmeYW2NL37ijjnEhbj rgSFvoLjc4BYl9RUuPT9j/Vs6pj3yOUonqrW2ftuBSFDVsTnBSh+JJrIpGT5psqW Tvo+K4sxAUkbng+w2a4wJFVAr4Vv+W6hvCqqQA6ArlNsh2LxcO022giKAxmNxS2c u3QjtGAdM44pUWw2W5md7ida4I/m3/3PfA6fuPRHKivOBACWGPaE9kie8zqR89Ty izRXRVvfJLqF9iSMPNdChHQMo9K2lFdBIQQ47HhxhfH221cSLH9ofrmrT7LZcDz/ F3//0QjNHMO/CfVJlwIG2q3sg2IvrlQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:39 2026 by rpki-client