$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa File: 28e60d50-57d9-350d-bd89-c1257d4d7364.roa (raw, json) Hash identifier: 5lxjNSvJuvVLflGrSiijiRBgfZhdk58bT9b5Nh4EM2g= Subject key identifier: E5:B3:56:FD:C2:FA:BA:3B:86:F3:24:E5:52:60:85:41:FA:B1:0F:81 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79036194D12D893BCA13F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396582 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:36:19:4d:12:d8:93:bc:a1:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=45973f2d-b030-42d2-b715-a21b8ef4cc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:71:40:0e:78:f6:dc:b2:9a:d2:ef:0e:d3: 44:cf:bd:8f:11:09:96:10:e7:a9:70:38:58:e4:ae: a3:89:dd:5a:b4:c8:ea:d1:80:e8:5e:03:66:7e:44: 78:1e:9f:b2:b8:65:42:92:a0:c7:9b:0d:92:47:81: f4:b6:90:7e:70:02:a4:79:3c:f2:76:1c:3b:63:5a: ee:85:a2:22:c7:87:c4:e5:f2:c5:82:59:54:c7:8c: fa:04:cc:bf:f4:6d:15:e5:97:62:8a:a2:e7:9d:91: b7:04:3f:85:b7:8c:e8:cf:6d:5c:28:94:65:8c:26: 24:d0:e7:56:66:b7:b7:c5:b2:69:06:2f:64:68:e2: 6b:f1:d5:9b:80:91:47:a6:ed:09:ef:b8:64:3c:90: 9e:5e:49:ae:a3:9d:08:68:a6:23:c0:e1:53:e9:71: be:3e:b3:6c:e0:08:88:a0:86:30:9d:46:48:3f:d7: ab:4b:65:0c:ce:75:24:3b:1a:d3:35:a2:b0:bf:25: c9:c7:dd:75:52:12:ad:50:68:f7:56:a8:dd:22:ab: 4b:b1:9e:6b:a3:87:96:fd:ac:0c:82:5a:28:20:9b: 84:94:05:88:dd:b9:7c:93:32:42:c3:fd:3d:6c:34: 22:79:70:f2:8f:07:f0:44:3b:23:20:d7:51:53:ce: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:56:FD:C2:FA:BA:3B:86:F3:24:E5:52:60:85:41:FA:B1:0F:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e60d50-57d9-350d-bd89-c1257d4d7364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e7:02:83:9d:8f:8c:a2:82:11:2d:a6:4b:a7:06:cf:40:67: 88:55:d3:2c:07:79:34:93:fc:d0:c7:65:19:44:93:d4:33:ab: bc:8d:50:f5:53:d3:3f:f8:07:79:34:79:ab:db:91:69:bb:2b: 0a:0c:af:57:ec:2c:ef:7d:fb:90:60:7b:ad:83:04:f7:42:f0: 78:de:c4:5d:c0:73:d2:92:e3:0d:dc:5f:6b:10:83:2e:aa:56: 1b:8e:bf:03:e1:21:41:30:fe:96:29:d7:a6:36:6c:30:45:f7: e0:6a:e4:3a:a8:48:3c:0a:8c:0b:1c:8c:3e:f1:a3:75:0f:86: 83:d4:fc:f2:47:8e:54:de:17:58:d2:db:d2:c6:17:ef:93:da: 17:72:20:8e:a5:ba:fb:a8:ab:a4:51:96:f0:43:7e:93:bb:6d: 86:61:73:fc:4d:89:91:f8:11:06:e7:ae:e7:b6:34:55:17:c7: c3:35:41:a7:d2:c2:84:65:b1:1c:b5:99:4e:3b:ad:eb:6e:49: 47:5b:75:f8:a6:be:41:ac:54:91:5a:5d:13:f6:b2:dd:11:78: 3c:88:f2:6d:09:ad:fe:3e:5d:fd:b8:4a:4a:cc:e9:be:a7:0a: d1:f5:bc:58:28:36:f1:95:24:1b:09:63:aa:32:9f:c5:29:95: 65:d7:fa:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkDYZTRLYk7yhP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU5NzNmMmQtYjAzMC00MmQyLWI3MTUtYTIxYjhlZjRjYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0NxQA549tyymtLvDtNEz72PEQmWEOepcDhY 5K6jid1atMjq0YDoXgNmfkR4Hp+yuGVCkqDHmw2SR4H0tpB+cAKkeTzydhw7Y1ru haIix4fE5fLFgllUx4z6BMy/9G0V5ZdiiqLnnZG3BD+Ft4zoz21cKJRljCYk0OdW Zre3xbJpBi9kaOJr8dWbgJFHpu0J77hkPJCeXkmuo50IaKYjwOFT6XG+PrNs4AiI oIYwnUZIP9erS2UMznUkOxrTNaKwvyXJx911UhKtUGj3VqjdIqtLsZ5ro4eW/awM glooIJuElAWI3bl8kzJCw/09bDQieXDyjwfwRDsjINdRU87FyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOWzVv3C+ro7hvMk5VJghUH6sQ+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNjBkNTAtNTdkOS0z NTBkLWJkODktYzEyNTdkNGQ3MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAl5wKDnY+MooIRLaZLpwbPQGeIVdMsB3k0k/zQx2UZRJPUM6u8jVD1 U9M/+Ad5NHmr25FpuysKDK9X7CzvffuQYHutgwT3QvB43sRdwHPSkuMN3F9rEIMu qlYbjr8D4SFBMP6WKdemNmwwRffgauQ6qEg8CowLHIw+8aN1D4aD1PzyR45U3hdY 0tvSxhfvk9oXciCOpbr7qKukUZbwQ36Tu22GYXP8TYmR+BEG567ntjRVF8fDNUGn 0sKEZbEctZlOO63rbklHW3X4pr5BrFSRWl0T9rLdEXg8iPJtCa3+Pl39uEpKzOm+ pwrR9bxYKDbxlSQbCWOqMp/FKZVl1/pf -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:06 2026 by rpki-client