$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa File: 3096e349-4454-38f3-b7ed-c55015678503.roa (raw, json) Hash identifier: dpB9lpWFiqBsPyTHMV0fCIKCjD8oqjns2ANTO5Gqk4k= Subject key identifier: 34:A1:3E:A1:4F:3A:41:4E:6A:02:DD:26:E3:45:41:23:C8:F8:51:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797EE8B599D5CBF6DDEBE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36616 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:ee:8b:59:9d:5c:bf:6d:de:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=24be9467-b313-4d48-a2c5-1df31b80c4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:3d:c9:f8:95:65:2f:dd:c7:4c:9a:35:db: 47:ad:38:c8:24:a9:47:e1:6a:35:33:cb:e0:ac:42: d2:70:b8:18:10:2c:75:f5:1b:ea:b7:be:b2:e1:ad: 3e:8f:dd:12:45:3f:e4:1c:dd:fb:c5:41:50:95:3c: 3f:5b:11:88:db:8d:31:1d:d9:af:f9:30:3b:12:04: 1a:ac:30:3e:04:06:ea:37:32:56:c7:51:c1:84:95: 48:f7:cd:c8:7a:b1:24:80:ae:e2:2c:90:61:44:72: e5:57:19:70:49:d6:4a:6e:66:4f:a3:11:4c:99:38: 1c:2d:f1:26:45:d6:5a:58:98:97:f2:dd:2a:04:d7: b6:e9:99:c0:9a:31:e6:91:84:b0:c9:03:e5:64:56: f5:98:37:c7:84:34:8f:9f:58:c0:10:5f:f9:d4:be: 0c:f0:32:18:cd:d8:33:41:85:46:00:cc:fb:a5:55: be:9c:24:ed:b5:50:bf:bb:69:5e:51:37:22:03:35: c2:19:97:7f:0e:aa:79:5c:bd:b2:c8:87:c0:7b:6e: 1d:c4:1c:f9:a2:6c:ac:c9:51:43:80:50:70:d8:13: 16:ba:dd:5b:91:5b:e3:dc:3f:71:0b:28:ae:55:39: 88:a8:a9:34:0a:25:b0:ec:ad:5a:1e:ce:7b:85:b9: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A1:3E:A1:4F:3A:41:4E:6A:02:DD:26:E3:45:41:23:C8:F8:51:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3096e349-4454-38f3-b7ed-c55015678503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a0:ff:fe:f2:be:88:35:13:bf:d7:09:22:24:9e:0c:31:33: 4c:86:20:40:d7:9f:c2:97:fc:70:38:bc:39:a0:c4:98:40:fa: ca:e5:74:f7:57:78:d8:d7:de:08:ab:1e:6d:f2:f0:e6:ab:dc: 22:02:b7:bb:d6:52:d1:66:6d:42:b4:03:21:e4:62:c5:b9:39: 40:67:8e:52:32:c6:30:57:41:5d:43:58:dc:df:b2:dd:f6:b1: 5a:08:31:43:30:c2:7b:0e:f2:6c:5b:1e:38:e9:17:7a:3d:a1: d5:53:31:59:b6:b8:21:57:f9:19:27:95:fd:88:72:26:f2:2e: b1:ae:cd:b4:5b:50:e4:bd:66:65:b4:43:5c:de:4d:b3:91:f5: a0:62:31:5f:90:c7:bd:0d:4d:1c:16:20:e3:3a:01:6b:58:16: 65:1f:55:72:c5:7c:e2:9c:01:05:0f:d6:7c:43:b1:52:96:4c: 55:82:7a:72:bf:ae:8d:6f:83:0f:68:69:84:53:af:d2:00:98: 94:e7:5f:5a:24:ad:ea:0a:2b:6b:e8:bf:25:91:1f:7b:2a:07: b1:9f:96:6e:f3:9e:cf:92:5d:42:b8:1e:49:0a:5d:f5:4d:72: 3d:33:2f:5f:50:3d:27:ea:ab:93:e8:3b:91:9b:7c:48:c2:29: 54:57:0e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+6LWZ1cv23evoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjRiZTk0NjctYjMxMy00ZDQ4LWEyYzUtMWRmMzFiODBjNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn409yfiVZS/dx0yaNdtHrTjIJKlH4Wo1M8vg rELScLgYECx19Rvqt76y4a0+j90SRT/kHN37xUFQlTw/WxGI240xHdmv+TA7EgQa rDA+BAbqNzJWx1HBhJVI983IerEkgK7iLJBhRHLlVxlwSdZKbmZPoxFMmTgcLfEm RdZaWJiX8t0qBNe26ZnAmjHmkYSwyQPlZFb1mDfHhDSPn1jAEF/51L4M8DIYzdgz QYVGAMz7pVW+nCTttVC/u2leUTciAzXCGZd/Dqp5XL2yyIfAe24dxBz5omysyVFD gFBw2BMWut1bkVvj3D9xCyiuVTmIqKk0CiWw7K1aHs57hbnB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDShPqFPOkFOagLdJuNFQSPI+FH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzA5NmUzNDktNDQ1NC0z OGYzLWI3ZWQtYzU1MDE1Njc4NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWg//7yvog1E7/XCSIkngwxM0yGIEDXn8KX/HA4vDmgxJhA+srldPdX eNjX3girHm3y8Oar3CICt7vWUtFmbUK0AyHkYsW5OUBnjlIyxjBXQV1DWNzfst32 sVoIMUMwwnsO8mxbHjjpF3o9odVTMVm2uCFX+Rknlf2IcibyLrGuzbRbUOS9ZmW0 Q1zeTbOR9aBiMV+Qx70NTRwWIOM6AWtYFmUfVXLFfOKcAQUP1nxDsVKWTFWCenK/ ro1vgw9oaYRTr9IAmJTnX1okreoKK2vovyWRH3sqB7Gflm7zns+SXUK4HkkKXfVN cj0zL19QPSfqq5PoO5GbfEjCKVRXDpM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:24 2026 by rpki-client