$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa File: 321b1d50-0cd2-33bb-b9f8-5d9196825799.roa (raw, json) Hash identifier: RwLZZvhybaQyfyrMLRuDE874U4WimGmQ1Amrzs2DRGA= Subject key identifier: 4A:5B:D3:EF:F9:DB:A2:F3:81:89:9F:F7:87:02:C3:E7:A7:5D:8F:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FEF3CFC9551746A509B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396545 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:ef:3c:fc:95:51:74:6a:50:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9765e7e0-6836-4176-bd7e-fba73930a66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:eb:3d:d0:fb:81:75:97:a1:98:87:2e:5d: ff:fa:8e:3d:c3:aa:ce:00:b2:77:fa:62:62:18:ca: 0e:fc:7f:10:79:c0:55:ef:58:bf:d9:ef:11:69:4f: 00:6f:ea:c8:13:30:8a:35:84:48:56:91:57:72:b9: 94:d4:4e:fa:79:1f:ff:27:0d:b3:2d:3c:b3:c8:75: 5d:40:1a:d3:6a:ff:eb:56:ee:db:7c:b4:a5:2b:73: cc:a2:3e:a8:08:33:2e:13:93:ec:4c:e5:96:ff:fd: 1c:73:96:39:27:71:1a:29:00:22:61:2c:ee:30:0a: ae:0d:07:58:5d:b8:f9:29:14:09:0a:4a:36:2f:00: 84:cd:6d:e7:18:09:0c:55:af:e5:6a:bd:09:01:41: e4:b1:1a:f0:46:54:00:f2:34:6a:59:05:66:ee:79: 00:ab:17:c6:3b:0f:49:24:67:83:71:f5:b0:07:ab: 5f:f4:3f:39:74:da:50:d6:86:ee:27:86:bb:17:db: c5:92:22:de:8d:7e:2f:2d:14:02:df:fb:0f:a4:74: fb:c7:3f:bb:30:42:b8:b4:ca:9f:fb:50:68:85:41: f8:e4:39:7e:09:e4:06:8f:0d:79:f0:47:94:2b:59: d9:c4:7b:83:22:30:ce:dc:6d:09:5d:04:9c:6b:86: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5B:D3:EF:F9:DB:A2:F3:81:89:9F:F7:87:02:C3:E7:A7:5D:8F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/321b1d50-0cd2-33bb-b9f8-5d9196825799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fe:47:e2:0d:ce:35:40:35:ca:a5:0d:b7:49:fe:32:52:a4: af:94:0a:8f:3d:e3:5f:16:7a:e1:52:14:e1:9c:32:a8:59:07: 99:68:94:a9:bd:fc:cf:73:2b:0f:81:c7:36:7a:20:ea:d7:d8: 0d:56:58:68:04:70:9b:5c:26:1b:4d:7f:67:9e:25:ce:a9:46: ca:f2:ee:49:82:61:ca:47:a8:01:bf:d4:95:00:9e:2a:e5:d0: 0c:16:44:d8:9b:bf:19:2d:45:ee:4d:97:fd:65:eb:c7:15:8b: ae:81:59:9a:e1:66:56:56:dc:ca:9d:ca:70:c1:f0:4f:f0:45: 31:11:eb:0b:33:03:a0:b8:cf:b8:c0:0f:a4:a1:d7:fa:18:a7: d0:9b:a9:bd:4a:a6:e7:9f:1f:96:53:a7:5b:6c:98:7a:ac:89: 4a:8e:17:c6:f2:2c:b0:bb:46:2b:1b:bc:20:4f:59:36:53:57: f0:b3:c0:ad:74:da:d2:0b:50:5a:21:ab:33:95:8f:5e:1b:78: ba:88:2e:05:7b:03:dc:a6:f3:bf:e8:11:4e:a4:44:d1:f7:f9: 77:ac:c1:1e:ad:ee:34:dc:d9:1a:26:08:ae:b7:8d:9c:a1:95: 68:43:41:1f:59:8c:59:a2:89:2a:1d:1f:42:3a:6c:c3:a5:24: 6d:7c:60:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+88/JVRdGpQmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTc2NWU3ZTAtNjgzNi00MTc2LWJkN2UtZmJhNzM5MzBhNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3rPdD7gXWXoZiHLl3/+o49w6rOALJ3+mJi GMoO/H8QecBV71i/2e8RaU8Ab+rIEzCKNYRIVpFXcrmU1E76eR//Jw2zLTyzyHVd QBrTav/rVu7bfLSlK3PMoj6oCDMuE5PsTOWW//0cc5Y5J3EaKQAiYSzuMAquDQdY Xbj5KRQJCko2LwCEzW3nGAkMVa/lar0JAUHksRrwRlQA8jRqWQVm7nkAqxfGOw9J JGeDcfWwB6tf9D85dNpQ1obuJ4a7F9vFkiLejX4vLRQC3/sPpHT7xz+7MEK4tMqf +1BohUH45Dl+CeQGjw158EeUK1nZxHuDIjDO3G0JXQSca4YFCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEpb0+/526LzgYmf94cCw+enXY9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzIxYjFkNTAtMGNkMi0z M2JiLWI5ZjgtNWQ5MTk2ODI1Nzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCI/kfiDc41QDXKpQ23Sf4yUqSvlAqPPeNfFnrhUhThnDKoWQeZaJSp vfzPcysPgcc2eiDq19gNVlhoBHCbXCYbTX9nniXOqUbK8u5JgmHKR6gBv9SVAJ4q 5dAMFkTYm78ZLUXuTZf9ZevHFYuugVma4WZWVtzKncpwwfBP8EUxEesLMwOguM+4 wA+kodf6GKfQm6m9Sqbnnx+WU6dbbJh6rIlKjhfG8iywu0YrG7wgT1k2U1fws8Ct dNrSC1BaIaszlY9eG3i6iC4FewPcpvO/6BFOpETR9/l3rMEere403NkaJgiut42c oZVoQ0EfWYxZookqHR9COmzDpSRtfGD9 -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:28 2026 by rpki-client