$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa File: 355c1c9b-46f4-31e0-b202-8d6513181f02.roa (raw, json) Hash identifier: d8fi3AWtgF1ZuKDuiyhHMQT1/toGISdm3IRB0/6AU6g= Subject key identifier: 25:1B:DE:76:47:3B:78:54:E3:14:A5:B3:C8:4A:C4:D3:31:BE:76:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA798681E6F91C11CCE316F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36630 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:68:1e:6f:91:c1:1c:ce:31:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d5282a26-1457-4d40-a821-2d0fda525852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:1a:71:1e:dd:c5:f4:80:d7:09:07:75:cc: 68:05:39:75:27:c5:f0:56:15:5d:9d:83:7a:26:c9: f9:0a:7b:8b:7f:4b:1c:bc:23:4c:45:d0:ea:7c:c0: 9a:99:3e:12:5e:8d:1a:47:90:b6:97:ba:b2:0b:52: 31:09:93:aa:f9:02:45:fd:01:f8:7b:6a:ee:b6:62: 3f:7d:ed:35:ff:8f:1c:1f:9f:cd:02:32:bc:37:a7: 0e:32:ed:f4:99:28:62:d3:b2:86:08:14:75:e1:ba: 84:9c:8d:04:b2:07:99:22:8e:ea:00:bc:fc:3c:cd: 69:a3:f0:6d:40:28:50:f6:07:61:16:6a:11:ec:c8: 05:50:5c:97:6b:70:a0:6e:4c:e8:0a:3a:c0:92:ef: 0c:32:21:b4:7a:bb:70:06:ba:c6:a5:85:69:cd:cd: 51:4a:01:0d:b2:0e:6a:da:96:42:22:ac:80:6e:43: 7f:27:e9:40:40:71:26:a2:fa:48:2e:05:65:0f:33: 95:a6:ce:17:db:c5:79:de:57:3e:9c:59:33:61:88: d8:14:15:d0:78:98:5d:56:ce:a2:68:46:c6:a2:cd: a4:e6:6a:63:08:0d:4d:a2:eb:c6:d8:6e:ea:e0:9d: 43:fe:dd:88:43:e8:6d:4c:bf:5b:c5:93:7e:00:93: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:DE:76:47:3B:78:54:E3:14:A5:B3:C8:4A:C4:D3:31:BE:76:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f6:5f:49:61:4b:a0:6e:f3:00:ef:e4:8e:3a:c6:28:47:9c: b3:e8:0c:6c:d9:e7:a3:7a:c7:ba:08:d2:b9:b4:e7:cc:6b:2b: 8e:e1:07:e5:4b:1f:16:9f:ef:85:ff:23:d6:16:de:da:0c:b6: 4b:0e:78:95:f1:1e:8d:ec:54:1d:04:74:bc:80:b4:a8:e0:ec: 1b:c3:f0:b3:f2:75:34:3d:8d:a7:3b:38:a3:8a:44:82:75:ce: bb:a3:09:2d:5b:af:1a:89:a2:fa:ff:3c:55:86:7e:cd:73:61: b9:8f:06:e4:2e:19:63:57:9e:e6:4b:33:2f:90:a8:3b:eb:e1: 78:c4:47:fa:00:05:40:83:25:09:53:2c:b0:20:36:20:bf:90: be:5d:2d:a4:cc:7e:f6:07:e8:95:4e:ec:b1:39:14:d6:3e:e1: 7b:f1:2d:e5:15:e6:ba:82:98:33:a7:d2:97:fa:cf:82:91:fc: d7:61:8f:2e:25:ad:9f:aa:62:b4:19:fd:f2:17:ea:c2:1e:34: 2a:a6:72:0c:d6:7f:f7:ad:6d:65:52:49:c8:c8:b7:30:af:ef: 21:06:bb:76:a7:ea:b0:fa:59:a8:10:80:43:7b:c6:d4:e5:e0: 76:fb:bc:90:d4:6d:11:b3:c7:86:43:3f:50:7d:0d:71:56:d0: 07:3b:6f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGgeb5HBHM4xb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDUyODJhMjYtMTQ1Ny00ZDQwLWE4MjEtMmQwZmRhNTI1ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCUacR7dxfSA1wkHdcxoBTl1J8XwVhVdnYN6 Jsn5CnuLf0scvCNMRdDqfMCamT4SXo0aR5C2l7qyC1IxCZOq+QJF/QH4e2rutmI/ fe01/48cH5/NAjK8N6cOMu30mShi07KGCBR14bqEnI0EsgeZIo7qALz8PM1po/Bt QChQ9gdhFmoR7MgFUFyXa3CgbkzoCjrAku8MMiG0ertwBrrGpYVpzc1RSgENsg5q 2pZCIqyAbkN/J+lAQHEmovpILgVlDzOVps4X28V53lc+nFkzYYjYFBXQeJhdVs6i aEbGos2k5mpjCA1NouvG2G7q4J1D/t2IQ+htTL9bxZN+AJMInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUb3nZHO3hU4xSls8hKxNMxvnYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU1YzFjOWItNDZmNC0z MWUwLWIyMDItOGQ2NTEzMTgxZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj2X0lhS6Bu8wDv5I46xihHnLPoDGzZ56N6x7oI0rm058xrK47hB+VL Hxaf74X/I9YW3toMtksOeJXxHo3sVB0EdLyAtKjg7BvD8LPydTQ9jac7OKOKRIJ1 zrujCS1brxqJovr/PFWGfs1zYbmPBuQuGWNXnuZLMy+QqDvr4XjER/oABUCDJQlT LLAgNiC/kL5dLaTMfvYH6JVO7LE5FNY+4XvxLeUV5rqCmDOn0pf6z4KR/Ndhjy4l rZ+qYrQZ/fIX6sIeNCqmcgzWf/etbWVSScjItzCv7yEGu3an6rD6WagQgEN7xtTl 4Hb7vJDUbRGzx4ZDP1B9DXFW0Ac7bzI= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:28 2026 by rpki-client