$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/375bb80f-a952-3663-b332-0387bd4f996b.roa File: 375bb80f-a952-3663-b332-0387bd4f996b.roa (raw, json) Hash identifier: b99WyMtPSHcvQ3ROj7n+x+Aa3L0WRGrXqw0GkbCuMRE= Subject key identifier: 42:7A:F0:44:FB:D6:18:19:8C:FD:EB:39:28:0B:EF:39:D4:67:40:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902AA1486146FE711FCE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/375bb80f-a952-3663-b332-0387bd4f996b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396596 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:2a:a1:48:61:46:fe:71:1f:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a88f236e-4a4e-4099-b3bf-6aeb46d125aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:c2:12:e8:4a:17:34:93:65:a2:f8:ec:6c: 45:0a:f6:32:4c:c4:46:c4:a0:37:4d:57:a4:15:81: 42:86:34:92:29:96:12:7f:4d:b0:a7:c9:f2:7f:58: f5:74:18:13:0c:b9:af:6d:13:19:d8:06:db:2c:78: b5:3d:2f:05:d1:b0:56:de:96:d2:a5:21:72:9a:0c: ea:2c:e6:ca:74:4e:f0:85:95:40:0c:45:55:4d:2f: b1:25:30:4c:fa:83:d6:bd:25:e2:1a:38:9d:82:6f: f3:5d:14:f7:af:ec:b0:7b:6d:f2:b8:e1:5b:af:9b: 78:eb:26:06:3d:e0:d8:7a:a6:b2:0b:a3:23:c2:6d: a2:8a:17:5a:78:33:0e:8e:b4:cd:49:62:6a:0d:5d: ca:bd:1f:db:c6:9e:c7:61:e2:1f:b9:15:9f:78:26: b1:d8:a2:bc:38:80:ff:85:81:a1:f0:3d:ec:9f:2d: 2f:45:2d:61:72:28:f7:74:26:5c:23:bc:3d:84:5d: 47:f9:4f:3a:f8:ba:b6:46:55:85:3d:b7:63:02:13: 7f:c6:aa:19:8b:02:5a:9a:0b:53:5b:a2:f4:e1:55: ef:35:65:24:e0:45:a2:6b:f9:64:04:27:42:c6:55: df:e3:88:58:16:4a:3d:6c:7d:62:f8:52:6a:b7:2a: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:F0:44:FB:D6:18:19:8C:FD:EB:39:28:0B:EF:39:D4:67:40:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/375bb80f-a952-3663-b332-0387bd4f996b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:46:4c:04:e7:78:4d:03:82:b2:50:d2:d9:45:ec:9d:b9:2e: b0:a4:14:4e:b8:3d:55:22:03:00:93:bb:bd:6a:83:fd:ff:04: 2a:bd:d6:16:a9:f9:48:34:40:51:c8:e4:54:c3:b6:25:05:70: 21:16:e0:fb:26:3c:2d:c7:72:96:39:db:70:5f:84:15:33:86: ad:8d:1c:d8:88:b3:7c:e6:5c:47:2e:83:17:70:d5:50:1b:59: 58:b8:ef:ec:68:e6:fe:8e:90:46:ff:96:bd:fe:a5:83:a4:45: ae:a2:8e:13:6b:93:87:2d:0d:55:e0:22:cb:c3:d4:32:90:2c: 74:eb:dd:08:11:9f:e6:34:f4:af:00:5e:b8:59:50:0a:95:a9: 2e:e4:48:fb:d2:e8:81:d1:a4:1e:64:57:02:a8:58:08:d2:e1: 37:a3:c5:c8:33:62:71:c2:8d:77:b3:08:76:d5:75:e7:e1:3a: fe:9d:8e:62:7d:95:4e:4a:c2:89:16:78:85:4d:67:1a:d4:4f: 61:49:c5:f5:c0:dc:7a:ed:b9:bf:45:d3:ac:dc:db:41:4f:86: ef:3c:b1:d1:04:2a:76:68:86:5e:01:56:8a:93:05:42:43:c3: 57:7d:d9:d6:dd:81:34:e7:39:6a:9c:bc:a4:68:a0:1e:7f:a7: f7:8c:ea:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCqhSGFG/nEfzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTg4ZjIzNmUtNGE0ZS00MDk5LWIzYmYtNmFlYjQ2ZDEyNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJfCEuhKFzSTZaL47GxFCvYyTMRGxKA3TVek FYFChjSSKZYSf02wp8nyf1j1dBgTDLmvbRMZ2AbbLHi1PS8F0bBW3pbSpSFymgzq LObKdE7whZVADEVVTS+xJTBM+oPWvSXiGjidgm/zXRT3r+ywe23yuOFbr5t46yYG PeDYeqayC6Mjwm2iihdaeDMOjrTNSWJqDV3KvR/bxp7HYeIfuRWfeCax2KK8OID/ hYGh8D3sny0vRS1hcij3dCZcI7w9hF1H+U86+Lq2RlWFPbdjAhN/xqoZiwJamgtT W6L04VXvNWUk4EWia/lkBCdCxlXf44hYFko9bH1i+FJqtyrKsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJ68ET71hgZjP3rOSgL7znUZ0ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzc1YmI4MGYtYTk1Mi0z NjYzLWIzMzItMDM4N2JkNGY5OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYRkwE53hNA4KyUNLZReyduS6wpBROuD1VIgMAk7u9aoP9/wQqvdYW qflINEBRyORUw7YlBXAhFuD7Jjwtx3KWOdtwX4QVM4atjRzYiLN85lxHLoMXcNVQ G1lYuO/saOb+jpBG/5a9/qWDpEWuoo4Ta5OHLQ1V4CLLw9QykCx0690IEZ/mNPSv AF64WVAKlaku5Ej70uiB0aQeZFcCqFgI0uE3o8XIM2Jxwo13swh21XXn4Tr+nY5i fZVOSsKJFniFTWca1E9hScX1wNx67bm/RdOs3NtBT4bvPLHRBCp2aIZeAVaKkwVC Q8NXfdnW3YE05zlqnLykaKAef6f3jOoy -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:58 2026 by rpki-client