$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa File: 3893d1e1-2218-38f4-82f9-5af50426a787.roa (raw, json) Hash identifier: Fhum1fTkHvRJ3BKA0eLj5Rm5KfmLIunS5fsbZxQj7t4= Subject key identifier: 4F:F3:00:FA:B2:DD:7C:2A:B0:D8:43:22:3A:A0:64:A1:87:5C:15:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900399405BA34AC3412300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396589 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:03:99:40:5b:a3:4a:c3:41:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5c462c83-1310-47d0-b238-07cbe4b48b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:42:0f:dc:7b:07:1b:26:9b:c5:b5:2a:21: 0d:8e:17:59:d3:ad:4c:18:d4:1c:94:c1:4e:86:e4: 20:ce:37:d6:f7:2b:52:2c:3d:16:7c:8b:65:db:69: af:5b:3f:53:ce:ea:e3:15:11:3a:d8:14:f9:74:66: 39:95:54:bc:99:ff:95:85:b8:4e:93:5a:fa:46:d9: 81:3d:f2:b3:82:3c:2b:c4:11:7a:f2:98:d7:9a:03: 9b:83:21:3b:79:09:dc:87:c8:97:62:5b:7d:93:e7: fb:ad:2c:61:a3:23:c7:2e:19:27:d7:62:e3:7e:39: ac:48:66:4d:56:77:a0:e4:e7:74:fa:5e:a1:8f:57: 47:a6:6f:27:9f:e3:69:60:fc:5d:a4:1a:68:de:60: ec:71:70:2e:c4:88:d5:02:94:b5:bf:e2:33:42:b3: 1c:1c:0e:2d:22:da:c4:ef:a6:1b:4a:c1:b7:28:18: b6:c2:c1:e8:34:ef:b8:fc:c4:64:36:0b:ea:fa:4a: 99:b8:06:3e:e7:4c:17:94:88:ff:2e:07:54:7d:35: 61:c6:16:e1:31:9d:00:5d:25:de:3c:13:74:3e:2b: 68:8e:67:a9:1a:51:15:ca:2d:f6:74:39:de:30:f5: 94:f6:36:e2:c9:db:94:53:21:6d:6a:b4:13:4e:cd: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:00:FA:B2:DD:7C:2A:B0:D8:43:22:3A:A0:64:A1:87:5C:15:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fc:ac:33:48:47:5d:7d:a1:9d:a8:88:4d:11:35:5c:7c:ef: 88:f6:70:4b:bf:80:4e:7e:6d:e4:e8:05:3b:9a:b1:ba:7c:44: 8c:31:6d:57:e1:79:23:14:65:ce:2c:bc:cb:c3:5f:a7:4a:e3: b9:e6:30:b5:b2:f1:f0:24:99:20:8e:79:70:30:d9:62:21:c0: a4:9b:fe:53:5a:34:9f:f5:7b:04:8e:dd:ea:51:6f:64:40:a6: bf:66:da:c1:43:c4:90:02:bd:8d:38:64:de:c5:ea:4f:0f:39: 63:c9:29:f4:b6:c1:de:7e:25:25:ae:4a:5e:55:2d:07:fa:d8: 8d:e0:7c:11:f2:61:db:13:70:4e:33:d9:48:1d:da:ce:c6:35: d8:e2:dd:ef:a3:1c:f9:eb:46:9e:9a:33:ea:6e:bb:84:a4:fa: 17:29:ae:49:01:a0:e2:de:8c:fe:18:d3:7b:4c:6f:6d:f8:0e: 33:e1:73:31:e5:df:78:c2:d8:ee:dc:1f:6c:2d:14:0a:03:25: fb:e1:fe:12:b8:e2:45:83:29:8f:85:ca:cb:8a:00:92:f0:4a: 61:68:6b:d1:17:b7:da:82:9a:c5:a6:21:c0:1c:69:b5:cd:35: f8:7c:db:87:12:ce:18:32:f8:d8:9f:57:e2:7d:1e:86:b7:78: 0f:36:ba:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAOZQFujSsNBIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWM0NjJjODMtMTMxMC00N2QwLWIyMzgtMDdjYmU0YjQ4YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjlCD9x7Bxsmm8W1KiENjhdZ061MGNQclMFO huQgzjfW9ytSLD0WfItl22mvWz9TzurjFRE62BT5dGY5lVS8mf+VhbhOk1r6RtmB PfKzgjwrxBF68pjXmgObgyE7eQnch8iXYlt9k+f7rSxhoyPHLhkn12LjfjmsSGZN Vneg5Od0+l6hj1dHpm8nn+NpYPxdpBpo3mDscXAuxIjVApS1v+IzQrMcHA4tItrE 76YbSsG3KBi2wsHoNO+4/MRkNgvq+kqZuAY+50wXlIj/LgdUfTVhxhbhMZ0AXSXe PBN0PitojmepGlEVyi32dDneMPWU9jbiyduUUyFtarQTTs1n1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE/zAPqy3XwqsNhDIjqgZKGHXBVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg5M2QxZTEtMjIxOC0z OGY0LTgyZjktNWFmNTA0MjZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3/KwzSEddfaGdqIhNETVcfO+I9nBLv4BOfm3k6AU7mrG6fESMMW1X 4XkjFGXOLLzLw1+nSuO55jC1svHwJJkgjnlwMNliIcCkm/5TWjSf9XsEjt3qUW9k QKa/ZtrBQ8SQAr2NOGTexepPDzljySn0tsHefiUlrkpeVS0H+tiN4HwR8mHbE3BO M9lIHdrOxjXY4t3voxz560aemjPqbruEpPoXKa5JAaDi3oz+GNN7TG9t+A4z4XMx 5d94wtju3B9sLRQKAyX74f4SuOJFgymPhcrLigCS8EphaGvRF7fagprFpiHAHGm1 zTX4fNuHEs4YMvjYn1fifR6Gt3gPNroz -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:53 2026 by rpki-client