$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa File: 3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa (raw, json) Hash identifier: jWnzDed3N3MFyHlJ5hhFcDHww/MydjYHo+mNz52bOVQ= Subject key identifier: CF:62:B3:6C:39:A1:06:3C:B4:CC:98:19:25:00:DC:AE:F8:CD:40:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900920B73F55AC45C6C080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396593 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:09:20:b7:3f:55:ac:45:c6:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8bacb67-6480-4e97-8a1b-0d20ceabf3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fd:d0:80:a3:55:0e:3a:7b:0e:76:b7:d3:c3: a0:d0:a9:32:a9:c2:70:37:97:01:c8:1b:71:b5:06: 39:b8:6e:8d:46:4b:9f:04:fb:10:3b:f6:f8:94:9d: a3:29:0e:16:94:33:0a:50:9b:c8:d3:43:02:8d:6f: 6e:34:98:11:2d:7f:2e:50:0e:6a:bb:b8:eb:ea:c5: eb:51:56:62:06:34:77:4a:46:29:0d:ef:9e:31:2c: 45:85:55:a3:bb:b3:02:23:67:fa:ae:03:ed:2a:bb: 51:38:6f:06:9c:87:28:2d:60:2c:a0:b2:b3:74:e1: 8b:07:91:2a:e1:b7:84:81:0b:8d:42:f1:6d:ae:8f: 05:c7:91:c0:41:62:e2:f5:87:93:09:ab:f8:c5:e9: 80:6d:45:0b:88:cb:ae:c4:fd:7b:5f:2a:46:87:89: 21:5e:9f:0e:50:f5:58:49:ff:6c:04:5e:6f:13:21: 6f:c9:5f:9c:26:16:e1:57:3f:5d:cc:01:ad:07:77: 8d:6a:e7:bb:ad:e7:80:cd:95:b4:3c:aa:90:de:08: a9:0d:2b:1f:fd:0c:b7:62:06:0e:bd:7d:b6:75:21: 53:47:06:a3:3b:2e:05:de:54:a7:18:65:b6:a3:eb: 22:bd:8b:c0:39:a0:b0:4b:ba:c8:66:97:08:8d:2b: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:62:B3:6C:39:A1:06:3C:B4:CC:98:19:25:00:DC:AE:F8:CD:40:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c2d4d1a-113a-3fa3-8630-7fc6710166b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c6:80:b5:66:ae:28:b6:18:c0:09:16:8f:c7:7a:df:0b:cd: 18:ef:f6:c8:d9:dd:6f:de:11:c8:af:cf:65:c3:12:ce:91:29: bd:87:cb:0d:e7:5f:64:a3:fb:fb:49:b9:d3:e7:3d:aa:73:62: c1:5b:5d:6a:e5:a3:9f:db:aa:8e:d9:8a:1e:71:37:b1:f9:1b: a2:23:08:cc:e7:ea:69:2f:06:7d:13:33:7e:fb:88:fa:dc:68: 9c:ac:49:93:d6:05:8e:d5:37:f0:b3:51:2f:e1:d9:3f:e3:bf: 4f:48:3f:2b:4d:6a:94:3e:a6:94:b7:c4:ff:61:9f:e6:12:78: 37:78:1f:d3:60:74:a0:89:ba:67:7a:62:c6:d3:50:ec:2a:04: 44:fc:91:b4:43:7e:76:da:83:bb:64:8c:7a:c9:78:2b:13:b2: df:c5:7d:31:a9:70:b2:96:62:10:5b:6e:19:74:75:10:c7:f6: f0:5d:34:78:a8:04:36:95:42:61:b2:45:bf:ca:e1:32:95:9e: e8:3b:e3:ef:d4:21:5a:2a:bb:39:09:6f:2c:a3:76:d8:50:7c: 37:0c:93:6f:b1:f9:6b:59:0c:88:ad:9a:c6:78:02:15:ca:97: 94:a8:9f:eb:9a:83:95:e8:28:bf:2d:ec:7a:3f:32:50:9b:61: 8b:a5:9c:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAkgtz9VrEXGwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhiYWNiNjctNjQ4MC00ZTk3LThhMWItMGQyMGNlYWJmM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv3QgKNVDjp7Dna308Og0KkyqcJwN5cByBtx tQY5uG6NRkufBPsQO/b4lJ2jKQ4WlDMKUJvI00MCjW9uNJgRLX8uUA5qu7jr6sXr UVZiBjR3SkYpDe+eMSxFhVWju7MCI2f6rgPtKrtROG8GnIcoLWAsoLKzdOGLB5Eq 4beEgQuNQvFtro8Fx5HAQWLi9YeTCav4xemAbUULiMuuxP17XypGh4khXp8OUPVY Sf9sBF5vEyFvyV+cJhbhVz9dzAGtB3eNaue7reeAzZW0PKqQ3gipDSsf/Qy3YgYO vX22dSFTRwajOy4F3lSnGGW2o+sivYvAOaCwS7rIZpcIjSvy1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9is2w5oQY8tMyYGSUA3K74zUCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2MyZDRkMWEtMTEzYS0z ZmEzLTg2MzAtN2ZjNjcxMDE2NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0xoC1Zq4othjACRaPx3rfC80Y7/bI2d1v3hHIr89lwxLOkSm9h8sN 519ko/v7SbnT5z2qc2LBW11q5aOf26qO2YoecTex+RuiIwjM5+ppLwZ9EzN++4j6 3GicrEmT1gWO1Tfws1Ev4dk/479PSD8rTWqUPqaUt8T/YZ/mEng3eB/TYHSgibpn emLG01DsKgRE/JG0Q3522oO7ZIx6yXgrE7LfxX0xqXCylmIQW24ZdHUQx/bwXTR4 qAQ2lUJhskW/yuEylZ7oO+Pv1CFaKrs5CW8so3bYUHw3DJNvsflrWQyIrZrGeAIV ypeUqJ/rmoOV6Ci/Lex6PzJQm2GLpZxI -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:15 2026 by rpki-client