$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa File: 3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa (raw, json) Hash identifier: 5wbwvZAECX21WR9w+eu2k+d4P02emmzPXnamuaWmWcE= Subject key identifier: 19:2D:82:36:16:4B:A7:EF:2E:E5:88:3B:4C:C0:0F:77:F1:6C:91:1A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79877BE1489B1EDDFFE0D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396600 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:77:be:14:89:b1:ed:df:fe:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6233420d-a46a-44f3-8e28-fc196fcd05e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:da:49:90:6c:3c:a9:0e:23:d0:7f:89:94: a9:da:94:fc:57:f0:68:21:fd:1f:af:3d:d5:ae:1f: 2e:a7:fd:d8:a9:f1:49:c4:95:5a:05:e3:c3:f7:e2: 78:b4:97:f6:09:68:2c:e9:4a:f9:04:4a:62:20:38: 75:86:71:de:93:7b:e7:3f:de:75:f5:a6:58:1d:9c: c8:77:35:e4:b7:26:09:5b:08:be:ac:4f:f5:5d:26: 5e:8c:cd:c9:f2:fb:67:19:52:7d:cb:b0:f8:7c:54: a4:d6:56:7b:3e:5e:38:9f:75:0b:b1:f7:a3:62:93: 6e:6a:da:01:c1:5d:98:46:84:d3:b6:41:a0:1e:29: a8:11:cf:62:e2:55:a7:78:2e:59:47:ba:a1:a9:2f: 8c:45:49:d7:67:4b:a4:6d:f3:8b:41:97:17:6f:02: 2c:69:be:90:4e:e9:28:09:93:0a:4d:24:ec:44:20: 2c:d3:80:4a:58:da:90:37:a5:3c:11:40:77:09:1e: 07:a4:d7:2a:12:f0:03:52:a8:10:b0:ef:91:f7:6f: fc:a6:f6:1a:71:57:b4:d5:3d:ee:26:df:48:53:98: 03:d1:21:9c:e5:5a:66:21:a8:e8:c9:c6:1f:f9:01: f8:c1:df:bc:32:4f:3b:3b:9a:0c:48:23:13:5a:86: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2D:82:36:16:4B:A7:EF:2E:E5:88:3B:4C:C0:0F:77:F1:6C:91:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e5d79f5-e922-3b9a-9dff-bfe59ba0281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:79:18:3a:38:02:99:3a:22:1e:06:3b:0e:c4:ec:26:d7:7a: 69:87:2d:80:b5:dd:08:dd:bd:24:d2:e4:e2:fa:f1:f1:3f:b2: df:4c:6f:d5:80:98:1a:a5:85:b4:c5:b2:3a:33:ac:ba:d5:02: 82:24:45:76:6f:91:05:fe:ec:e1:2d:22:66:9a:0a:cf:15:e2: 64:fe:19:80:d0:91:66:8c:d7:07:60:af:db:4b:34:c4:49:14: 22:5d:37:09:ba:e1:1c:26:45:a0:fe:1d:c7:19:ea:21:b2:6f: 37:76:5c:10:64:05:73:dd:0e:c8:2d:51:a1:f5:c0:92:ff:28: 08:c6:68:4b:44:e6:4a:21:3f:2c:51:4a:08:42:36:89:d5:28: b3:96:ab:d3:87:de:87:13:d7:13:84:74:36:7e:9d:0b:b0:bc: 93:18:66:9f:d3:4a:9f:d7:21:e9:55:fa:c4:96:a3:a5:c2:57: 45:a9:10:1b:7c:bc:d4:6f:6e:78:bf:a7:2f:4e:be:66:62:f3: 33:6f:0c:e6:6b:43:62:e1:ab:f3:40:15:c4:6e:39:a9:44:e0: e7:73:7f:ab:70:81:55:17:b4:c6:0c:c7:30:1e:5e:31:fd:69: 7f:5d:ac:b5:af:17:65:2a:9f:4f:30:39:56:8a:59:4a:23:fb: be:77:3f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHe+FImx7d/+DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjIzMzQyMGQtYTQ2YS00NGYzLThlMjgtZmMxOTZmY2QwNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp57aSZBsPKkOI9B/iZSp2pT8V/BoIf0frz3V rh8up/3YqfFJxJVaBePD9+J4tJf2CWgs6Ur5BEpiIDh1hnHek3vnP9519aZYHZzI dzXktyYJWwi+rE/1XSZejM3J8vtnGVJ9y7D4fFSk1lZ7Pl44n3ULsfejYpNuatoB wV2YRoTTtkGgHimoEc9i4lWneC5ZR7qhqS+MRUnXZ0ukbfOLQZcXbwIsab6QTuko CZMKTSTsRCAs04BKWNqQN6U8EUB3CR4HpNcqEvADUqgQsO+R92/8pvYacVe01T3u Jt9IU5gD0SGc5VpmIajoycYf+QH4wd+8Mk87O5oMSCMTWoZ5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBktgjYWS6fvLuWIO0zAD3fxbJEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2U1ZDc5ZjUtZTkyMi0z YjlhLTlkZmYtYmZlNTliYTAyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB5GDo4Apk6Ih4GOw7E7CbXemmHLYC13QjdvSTS5OL68fE/st9Mb9WA mBqlhbTFsjozrLrVAoIkRXZvkQX+7OEtImaaCs8V4mT+GYDQkWaM1wdgr9tLNMRJ FCJdNwm64RwmRaD+HccZ6iGybzd2XBBkBXPdDsgtUaH1wJL/KAjGaEtE5kohPyxR SghCNonVKLOWq9OH3ocT1xOEdDZ+nQuwvJMYZp/TSp/XIelV+sSWo6XCV0WpEBt8 vNRvbni/py9OvmZi8zNvDOZrQ2Lhq/NAFcRuOalE4Odzf6twgVUXtMYMxzAeXjH9 aX9drLWvF2Uqn08wOVaKWUoj+753P1Y= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:26 2026 by rpki-client