$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa File: 459572fb-ad1b-3597-974f-68e154989cc8.roa (raw, json) Hash identifier: hCygHhJavMB49YNiyLjx8xhSuaNtzEFYK32gSfWG4cE= Subject key identifier: EA:14:1C:4E:53:81:87:2F:F9:B4:6D:A5:2C:C7:14:93:52:BE:3D:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7986D9E47472C733465DC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 211369 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:6d:9e:47:47:2c:73:34:65:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d840060b-6fb7-4cfa-889f-5efef5689660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:64:ed:ef:e1:3e:e8:4d:ff:59:d3:25:4c:a8: 0d:b9:69:2f:a1:0c:3c:57:73:52:ea:e9:c8:2d:e7: 94:e8:fa:b7:de:d6:aa:78:f2:ff:e9:c6:28:4b:e2: 8c:7e:bd:5d:24:37:75:21:16:c0:71:f3:94:44:bc: 60:d1:7e:8b:c4:33:0f:f4:d0:6a:6b:d6:e2:15:ac: 93:3a:16:39:25:89:cb:4e:9a:66:d5:8d:21:50:72: 20:d6:34:5b:c4:5a:c2:34:f9:5e:36:aa:0b:3b:bd: ea:49:97:c8:47:1f:26:3c:81:f0:f1:cf:1b:e6:e9: 68:98:7b:45:e4:5a:21:57:ac:f4:28:42:e2:f5:88: af:5c:db:d4:de:fe:54:e2:85:03:22:29:0a:4a:fe: ab:fa:06:de:17:63:b1:ee:e5:90:7e:03:a1:f9:34: 1a:c0:0d:96:7f:a0:6f:b9:20:5a:0c:df:3a:64:54: 47:9d:e7:f7:e1:07:cc:93:d9:62:76:24:1b:ab:a0: 35:f2:18:08:38:32:67:3f:5f:b4:88:12:5e:2a:48: 17:09:a9:22:a1:28:cf:4e:ac:d9:fd:e6:69:0e:99: b1:35:62:27:e6:dd:f5:8d:f8:ba:a8:22:2b:05:dd: 4f:5f:44:ed:91:d9:2c:97:96:70:3a:b2:3b:d9:59: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:1C:4E:53:81:87:2F:F9:B4:6D:A5:2C:C7:14:93:52:BE:3D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bf:5e:f6:37:13:17:e1:29:16:0c:44:77:8f:76:5b:12:59: b6:93:e4:38:04:4d:c9:9e:bf:77:41:7c:bf:1b:ce:e9:5c:bd: 37:2b:76:0d:97:42:0a:a5:e4:9f:68:af:8f:2d:9c:7d:d5:41: 19:45:13:35:72:a0:a0:48:ea:45:42:49:5f:aa:1e:b2:72:14: 8b:d1:9c:24:31:ab:5d:97:92:07:da:f7:18:0a:0d:44:60:6d: 49:6d:a3:62:c7:ab:96:fb:d3:b9:dc:3f:9e:58:d3:9e:c4:1c: 3b:a2:46:88:41:c5:77:86:6f:48:d8:db:a1:81:66:53:91:bc: 58:f6:41:54:12:0c:03:94:8a:3d:0f:f1:f3:7d:33:6e:f5:45: 4d:3f:76:ba:d6:09:db:af:d0:13:ea:1f:4f:c6:60:00:20:41: 83:99:9a:ba:2e:49:6e:86:f8:c4:c0:d7:8e:e2:cd:36:ac:17: 82:4c:72:5d:8d:28:e6:ff:e6:f3:64:7d:7c:64:10:e9:af:6f: af:d0:47:f0:27:3d:a2:64:3d:9d:3c:a9:af:63:f4:7e:6b:04: dc:6f:50:6d:bc:0d:e9:f0:8c:7b:05:36:22:99:3f:a8:d9:85: ad:eb:b1:4d:c7:f3:2c:2d:46:0f:56:32:d7:14:03:76:9f:ab: 04:4f:09:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmG2eR0csczRl3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDg0MDA2MGItNmZiNy00Y2ZhLTg4OWYtNWVmZWY1Njg5NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GTt7+E+6E3/WdMlTKgNuWkvoQw8V3NS6unI LeeU6Pq33taqePL/6cYoS+KMfr1dJDd1IRbAcfOURLxg0X6LxDMP9NBqa9biFayT OhY5JYnLTppm1Y0hUHIg1jRbxFrCNPleNqoLO73qSZfIRx8mPIHw8c8b5ulomHtF 5FohV6z0KELi9YivXNvU3v5U4oUDIikKSv6r+gbeF2Ox7uWQfgOh+TQawA2Wf6Bv uSBaDN86ZFRHnef34QfMk9lidiQbq6A18hgIODJnP1+0iBJeKkgXCakioSjPTqzZ /eZpDpmxNWIn5t31jfi6qCIrBd1PX0Ttkdksl5ZwOrI72VnCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoUHE5TgYcv+bRtpSzHFJNSvj0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU5NTcyZmItYWQxYi0z NTk3LTk3NGYtNjhlMTU0OTg5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG/XvY3ExfhKRYMRHePdlsSWbaT5DgETcmev3dBfL8bzulcvTcrdg2X Qgql5J9or48tnH3VQRlFEzVyoKBI6kVCSV+qHrJyFIvRnCQxq12Xkgfa9xgKDURg bUlto2LHq5b707ncP55Y057EHDuiRohBxXeGb0jY26GBZlORvFj2QVQSDAOUij0P 8fN9M271RU0/drrWCduv0BPqH0/GYAAgQYOZmrouSW6G+MTA147izTasF4JMcl2N KOb/5vNkfXxkEOmvb6/QR/AnPaJkPZ08qa9j9H5rBNxvUG28DenwjHsFNiKZP6jZ ha3rsU3H8ywtRg9WMtcUA3afqwRPCfQ= -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:24 2026 by rpki-client