$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa File: 47d03e3d-c464-3f1e-bbde-02be87964859.roa (raw, json) Hash identifier: 6S3cItQyLRBtwrY3yY5kHQxC9TbjdcSh0ZZPKzbCzdE= Subject key identifier: 41:45:11:2A:CA:0A:12:BE:9F:3B:F3:1C:CA:B1:25:99:77:BF:4B:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797E8237538672C9ADC2080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396591 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:e8:23:75:38:67:2c:9a:dc:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=32bf7fc2-0943-4fe2-8f7b-54d5db16b291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:85:bd:ee:35:96:52:b2:54:d1:d2:56:e6:0a: be:92:ff:b4:c4:da:ee:08:7c:8b:d5:95:14:ce:55: 8f:98:d1:71:70:f1:d7:0f:0b:b2:e1:be:73:f8:0c: 1d:55:6b:ee:97:bf:27:a2:c1:e2:78:f6:c0:18:00: 1e:b8:4f:71:11:24:f8:fd:f6:a2:06:36:24:1d:10: 61:63:2d:97:3d:20:0e:9e:0e:f8:79:17:1a:e6:de: 36:1b:71:66:96:74:6f:df:4d:0e:2c:04:49:d2:48: b0:ba:43:3e:82:50:f1:b7:64:bd:0e:9b:3c:94:f8: 59:60:12:60:67:4f:4c:3b:44:f2:e4:fe:a4:0b:8a: 23:15:0d:3b:5a:b0:18:1d:58:c4:92:c4:cb:38:a8: 7a:69:a3:7d:c5:b7:70:08:9d:06:25:11:36:45:f5: f9:33:08:ee:7e:27:6f:51:81:06:be:c5:d1:cd:3d: aa:f7:4b:92:02:c3:bd:4d:64:55:e7:3a:af:59:04: 58:64:40:22:e3:13:8e:97:fd:da:dd:e4:c0:ab:fa: 06:c9:df:b8:dc:c0:65:17:2d:80:3d:ad:04:36:cb: 12:17:52:b1:e4:3c:b0:61:94:04:c5:bc:75:1f:52: b8:3e:6e:ab:34:da:52:a5:e1:be:4c:b3:27:3d:67: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:11:2A:CA:0A:12:BE:9F:3B:F3:1C:CA:B1:25:99:77:BF:4B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:52:ea:a2:c5:51:12:70:9d:fc:77:a2:94:6d:08:0a:e2:cd: 6b:75:87:c7:c9:ff:32:66:30:df:d1:0d:ff:f0:fe:6a:46:29: 8f:46:34:fb:50:c6:ae:d3:fa:d3:05:88:8e:74:09:75:e6:b4: 60:d6:b0:16:3b:77:c3:1b:67:ad:4b:c3:71:4e:d2:7c:b6:f2: 42:f3:4e:fd:0d:a4:d3:3f:0e:8f:93:10:87:d5:14:80:08:c9: dd:00:40:5f:f8:27:fa:57:73:65:a2:96:aa:f7:ab:15:f6:a7: cd:9b:8e:5e:c2:ad:c9:47:30:40:11:18:d5:11:e6:50:9a:83: ed:85:e3:c6:14:04:48:41:e4:3e:21:83:45:2a:ab:f0:1f:22: 4d:54:ee:4f:6b:42:19:8d:35:b2:cd:66:ea:a4:d5:e9:d6:9c: d9:59:da:ba:6d:98:e3:9b:e8:0a:bd:9f:d3:0b:51:bd:93:c6: 1d:aa:b7:b0:77:ec:0f:ee:99:c2:72:e7:65:b3:87:12:fa:7c: 48:5b:e5:37:84:5c:26:d6:07:81:95:fa:f9:9d:78:44:c3:b0: 03:d9:d5:1f:ee:b7:97:7f:e2:b6:95:4c:c2:a4:18:58:47:c3: 51:a4:11:46:52:22:21:3f:d6:f3:50:90:0f:39:34:6b:f8:c8: cc:01:ae:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+gjdThnLJrcIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzJiZjdmYzItMDk0My00ZmUyLThmN2ItNTRkNWRiMTZiMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioW97jWWUrJU0dJW5gq+kv+0xNruCHyL1ZUU zlWPmNFxcPHXDwuy4b5z+AwdVWvul78nosHiePbAGAAeuE9xEST4/faiBjYkHRBh Yy2XPSAOng74eRca5t42G3FmlnRv300OLARJ0kiwukM+glDxt2S9Dps8lPhZYBJg Z09MO0Ty5P6kC4ojFQ07WrAYHVjEksTLOKh6aaN9xbdwCJ0GJRE2RfX5Mwjufidv UYEGvsXRzT2q90uSAsO9TWRV5zqvWQRYZEAi4xOOl/3a3eTAq/oGyd+43MBlFy2A Pa0ENssSF1Kx5DywYZQExbx1H1K4Pm6rNNpSpeG+TLMnPWc7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFFESrKChK+nzvzHMqxJZl3v0sWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDdkMDNlM2QtYzQ2NC0z ZjFlLWJiZGUtMDJiZTg3OTY0ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9S6qLFURJwnfx3opRtCArizWt1h8fJ/zJmMN/RDf/w/mpGKY9GNPtQ xq7T+tMFiI50CXXmtGDWsBY7d8MbZ61Lw3FO0ny28kLzTv0NpNM/Do+TEIfVFIAI yd0AQF/4J/pXc2Wilqr3qxX2p82bjl7CrclHMEARGNUR5lCag+2F48YUBEhB5D4h g0Uqq/AfIk1U7k9rQhmNNbLNZuqk1enWnNlZ2rptmOOb6Aq9n9MLUb2Txh2qt7B3 7A/umcJy52WzhxL6fEhb5TeEXCbWB4GV+vmdeETDsAPZ1R/ut5d/4raVTMKkGFhH w1GkEUZSIiE/1vNQkA85NGv4yMwBrlM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:44 2026 by rpki-client