$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499f9f7c-7bee-332b-9167-ae98ede3a996.roa File: 499f9f7c-7bee-332b-9167-ae98ede3a996.roa (raw, json) Hash identifier: OcNsyrrxi0y5SwH4LYkuguMGxMaNhxChafhAuGwlQU8= Subject key identifier: 90:B6:70:18:34:2A:62:2C:26:1A:4E:AC:E4:BF:98:83:81:64:C4:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7901FC707215A13F2E2A580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499f9f7c-7bee-332b-9167-ae98ede3a996.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396547 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:1f:c7:07:21:5a:13:f2:e2:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09277153-5915-4d0b-ac4f-7a386b42870a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3e:ba:a3:bd:f0:d5:40:d8:72:0d:da:2b:05: d2:12:91:5e:2d:c2:01:be:8c:3b:f5:5e:9c:cd:da: 56:d0:f0:f0:53:29:f0:bd:c6:df:e1:d1:75:04:fa: 68:2c:a9:5b:2d:d6:35:fa:08:30:90:e5:d4:f4:6b: 07:c8:d9:86:88:51:ca:34:2f:bd:2d:62:bf:b0:54: 94:6c:13:8c:cb:ae:45:a0:c7:17:60:3c:cc:ec:8c: ca:63:87:cf:dd:98:0e:8c:7a:d8:7c:0c:8d:cb:d2: 03:89:af:5b:79:d1:db:41:b2:15:40:86:3e:25:35: b8:ac:3a:6e:fd:f1:d1:02:11:9a:9a:29:11:95:18: 7d:2d:20:6e:07:07:61:d4:6b:ae:b0:cd:3e:46:32: 90:7c:aa:a0:b5:80:dc:2e:82:e9:6a:b0:80:f2:e4: 60:45:76:3c:a1:d8:1d:cb:a3:d5:ed:7d:93:87:cb: 59:a3:65:89:e1:29:e6:c6:a2:dd:15:4c:bc:ef:aa: 3b:e8:5e:0a:01:45:d4:d2:56:19:03:8a:2c:ae:b3: 73:27:b0:dc:74:51:92:db:1b:bf:fe:02:39:51:ac: dc:da:6b:d8:c8:ee:b0:a7:2a:68:d3:35:a5:21:83: 35:d1:92:ca:7e:bc:18:33:cc:f1:ad:1d:28:0a:74: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:70:18:34:2A:62:2C:26:1A:4E:AC:E4:BF:98:83:81:64:C4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/499f9f7c-7bee-332b-9167-ae98ede3a996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9c:ab:5c:f7:ef:c1:ee:6a:b9:1f:0b:aa:a7:7a:b5:98:40: f3:06:30:05:8e:5f:2e:b3:ba:38:cb:17:02:a3:95:66:a4:2d: 8f:64:a3:cd:06:f3:16:f1:e8:c4:eb:eb:44:a0:1b:bb:4f:c8: 53:30:fb:4a:6c:ad:08:b6:81:2d:41:31:ac:b3:9f:69:6f:e2: fa:ee:6b:c3:c9:92:08:b7:56:54:c2:df:b4:5b:f9:fa:6e:93: 4d:e5:04:12:81:04:db:cd:c7:93:12:33:53:d5:a4:16:f7:83: d2:9d:d3:f4:f0:38:8a:de:47:91:e9:1d:70:c3:07:22:74:17: a8:42:b5:af:92:ec:9f:f0:71:ef:eb:06:5e:fb:c1:cd:dd:04: 3c:6e:de:6a:13:c3:2e:e3:31:47:71:a2:db:5d:d5:21:3c:6d: d2:4f:86:a2:22:2b:f2:fd:cd:29:fc:a2:d4:54:12:ce:79:51: 60:10:b7:2f:8e:76:32:5e:4e:fc:53:f3:a6:a2:65:31:92:c6: 6a:fe:46:22:5e:5f:96:ab:c6:80:e2:5b:70:88:d7:1c:6c:11: 20:60:19:49:32:0a:ef:96:22:66:2c:f9:a4:78:43:3e:20:4f: 5e:ec:c7:7a:f8:b4:bc:69:b4:a6:28:c9:69:cd:c6:3d:c5:38: 81:f4:d5:25 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkB/HByFaE/LipYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDkyNzcxNTMtNTkxNS00ZDBiLWFjNGYtN2EzODZiNDI4NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT66o73w1UDYcg3aKwXSEpFeLcIBvow79V6c zdpW0PDwUynwvcbf4dF1BPpoLKlbLdY1+ggwkOXU9GsHyNmGiFHKNC+9LWK/sFSU bBOMy65FoMcXYDzM7IzKY4fP3ZgOjHrYfAyNy9IDia9bedHbQbIVQIY+JTW4rDpu /fHRAhGamikRlRh9LSBuBwdh1GuusM0+RjKQfKqgtYDcLoLparCA8uRgRXY8odgd y6PV7X2Th8tZo2WJ4SnmxqLdFUy876o76F4KAUXU0lYZA4osrrNzJ7DcdFGS2xu/ /gI5Uazc2mvYyO6wpypo0zWlIYM10ZLKfrwYM8zxrR0oCnSRYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJC2cBg0KmIsJhpOrOS/mIOBZMR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDk5ZjlmN2MtN2JlZS0z MzJiLTkxNjctYWU5OGVkZTNhOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2nKtc9+/B7mq5Hwuqp3q1mEDzBjAFjl8us7o4yxcCo5VmpC2PZKPN BvMW8ejE6+tEoBu7T8hTMPtKbK0ItoEtQTGss59pb+L67mvDyZIIt1ZUwt+0W/n6 bpNN5QQSgQTbzceTEjNT1aQW94PSndP08DiK3keR6R1wwwcidBeoQrWvkuyf8HHv 6wZe+8HN3QQ8bt5qE8Mu4zFHcaLbXdUhPG3ST4aiIivy/c0p/KLUVBLOeVFgELcv jnYyXk78U/OmomUxksZq/kYiXl+Wq8aA4ltwiNccbBEgYBlJMgrvliJmLPmkeEM+ IE9e7Md6+LS8abSmKMlpzcY9xTiB9NUl -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:00 2026 by rpki-client