$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa File: 4d969e38-8862-3acc-8f97-40db9f1796e3.roa (raw, json) Hash identifier: Go8NAVf4BlszOgUrOaW7KrGF9PXNNU/SiX9KItc9oKY= Subject key identifier: DF:86:46:8A:B2:98:85:25:9A:2F:3F:22:15:41:C8:F4:BE:78:3A:63 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FFAFAEBC6560B9E4E9980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396578 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:fa:fa:eb:c6:56:0b:9e:4e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f4e1d7dd-13f9-432c-8ea2-25d0b9e45c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:d0:92:63:b2:7a:17:be:28:ee:f8:17:48: c5:5a:f6:95:c7:91:d9:2e:b6:bb:c6:ee:2c:a2:29: 3e:0e:9c:c3:37:2b:c8:71:35:48:2d:bb:73:42:83: c2:a8:ef:90:16:51:93:75:4f:8c:54:6c:10:25:06: e6:0e:9b:02:bf:48:fd:52:3e:56:90:0e:b7:5d:da: 58:af:75:5c:46:18:5c:c9:ef:09:54:ed:f7:a2:6b: c5:5e:53:d0:5f:c1:fc:04:92:14:f2:76:90:b9:09: 80:53:79:57:85:01:91:b6:10:42:22:44:ae:a4:aa: 84:cc:b8:e5:79:a0:a7:50:cc:4d:54:9f:7f:ea:e8: 39:10:30:c3:77:c5:6e:69:ba:9a:57:52:48:eb:e0: 5a:45:44:b6:87:4a:c6:0d:a1:44:59:03:65:4d:ae: 1c:1f:de:83:f7:c1:8a:0a:d2:a9:d4:11:d3:f9:02: 2b:6f:4d:a5:c0:d2:49:60:80:4b:86:e4:57:23:1a: d8:94:c1:7a:17:bb:28:77:6e:72:a6:02:fb:e7:54: 3c:7f:d5:c5:8e:40:43:50:ba:f8:44:c3:22:d4:12: b5:b0:54:c7:b7:24:cc:8c:3a:b4:eb:39:80:e5:0d: f4:62:ce:6d:0f:f2:74:b9:02:ab:ae:ae:c9:2e:db: 2d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:86:46:8A:B2:98:85:25:9A:2F:3F:22:15:41:C8:F4:BE:78:3A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ce:84:bf:22:0f:06:cc:ef:b9:6d:06:fe:33:33:eb:29:35: 75:fc:34:c3:dc:72:83:33:80:86:fe:79:38:7f:32:88:47:57: 7f:86:ef:c5:fb:14:05:32:b2:c6:92:f2:31:3e:29:e0:43:57: 87:01:ca:08:0f:fb:67:0b:db:d1:5a:f3:9d:1d:80:22:ba:2f: ee:4a:8d:05:0a:16:6c:8d:7d:03:1d:ae:f5:80:23:1d:03:82: e9:dd:2e:4a:a6:6a:0d:b2:87:00:d5:99:d7:49:9c:4f:41:79: 9b:95:88:03:9d:77:ef:1c:77:bf:8c:c7:87:e3:87:d1:5a:bd: 11:43:05:a5:cf:32:6a:dc:24:de:32:32:f8:25:4f:2f:ab:06: 6b:fb:0f:8c:2b:7e:81:2d:e2:4c:8f:6d:23:3b:08:48:54:3f: 9b:26:34:5f:34:96:38:3d:f3:31:67:a4:5b:a5:2d:73:45:de: 96:d2:25:18:28:d4:2a:f2:1a:72:60:45:85:43:d8:c3:f3:12: 40:04:8a:c5:0d:29:08:ba:32:eb:49:81:92:05:ff:42:6b:7f: bd:38:cf:3d:fc:74:e5:b0:0c:cd:3e:09:25:c8:bf:c7:1d:c4: 75:56:41:e1:72:b9:1b:0b:51:46:d3:ef:d6:f8:32:6e:ff:49: 65:2a:13:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/r668ZWC55OmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjRlMWQ3ZGQtMTNmOS00MzJjLThlYTItMjVkMGI5ZTQ1YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2bQkmOyehe+KO74F0jFWvaVx5HZLra7xu4s oik+DpzDNyvIcTVILbtzQoPCqO+QFlGTdU+MVGwQJQbmDpsCv0j9Uj5WkA63XdpY r3VcRhhcye8JVO33omvFXlPQX8H8BJIU8naQuQmAU3lXhQGRthBCIkSupKqEzLjl eaCnUMxNVJ9/6ug5EDDDd8VuabqaV1JI6+BaRUS2h0rGDaFEWQNlTa4cH96D98GK CtKp1BHT+QIrb02lwNJJYIBLhuRXIxrYlMF6F7sod25ypgL751Q8f9XFjkBDULr4 RMMi1BK1sFTHtyTMjDq06zmA5Q30Ys5tD/J0uQKrrq7JLtsthwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN+GRoqymIUlmi8/IhVByPS+eDpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ5NjllMzgtODg2Mi0z YWNjLThmOTctNDBkYjlmMTc5NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOzoS/Ig8GzO+5bQb+MzPrKTV1/DTD3HKDM4CG/nk4fzKIR1d/hu/F +xQFMrLGkvIxPingQ1eHAcoID/tnC9vRWvOdHYAiui/uSo0FChZsjX0DHa71gCMd A4Lp3S5KpmoNsocA1ZnXSZxPQXmblYgDnXfvHHe/jMeH44fRWr0RQwWlzzJq3CTe MjL4JU8vqwZr+w+MK36BLeJMj20jOwhIVD+bJjRfNJY4PfMxZ6RbpS1zRd6W0iUY KNQq8hpyYEWFQ9jD8xJABIrFDSkIujLrSYGSBf9Ca3+9OM89/HTlsAzNPgklyL/H HcR1VkHhcrkbC1FG0+/W+DJu/0llKhOT -----END CERTIFICATE-----Generated at Wed Aug 19 18:45:04 2026 by rpki-client