$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa File: 5114d8f2-04b8-3649-9176-eac50a916f72.roa (raw, json) Hash identifier: nb0ZOZ3RWg1GW2zfrBS4Hu3BZStf0rGeVs2vtZfIjGA= Subject key identifier: D2:D4:22:E1:34:2C:4C:C3:B9:78:11:D8:66:59:3B:63:B4:27:F4:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79025734F8DB4450E03F000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396610 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:25:73:4f:8d:b4:45:0e:03:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d89e2507-ee9e-4355-a12f-5fac507ee6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:35:1b:62:5f:8c:46:15:81:da:44:24:ca: 6d:00:31:19:66:36:96:3e:f6:c4:6a:88:c0:00:2c: 7e:77:dc:f8:5d:2f:6c:f2:13:ad:bb:fa:d3:1c:18: b2:5e:d8:41:4e:b6:ab:70:87:49:ee:f2:16:15:fc: 9c:43:ba:79:d0:96:cc:06:ba:63:4e:0f:17:99:9a: 5f:89:4d:b9:2f:4b:02:2f:de:1d:92:b3:33:c3:fa: be:e6:8c:78:3a:65:1b:b8:24:94:3f:c7:38:59:3f: f4:37:3e:bf:5b:a4:47:98:1a:13:52:50:0f:e4:13: 7b:64:91:e8:3b:10:89:d2:b4:ca:c8:68:21:80:29: 7c:e9:ee:6d:28:a1:6c:79:ae:33:5e:2f:d5:62:0c: c5:2f:08:8b:92:d3:76:92:24:ab:9d:5e:9f:ff:40: d0:7b:6a:51:45:6e:2a:02:27:1c:38:91:9e:61:df: 80:4c:8d:e6:c3:64:73:98:01:bd:f0:73:bd:a5:c5: 31:27:c9:a4:02:54:7f:ac:17:a4:81:6c:32:e9:96: e2:4d:e3:29:28:35:7e:fd:18:cf:d6:fd:a5:80:dc: 62:ac:9c:49:21:18:4e:80:d9:aa:0a:b4:27:72:59: cd:4a:ff:08:29:b9:88:1f:5d:bd:a8:b3:73:3f:1d: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D4:22:E1:34:2C:4C:C3:B9:78:11:D8:66:59:3B:63:B4:27:F4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5114d8f2-04b8-3649-9176-eac50a916f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:82:26:25:b3:e4:81:fc:ff:ba:be:95:f0:f3:0e:7b:63:94: f9:d1:d4:6c:12:14:87:33:37:27:eb:af:54:5c:30:d6:7b:11: 75:96:ad:c5:17:c3:93:0d:17:8b:a2:91:eb:2f:0f:19:12:f1: 3d:84:dd:1c:d1:eb:59:cb:ed:76:9f:fa:14:07:c0:07:40:72: d0:f1:2b:45:d6:b0:fb:4f:95:66:b6:75:a6:0b:e8:19:85:f9: 4e:f2:a6:91:41:e0:6a:db:37:d9:e3:99:13:19:64:66:ea:7b: 75:74:f9:79:6d:d0:2e:29:44:8c:e6:c6:95:4a:40:1f:03:81: 29:c4:5d:b2:4e:cb:bf:74:a0:76:a5:33:48:8e:06:4a:98:05: 25:80:71:ba:6b:14:f0:10:d9:da:e5:cc:86:52:7e:14:78:a5: 97:60:fd:de:cf:75:7e:c3:8e:01:a4:9a:9a:3f:f1:3f:fd:bd: 36:e4:7d:b4:24:7f:bb:20:31:1d:7a:c9:6f:62:42:38:bc:f7: 98:e7:fd:bf:e8:26:05:ba:1d:07:4d:a8:d8:e1:73:67:89:b9: bc:8a:ff:36:ca:54:ac:2d:8f:81:72:d9:49:0a:7b:5e:0f:e0: c8:83:e1:cb:51:23:7b:fe:00:17:a9:07:29:eb:4b:24:c8:0b: 93:84:58:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCVzT420RQ4D8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDg5ZTI1MDctZWU5ZS00MzU1LWExMmYtNWZhYzUwN2VlNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V41G2JfjEYVgdpEJMptADEZZjaWPvbEaojA ACx+d9z4XS9s8hOtu/rTHBiyXthBTrarcIdJ7vIWFfycQ7p50JbMBrpjTg8XmZpf iU25L0sCL94dkrMzw/q+5ox4OmUbuCSUP8c4WT/0Nz6/W6RHmBoTUlAP5BN7ZJHo OxCJ0rTKyGghgCl86e5tKKFsea4zXi/VYgzFLwiLktN2kiSrnV6f/0DQe2pRRW4q AiccOJGeYd+ATI3mw2RzmAG98HO9pcUxJ8mkAlR/rBekgWwy6ZbiTeMpKDV+/RjP 1v2lgNxirJxJIRhOgNmqCrQnclnNSv8IKbmIH129qLNzPx0KnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNLUIuE0LEzDuXgR2GZZO2O0J/T/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTExNGQ4ZjItMDRiOC0z NjQ5LTkxNzYtZWFjNTBhOTE2ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBygiYls+SB/P+6vpXw8w57Y5T50dRsEhSHMzcn669UXDDWexF1lq3F F8OTDReLopHrLw8ZEvE9hN0c0etZy+12n/oUB8AHQHLQ8StF1rD7T5VmtnWmC+gZ hflO8qaRQeBq2zfZ45kTGWRm6nt1dPl5bdAuKUSM5saVSkAfA4EpxF2yTsu/dKB2 pTNIjgZKmAUlgHG6axTwENna5cyGUn4UeKWXYP3ez3V+w44BpJqaP/E//b025H20 JH+7IDEdeslvYkI4vPeY5/2/6CYFuh0HTajY4XNnibm8iv82ylSsLY+BctlJCnte D+DIg+HLUSN7/gAXqQcp60skyAuThFjl -----END CERTIFICATE-----Generated at Wed Aug 19 17:55:29 2026 by rpki-client