$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa File: 599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa (raw, json) Hash identifier: SUbWHMElbt8O344HXdyW5v8kcLG1hTHjLbw4O63J/pU= Subject key identifier: 53:E7:42:EF:4A:6D:8F:FC:29:C2:C1:1E:07:1C:08:BB:8D:D1:8B:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FFD105D494A56588F0680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396562 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:fd:10:5d:49:4a:56:58:8f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5404f3de-d9d4-47e9-9fb8-b22c7e54f577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:06:c1:e1:23:87:07:cc:0d:b7:6e:16:94: d0:14:e6:91:2d:bd:f4:da:fa:31:a5:67:b1:d8:b4: 6e:b6:4a:e1:f3:cc:a7:b8:71:b9:c4:a3:39:7c:3d: 34:5f:f9:a5:8e:35:ca:f4:51:4e:fb:3d:75:7a:09: da:b2:8b:a4:76:ed:95:c6:1f:f6:6e:23:da:7d:3e: 7c:7c:9d:f9:b2:60:7e:3f:a0:e4:83:ba:0c:f4:50: 43:b9:fa:d2:4f:3b:67:20:ea:8b:da:5f:9d:0b:25: 82:e4:ac:1d:05:72:56:ac:4c:d5:e1:e5:53:d5:23: bc:42:b4:60:fc:8c:0c:db:0a:d3:af:50:11:ae:76: bf:f2:52:70:89:99:e5:d1:49:93:d6:0e:4d:83:1a: a7:0a:78:2e:8f:88:d3:f3:ea:4a:9f:ae:8d:56:f1: ae:19:9e:86:50:d2:0a:f9:e1:cb:c4:66:22:b1:33: 3d:55:83:5c:6f:e7:09:45:25:7b:17:b5:af:ce:1c: d6:60:30:f4:f4:bd:14:09:01:ef:93:66:9b:d9:bc: d6:a9:ea:93:33:9d:3c:26:83:41:fa:79:a0:50:c3: 70:43:c1:d6:6f:cd:d0:c9:ca:3c:e3:cd:26:20:a1: d9:68:71:e1:47:ed:36:4c:2a:8f:6b:36:e7:c6:f1: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:42:EF:4A:6D:8F:FC:29:C2:C1:1E:07:1C:08:BB:8D:D1:8B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/599588ff-17d5-3dc9-aaa7-2122b1ec5162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e9:ee:7f:08:5b:d5:3d:f0:70:85:55:45:4f:f8:35:e6:cb: c1:2e:07:75:dc:38:b0:ba:da:5b:47:59:1c:09:ad:33:9b:4b: e4:14:4e:64:39:f4:25:d4:72:ce:4e:80:e0:26:70:f9:37:44: ba:e4:00:b8:e8:03:e7:f0:52:ac:86:76:30:b6:98:2c:fd:3b: f4:25:02:76:c2:4c:a0:ce:43:dc:fd:ce:f1:3d:36:c1:ac:e1: 75:56:c0:4d:cc:54:d7:4d:17:4d:6d:14:9e:6f:5a:14:a8:3d: d7:06:41:ab:7f:32:58:ba:08:2f:aa:23:88:0d:88:c5:f2:12: ef:ed:44:24:3a:3f:7e:06:ee:0b:81:1a:bc:93:7f:3b:0e:87: aa:76:ba:f6:90:26:ca:c2:8a:22:8c:10:e3:33:a3:17:b3:33: 42:bf:8f:95:93:ed:10:62:06:cc:ca:3e:f0:89:e5:dc:73:4a: 19:c2:37:f6:05:06:12:5e:12:7f:81:d1:80:b0:d1:46:00:a0: c3:1e:08:e2:5f:c4:35:f0:65:79:69:6c:86:2e:01:75:91:83: 5e:2a:e2:48:45:6f:52:04:5d:d9:ac:4c:69:8e:dc:86:89:99: a9:9d:b0:f8:82:7f:3e:cb:36:4f:a2:f7:cd:a2:06:3d:f4:44: ee:71:f1:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/0QXUlKVliPBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTQwNGYzZGUtZDlkNC00N2U5LTlmYjgtYjIyYzdlNTRmNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcMGweEjhwfMDbduFpTQFOaRLb302voxpWex 2LRutkrh88ynuHG5xKM5fD00X/mljjXK9FFO+z11egnasoukdu2Vxh/2biPafT58 fJ35smB+P6Dkg7oM9FBDufrSTztnIOqL2l+dCyWC5KwdBXJWrEzV4eVT1SO8QrRg /IwM2wrTr1ARrna/8lJwiZnl0UmT1g5NgxqnCnguj4jT8+pKn66NVvGuGZ6GUNIK +eHLxGYisTM9VYNcb+cJRSV7F7WvzhzWYDD09L0UCQHvk2ab2bzWqeqTM508JoNB +nmgUMNwQ8HWb83Qyco8480mIKHZaHHhR+02TCqPazbnxvGsFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFPnQu9KbY/8KcLBHgccCLuN0YtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk5NTg4ZmYtMTdkNS0z ZGM5LWFhYTctMjEyMmIxZWM1MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCL6e5/CFvVPfBwhVVFT/g15svBLgd13DiwutpbR1kcCa0zm0vkFE5k OfQl1HLOToDgJnD5N0S65AC46APn8FKshnYwtpgs/Tv0JQJ2wkygzkPc/c7xPTbB rOF1VsBNzFTXTRdNbRSeb1oUqD3XBkGrfzJYuggvqiOIDYjF8hLv7UQkOj9+Bu4L gRq8k387Doeqdrr2kCbKwooijBDjM6MXszNCv4+Vk+0QYgbMyj7wieXcc0oZwjf2 BQYSXhJ/gdGAsNFGAKDDHgjiX8Q18GV5aWyGLgF1kYNeKuJIRW9SBF3ZrExpjtyG iZmpnbD4gn8+yzZPovfNogY99ETucfGl -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:29 2026 by rpki-client