$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa File: 672d8fcd-2150-3c7e-8677-093f7d936027.roa (raw, json) Hash identifier: BI+K6h4u7boiuB01Ue02/KnXjVFVFqVDkVsR5I3G9Wk= Subject key identifier: 32:E8:6A:25:81:55:51:D2:4A:88:E0:BB:73:CD:85:D7:F7:09:49:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797E5EB58865EA326E44EE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36627 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:e5:eb:58:86:5e:a3:26:e4:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=317b0b53-5316-4371-b825-68a2e1d63ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:82:09:41:1d:bc:dd:f2:c9:14:35:e5:b1: 74:87:b9:81:00:42:54:70:65:1d:16:68:05:77:36: 3c:fc:36:aa:8b:da:d1:25:fd:4c:63:b6:52:55:06: 1f:c2:c3:17:1f:cc:e3:7b:c3:b7:42:90:f1:eb:89: 8e:82:14:da:52:27:47:56:3a:cb:73:7e:5b:b2:c5: ce:8c:12:30:41:bd:56:d3:c6:c1:b2:62:11:9f:93: 6f:9f:e2:2e:1c:45:c2:96:23:ce:52:91:c6:17:55: 4e:f9:6d:d1:af:a9:b9:c1:d2:80:db:2e:8c:35:8d: 0f:47:38:43:1d:50:58:df:48:08:53:09:6c:67:e5: 5e:c2:fa:93:f2:94:8b:44:8d:43:ea:a1:78:02:5c: 49:dc:0e:84:c4:64:e7:de:bf:a2:27:3c:a3:3c:1e: 98:fc:4e:23:c1:6d:76:80:1d:08:2a:e4:08:6f:7a: cf:19:a0:95:d7:cc:85:d6:ca:60:e5:bb:d6:5a:66: dd:b0:5b:b2:0e:72:6a:e9:2c:f9:0d:0e:4a:6c:98: 08:cf:35:af:d4:05:a5:bb:9c:e2:0a:f2:b8:9e:3b: c2:c0:22:94:c2:5a:ad:5f:01:6f:8b:7a:d6:00:4c: 89:30:47:17:dd:5c:f5:cc:a2:a4:4b:97:bf:24:04: f8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:6A:25:81:55:51:D2:4A:88:E0:BB:73:CD:85:D7:F7:09:49:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672d8fcd-2150-3c7e-8677-093f7d936027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:96:e9:04:87:66:9f:cf:ed:fc:94:e6:16:c4:85:f3:89:9c: 85:24:81:ac:2d:6f:42:93:9d:af:55:d1:ec:82:a5:e6:03:a9: 92:92:a4:c9:31:48:99:89:fb:eb:45:de:6b:61:e1:6f:a1:e8: 24:39:38:df:f2:10:a3:c8:06:d6:bf:d7:fd:2b:3e:df:39:c2: 61:91:79:da:9c:f6:62:66:c7:c5:78:b4:04:66:f8:f7:bc:9d: cb:11:83:5a:e9:62:41:6e:db:8e:13:1f:07:9c:83:9e:e4:29: d9:56:0b:26:2d:53:56:a5:b2:71:5b:a5:c3:fa:9e:f9:f6:04: da:4c:cf:71:b9:52:a5:14:f4:b8:b1:c0:30:45:1c:2a:d9:7b: a1:e0:7a:96:79:0b:3c:c2:64:44:92:ce:26:53:9f:d8:cb:62: ef:dd:53:1d:e2:34:0b:74:5b:27:a0:b0:00:91:14:57:09:c5: fd:61:01:bb:01:b9:8a:3a:e7:39:99:4b:38:5b:64:8b:f3:c9: 33:20:69:b5:bc:81:b4:e7:bc:f7:4f:9b:b4:13:31:2f:cb:f1: 84:1a:7f:86:f2:0a:85:8b:2b:a2:cb:90:1d:47:de:67:49:74: 91:26:29:96:2c:84:bb:38:86:8c:93:a8:b8:7e:5a:76:7e:3f: f0:cb:12:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+XrWIZeoybkTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzE3YjBiNTMtNTMxNi00MzcxLWI4MjUtNjhhMmUxZDYzZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEqCCUEdvN3yyRQ15bF0h7mBAEJUcGUdFmgF dzY8/Daqi9rRJf1MY7ZSVQYfwsMXH8zje8O3QpDx64mOghTaUidHVjrLc35bssXO jBIwQb1W08bBsmIRn5Nvn+IuHEXCliPOUpHGF1VO+W3Rr6m5wdKA2y6MNY0PRzhD HVBY30gIUwlsZ+VewvqT8pSLRI1D6qF4AlxJ3A6ExGTn3r+iJzyjPB6Y/E4jwW12 gB0IKuQIb3rPGaCV18yF1spg5bvWWmbdsFuyDnJq6Sz5DQ5KbJgIzzWv1AWlu5zi CvK4njvCwCKUwlqtXwFvi3rWAEyJMEcX3Vz1zKKkS5e/JAT40wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLoaiWBVVHSSojgu3PNhdf3CUmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyZDhmY2QtMjE1MC0z YzdlLTg2NzctMDkzZjdkOTM2MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaW6QSHZp/P7fyU5hbEhfOJnIUkgawtb0KTna9V0eyCpeYDqZKSpMkx SJmJ++tF3mth4W+h6CQ5ON/yEKPIBta/1/0rPt85wmGRedqc9mJmx8V4tARm+Pe8 ncsRg1rpYkFu244THwecg57kKdlWCyYtU1alsnFbpcP6nvn2BNpMz3G5UqUU9Lix wDBFHCrZe6HgepZ5CzzCZESSziZTn9jLYu/dUx3iNAt0WyegsACRFFcJxf1hAbsB uYo65zmZSzhbZIvzyTMgabW8gbTnvPdPm7QTMS/L8YQaf4byCoWLK6LLkB1H3mdJ dJEmKZYshLs4hoyTqLh+WnZ+P/DLEiM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:52 2026 by rpki-client