$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa File: 6c69a170-71e0-38d1-9369-f97deba2b850.roa (raw, json) Hash identifier: 2AmU87G7AGNSMirDzSPFZEUMDhrCFqYbv0U2pPsorDs= Subject key identifier: D5:A8:87:95:D4:0F:63:8B:96:E2:93:49:5D:C4:0A:B2:43:47:75:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA798694CF5621FA3813E6F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396546 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:69:4c:f5:62:1f:a3:81:3e:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7a201571-d8a1-48ef-a9b1-f532fabf0476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:24:64:71:aa:bc:a4:78:a1:78:04:fa:1e: a7:05:0a:31:8e:d9:37:b4:d7:2f:70:3c:fd:c3:16: 42:b8:9a:90:5b:20:16:37:dc:b5:de:f6:a8:51:4a: 9b:05:64:45:72:76:b6:61:d7:8d:d1:77:93:6a:bb: 21:46:1d:4a:84:07:0b:5e:61:e9:2d:78:5e:22:76: a7:d3:f6:21:7c:a3:72:6a:eb:f3:75:b2:0c:b6:d8: c6:e2:18:6d:e9:7b:8f:35:d4:c9:aa:00:5f:e2:e0: 40:a4:21:c0:2e:d2:99:79:7f:a0:8f:a9:ed:e9:0d: 2c:42:e6:ec:1b:bb:27:0b:6b:b0:24:d1:e4:ef:b0: b4:33:b1:88:0b:f1:bd:25:0b:70:d6:7f:52:c8:aa: a9:73:a4:6e:3b:4a:b3:b6:16:7b:1e:c5:d5:3d:87: 25:c5:5d:91:ee:8b:e3:6d:83:3f:c9:da:06:f2:9a: 22:fb:e4:fe:c1:6c:59:83:29:ff:be:e1:be:73:99: 06:6d:b4:ec:e9:19:cf:a9:58:2d:1c:c8:61:0c:ac: 5d:dd:0a:f0:20:46:ea:30:12:00:a6:00:ca:6a:c1: 9f:71:8b:a9:d7:22:11:c3:c3:ad:f3:f7:91:95:42: c1:36:d1:bd:87:63:01:26:af:0e:07:ca:ac:ac:55: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A8:87:95:D4:0F:63:8B:96:E2:93:49:5D:C4:0A:B2:43:47:75:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6c69a170-71e0-38d1-9369-f97deba2b850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:02:1f:7e:bb:fd:73:30:98:3b:98:19:ea:ba:b8:09:d2:3a: 5b:a2:fe:c8:56:28:ea:3c:57:6c:a5:9b:03:36:e5:51:fb:9c: 65:0e:1d:a9:32:11:3f:5a:36:86:3d:42:5a:75:20:8c:84:ab: 72:0c:3f:87:7c:5a:5a:d0:0a:2c:87:50:76:a8:e7:83:5b:ab: 59:84:5d:fd:c4:00:32:f1:b8:fb:70:30:98:21:a3:07:3a:fb: 3c:b4:89:9e:8f:cc:b1:ca:44:bc:22:9d:e3:d0:fd:04:48:8a: fe:f2:8e:23:b4:83:0c:ec:fd:fa:7c:26:4d:56:5c:7c:49:9a: 19:59:7d:f4:25:0b:4b:54:f9:2a:6d:0d:38:62:9e:e5:91:79: 1c:a8:13:22:01:fb:55:8d:a9:73:4f:28:da:c5:77:19:88:2d: da:77:fb:3a:be:9a:0a:70:c7:c5:20:fc:db:65:a2:ba:39:f6: 4c:25:fb:80:a1:da:bd:e8:2e:d1:ad:48:2f:df:01:c8:7f:90: bb:c2:d4:7c:29:f2:64:fc:d4:e1:6b:89:58:95:1c:c0:3a:78: dd:3c:0a:64:b1:35:63:5c:d6:b5:d9:d5:48:6b:5b:ba:9b:bf: d1:40:03:0b:ae:ae:5c:7f:c9:ae:13:be:cb:26:0c:3c:10:ae: 24:28:6a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGlM9WIfo4E+b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2EyMDE1NzEtZDhhMS00OGVmLWE5YjEtZjUzMmZhYmYwNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcckZHGqvKR4oXgE+h6nBQoxjtk3tNcvcDz9 wxZCuJqQWyAWN9y13vaoUUqbBWRFcna2YdeN0XeTarshRh1KhAcLXmHpLXheInan 0/YhfKNyauvzdbIMttjG4hht6XuPNdTJqgBf4uBApCHALtKZeX+gj6nt6Q0sQubs G7snC2uwJNHk77C0M7GIC/G9JQtw1n9SyKqpc6RuO0qzthZ7HsXVPYclxV2R7ovj bYM/ydoG8poi++T+wWxZgyn/vuG+c5kGbbTs6RnPqVgtHMhhDKxd3QrwIEbqMBIA pgDKasGfcYup1yIRw8Ot8/eRlULBNtG9h2MBJq8OB8qsrFXL3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWoh5XUD2OLluKTSV3ECrJDR3WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmM2OWExNzAtNzFlMC0z OGQxLTkzNjktZjk3ZGViYTJiODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0CH367/XMwmDuYGeq6uAnSOlui/shWKOo8V2ylmwM25VH7nGUOHaky ET9aNoY9Qlp1IIyEq3IMP4d8WlrQCiyHUHao54Nbq1mEXf3EADLxuPtwMJghowc6 +zy0iZ6PzLHKRLwinePQ/QRIiv7yjiO0gwzs/fp8Jk1WXHxJmhlZffQlC0tU+Spt DThinuWReRyoEyIB+1WNqXNPKNrFdxmILdp3+zq+mgpwx8Ug/Ntloro59kwl+4Ch 2r3oLtGtSC/fAch/kLvC1Hwp8mT81OFriViVHMA6eN08CmSxNWNc1rXZ1UhrW7qb v9FAAwuurlx/ya4TvssmDDwQriQoal0= -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:23 2026 by rpki-client