$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f3999f0-9d8d-3fd9-ade2-040acda483d9.roa File: 6f3999f0-9d8d-3fd9-ade2-040acda483d9.roa (raw, json) Hash identifier: qd0OLr6shjWhJLtclvQFwKr/dmJFaUvrmHg3fd3AWPM= Subject key identifier: 8A:7A:2C:81:6E:A3:D7:3C:BC:E3:78:4D:D8:57:A9:DE:EA:09:34:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79023DCBA18E725557E9580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f3999f0-9d8d-3fd9-ade2-040acda483d9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396552 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:23:dc:ba:18:e7:25:55:7e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81f01526-3137-4d4a-912d-0448042797c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:36:1c:50:3f:cc:43:19:f3:26:ac:61:1f: 4f:6c:a9:69:84:d2:85:fe:cf:d8:01:92:bf:1d:40: e3:fa:43:d3:c7:a3:be:9f:be:6b:7a:66:97:df:27: 9b:35:37:b8:a3:56:15:b6:48:1a:6a:d3:f2:90:75: 54:54:9d:35:f5:19:5d:09:b6:f4:5f:0b:e5:1d:1e: cd:8d:65:5c:c6:fc:a6:8e:cb:81:b7:55:1c:1c:f9: 46:54:96:20:b1:ae:77:24:19:13:2c:61:71:d3:0b: dc:c7:03:58:bf:c5:fb:c1:b2:2e:a7:43:c0:d2:a5: 14:21:7a:7b:72:cc:c0:d5:79:92:b7:ad:7c:e4:79: ff:47:55:ad:9f:1b:a6:d2:26:4c:0d:85:0f:b5:ad: 0a:b3:15:18:2f:1a:a9:2a:91:18:c6:11:e8:f0:fd: 98:aa:e5:c2:89:2a:d1:98:4c:5f:c1:0b:43:4d:50: 1d:33:5f:78:da:f7:3d:65:f5:c6:2d:9c:27:36:dc: 6d:4e:e5:a8:fa:5d:ad:54:1d:4d:0a:47:e4:82:38: 30:ac:f0:e9:b1:1b:90:e6:42:d9:81:fc:85:83:d6: 48:0b:ec:b6:bc:de:9a:9d:f5:11:04:20:05:e9:ef: e1:b3:ab:4d:05:c9:62:2c:c5:b6:20:1f:e4:c2:1d: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7A:2C:81:6E:A3:D7:3C:BC:E3:78:4D:D8:57:A9:DE:EA:09:34:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f3999f0-9d8d-3fd9-ade2-040acda483d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a7:34:92:48:fd:3e:37:59:dc:ab:18:00:7f:93:df:62:ed: 42:02:4a:c9:5a:9d:24:62:60:20:40:c7:55:76:34:93:ad:55: 58:16:e0:db:11:f8:22:65:e1:cc:27:1f:1e:af:69:45:1a:82: 63:e1:86:70:95:0a:71:6a:4a:19:0d:f9:a0:31:a8:0b:cf:a5: cb:6a:ac:21:fc:09:54:34:13:c9:9b:ef:e3:cf:35:97:82:a8: ce:51:46:23:d7:56:48:28:0b:e4:4e:dd:04:7c:9d:e5:f6:72: 09:fd:e7:ef:91:4c:22:98:4d:4e:ba:50:6c:4d:f3:61:c2:5b: 40:3c:31:2b:19:2d:4e:a8:88:4f:5b:0f:97:43:16:89:1a:b6: bb:d1:f0:55:55:da:81:e3:a6:9a:67:f9:e4:6e:73:9b:96:09: dd:c0:2e:d8:d1:aa:37:fe:0a:ab:7a:35:ed:a2:c8:f7:f2:0d: e6:b4:77:b2:00:47:bb:fd:b6:5c:7d:5c:05:6a:e6:9e:a8:fd: 1e:e2:41:0e:89:0d:d4:3e:9c:2d:5d:a1:c1:8f:6f:96:9c:ba: f5:f7:cc:f9:0f:82:94:41:1a:57:67:b6:cc:f9:9d:30:eb:62: cf:58:db:61:62:69:0e:73:1c:cb:bf:9e:e5:1e:a4:b8:3e:f9: 41:91:a6:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCPcuhjnJVV+lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODFmMDE1MjYtMzEzNy00ZDRhLTkxMmQtMDQ0ODA0Mjc5N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqng2HFA/zEMZ8yasYR9PbKlphNKF/s/YAZK/ HUDj+kPTx6O+n75remaX3yebNTe4o1YVtkgaatPykHVUVJ019RldCbb0XwvlHR7N jWVcxvymjsuBt1UcHPlGVJYgsa53JBkTLGFx0wvcxwNYv8X7wbIup0PA0qUUIXp7 cszA1XmSt6185Hn/R1Wtnxum0iZMDYUPta0KsxUYLxqpKpEYxhHo8P2YquXCiSrR mExfwQtDTVAdM1942vc9ZfXGLZwnNtxtTuWo+l2tVB1NCkfkgjgwrPDpsRuQ5kLZ gfyFg9ZIC+y2vN6anfURBCAF6e/hs6tNBcliLMW2IB/kwh1rjwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIp6LIFuo9c8vON4TdhXqd7qCTS/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmYzOTk5ZjAtOWQ4ZC0z ZmQ5LWFkZTItMDQwYWNkYTQ4M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAApzSSSP0+N1ncqxgAf5PfYu1CAkrJWp0kYmAgQMdVdjSTrVVYFuDb EfgiZeHMJx8er2lFGoJj4YZwlQpxakoZDfmgMagLz6XLaqwh/AlUNBPJm+/jzzWX gqjOUUYj11ZIKAvkTt0EfJ3l9nIJ/efvkUwimE1OulBsTfNhwltAPDErGS1OqIhP Ww+XQxaJGra70fBVVdqB46aaZ/nkbnOblgndwC7Y0ao3/gqrejXtosj38g3mtHey AEe7/bZcfVwFauaeqP0e4kEOiQ3UPpwtXaHBj2+WnLr198z5D4KUQRpXZ7bM+Z0w 62LPWNthYmkOcxzLv57lHqS4PvlBkaZR -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:46 2026 by rpki-client