$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa File: 70dcef90-0f98-3238-97eb-8f20ab34ab79.roa (raw, json) Hash identifier: Y2VLYYoSISdF3n29FrXrh8WGNu86IutdhEf57W1BWg4= Subject key identifier: DC:41:CF:29:78:B3:2B:4C:60:CE:BA:B8:33:E6:33:BA:69:2E:A8:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA798669824F4E8103271A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396593 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:66:98:24:f4:e8:10:32:71:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8c88b5c5-8390-4d52-a783-bb89d3d5422a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:48:6c:a1:33:59:90:36:46:5f:69:ba:26: 90:e3:30:20:06:98:86:51:b0:14:9d:68:bb:4f:ba: c7:3f:54:5f:c1:4c:0a:d3:91:4f:c4:1c:42:83:4e: 0c:f4:27:d4:cf:92:f5:5b:41:39:88:0d:ce:5f:dc: e0:82:b8:3d:c7:e4:6c:6c:9f:ba:e2:42:be:60:3d: 00:d7:d6:8c:88:52:fe:84:77:7d:bd:38:a3:b5:7e: 75:b6:39:a7:aa:55:c0:05:f3:33:52:03:60:b2:e6: 4c:c3:55:dc:fc:e4:33:97:c5:19:b4:96:7c:05:0f: 94:05:ea:86:60:f8:75:69:eb:b5:ff:62:fe:69:07: c2:f2:26:00:9e:34:92:73:d7:4f:30:d5:8a:77:d9: 9a:23:80:ed:08:97:f8:ed:c9:c0:09:00:7a:fb:4b: 2c:65:a4:bd:dd:63:47:01:c7:14:82:9d:80:5e:37: 5f:2d:d6:ec:61:71:82:6e:58:ff:9d:ff:67:58:62: d2:3f:bd:1c:31:68:b7:94:5f:57:ea:70:5d:6b:47: 1b:6b:8f:22:32:04:9f:51:37:27:cb:d1:a5:80:a4: a6:92:d2:a0:d2:8c:bb:51:d9:69:f8:5f:0b:ad:f4: 01:b3:6e:4c:12:e4:cf:de:79:b0:d8:69:bd:3d:91: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:41:CF:29:78:B3:2B:4C:60:CE:BA:B8:33:E6:33:BA:69:2E:A8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1f:94:53:80:c0:02:91:1e:aa:a2:d5:73:95:d8:6e:82:bd: 8a:70:fb:12:70:4b:c4:5d:63:43:83:8f:32:23:25:ab:1a:0e: 72:34:68:8a:68:94:7d:f7:f3:39:91:a5:e1:34:a3:94:41:64: 75:26:2e:43:5e:5a:fd:fd:22:14:db:8d:bd:ee:d1:58:d3:e6: a2:13:50:4a:ff:27:e7:75:33:f4:df:1c:a1:5c:fd:28:0f:7c: 71:cf:af:27:05:06:5e:bf:30:5d:77:3f:9a:fe:37:9b:dd:3b: 1c:c2:d2:ce:e3:f3:0e:b3:ee:40:8d:61:ce:6c:bc:1d:96:fc: 70:50:14:66:c9:2a:ab:50:e6:d1:32:a9:8d:a4:14:4d:de:a3: dd:fe:ed:4f:1d:26:91:9e:78:a6:ef:e3:75:cc:b4:0b:c2:35: f2:29:48:d9:71:d8:b5:48:e4:15:29:32:54:7b:8b:36:3f:ce: f0:df:13:9a:8a:da:ca:50:3a:b3:4c:13:03:1a:84:74:e4:3c: c4:8f:1a:10:66:0c:81:49:13:bb:75:68:f1:c7:54:f5:5c:83: 35:75:5b:6c:7d:eb:fb:98:f8:4d:a5:82:99:1b:cd:7e:b1:86: 37:ef:2c:41:d8:2e:6a:ec:6a:e3:6a:7a:e3:e8:70:67:f9:d6: 42:ca:58:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGaYJPToEDJxqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGM4OGI1YzUtODM5MC00ZDUyLWE3ODMtYmI4OWQzZDU0MjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+JIbKEzWZA2Rl9puiaQ4zAgBpiGUbAUnWi7 T7rHP1RfwUwK05FPxBxCg04M9CfUz5L1W0E5iA3OX9zggrg9x+RsbJ+64kK+YD0A 19aMiFL+hHd9vTijtX51tjmnqlXABfMzUgNgsuZMw1Xc/OQzl8UZtJZ8BQ+UBeqG YPh1aeu1/2L+aQfC8iYAnjSSc9dPMNWKd9maI4DtCJf47cnACQB6+0ssZaS93WNH AccUgp2AXjdfLdbsYXGCblj/nf9nWGLSP70cMWi3lF9X6nBda0cba48iMgSfUTcn y9GlgKSmktKg0oy7Udlp+F8LrfQBs25MEuTP3nmw2Gm9PZFg4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxBzyl4sytMYM66uDPmM7ppLqgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBkY2VmOTAtMGY5OC0z MjM4LTk3ZWItOGYyMGFiMzRhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkflFOAwAKRHqqi1XOV2G6CvYpw+xJwS8RdY0ODjzIjJasaDnI0aIpo lH338zmRpeE0o5RBZHUmLkNeWv39IhTbjb3u0VjT5qITUEr/J+d1M/TfHKFc/SgP fHHPrycFBl6/MF13P5r+N5vdOxzC0s7j8w6z7kCNYc5svB2W/HBQFGbJKqtQ5tEy qY2kFE3eo93+7U8dJpGeeKbv43XMtAvCNfIpSNlx2LVI5BUpMlR7izY/zvDfE5qK 2spQOrNMEwMahHTkPMSPGhBmDIFJE7t1aPHHVPVcgzV1W2x96/uY+E2lgpkbzX6x hjfvLEHYLmrsauNqeuPocGf51kLKWJ4= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:30 2026 by rpki-client