$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa File: 74f54a50-3e95-3486-a8f7-69d2d6a30421.roa (raw, json) Hash identifier: woN6yy6aYXI5js5DA2wbCmCnb9r4gyT3v47JZ042CCE= Subject key identifier: 73:3B:21:23:55:77:D0:5A:50:C8:AE:08:40:E8:30:A7:51:18:60:60 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902F46A39E4D074D51BC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396566 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:2f:46:a3:9e:4d:07:4d:51:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=adff76cc-2737-45b0-b1b0-f6bdb9b02790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3d:eb:64:c2:15:12:dd:c4:68:52:f9:f1:d5: 49:23:e1:af:30:d7:9d:aa:93:6c:a0:6f:43:5b:63: 59:06:3f:d4:88:8c:d0:c1:fe:40:f1:87:39:e9:83: ee:e7:74:8c:4d:74:95:b3:bb:21:ff:cc:42:ce:8b: 7b:84:10:22:0b:64:36:25:2e:b4:1c:04:73:e5:76: 93:db:6c:3f:e0:5d:44:f4:50:84:70:8a:e4:cc:12: 80:42:39:39:5d:79:ee:31:73:a0:9e:57:13:35:1d: 53:69:57:15:76:65:8b:94:62:ec:21:b6:23:43:7b: 30:24:b6:f1:00:ae:c5:e7:fd:02:47:ba:11:3b:18: 9d:c9:c2:19:77:f0:6c:61:e0:33:bd:17:11:e1:5a: 83:c3:4b:99:d1:ff:27:df:fc:fd:b0:ac:e9:ca:0b: 22:91:8c:76:20:07:0e:a0:ce:7a:51:6a:e0:62:49: c1:1e:6b:30:28:a3:eb:1d:da:12:03:41:b8:f2:b0: 29:c8:79:b2:ac:e6:1d:01:98:2c:85:82:b9:7d:18: a1:a2:1c:ed:22:0b:08:87:c0:a4:44:b5:4f:9c:73: 83:63:37:c1:4a:a9:b2:71:e8:52:80:35:d1:70:2e: f7:eb:d5:58:da:25:6e:97:f6:4b:a6:d9:56:5c:42: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:21:23:55:77:D0:5A:50:C8:AE:08:40:E8:30:A7:51:18:60:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/74f54a50-3e95-3486-a8f7-69d2d6a30421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:96:82:93:02:1f:7d:1d:ff:37:3b:2e:2c:e9:cd:bf:cf:2d: 6d:93:5f:d0:3c:02:43:d5:94:7e:71:6a:9e:79:d7:1e:ca:94: f7:47:f2:31:2c:be:c3:60:37:f9:c7:b8:46:c4:66:80:78:04: 9b:22:05:82:29:71:76:a3:32:6c:52:a8:c7:d5:b3:b4:85:b4: e2:bf:60:ec:d5:f5:16:f1:97:f0:25:43:9b:a7:a8:08:9c:4b: a3:4c:29:80:14:c9:5d:56:58:86:a4:26:fc:3a:59:05:95:5d: 95:93:cc:52:0d:49:95:a2:3e:45:dd:a4:2b:44:23:ec:12:6b: 4c:3c:06:57:08:74:c6:9b:86:76:24:59:23:6b:28:ac:3f:28: de:72:17:46:fb:41:96:ae:50:4f:63:65:21:01:32:00:4b:06: 9b:6a:fb:cc:43:2e:a0:71:d7:75:97:71:d0:e9:0c:ba:53:52: 8e:01:90:6b:21:8d:f6:df:72:77:7c:67:aa:fb:80:b1:4c:72: 0a:3b:b2:81:6b:2b:a0:48:ce:af:50:18:be:c1:9a:f7:2f:51: 71:d5:a8:b2:07:0e:eb:f8:75:b0:0d:44:f2:e6:34:18:7f:26: 01:5f:12:d4:a1:d6:24:e9:a4:87:85:6d:47:06:a0:a0:95:4c: 14:fd:2a:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkC9Go55NB01RvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWRmZjc2Y2MtMjczNy00NWIwLWIxYjAtZjZiZGI5YjAyNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD3rZMIVEt3EaFL58dVJI+GvMNedqpNsoG9D W2NZBj/UiIzQwf5A8Yc56YPu53SMTXSVs7sh/8xCzot7hBAiC2Q2JS60HARz5XaT 22w/4F1E9FCEcIrkzBKAQjk5XXnuMXOgnlcTNR1TaVcVdmWLlGLsIbYjQ3swJLbx AK7F5/0CR7oROxidycIZd/BsYeAzvRcR4VqDw0uZ0f8n3/z9sKzpygsikYx2IAcO oM56UWrgYknBHmswKKPrHdoSA0G48rApyHmyrOYdAZgshYK5fRihohztIgsIh8Ck RLVPnHODYzfBSqmycehSgDXRcC7369VY2iVul/ZLptlWXEImZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHM7ISNVd9BaUMiuCEDoMKdRGGBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzRmNTRhNTAtM2U5NS0z NDg2LWE4ZjctNjlkMmQ2YTMwNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRloKTAh99Hf83Oy4s6c2/zy1tk1/QPAJD1ZR+cWqeedceypT3R/Ix LL7DYDf5x7hGxGaAeASbIgWCKXF2ozJsUqjH1bO0hbTiv2Ds1fUW8ZfwJUObp6gI nEujTCmAFMldVliGpCb8OlkFlV2Vk8xSDUmVoj5F3aQrRCPsEmtMPAZXCHTGm4Z2 JFkjayisPyjechdG+0GWrlBPY2UhATIASwabavvMQy6gcdd1l3HQ6Qy6U1KOAZBr IY3233J3fGeq+4CxTHIKO7KBayugSM6vUBi+wZr3L1Fx1aiyBw7r+HWwDUTy5jQY fyYBXxLUodYk6aSHhW1HBqCglUwU/Sqv -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:26 2026 by rpki-client