$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa File: 8575584a-f21c-318f-b79a-76be415c0096.roa (raw, json) Hash identifier: ZVc1GKr7fqf6uBhcX4canWJEtlLirJvUUAE0HtYEfLA= Subject key identifier: A8:B1:1A:2F:8A:EE:0B:5B:16:91:46:E5:C4:E4:89:A4:DA:A0:35:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790231F81B2C2E8F1E804C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396544 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:23:1f:81:b2:c2:e8:f1:e8:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=260c2dd2-0979-42df-91dc-5c97ab4049ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:37:7e:30:64:2c:55:f5:61:42:d2:97:9b: cd:2e:d5:3e:e4:d2:16:96:96:57:3c:1f:5f:75:af: 7b:e6:be:9c:36:44:47:bd:2d:a3:dd:bc:fa:e7:60: 5e:fd:26:28:5b:64:c7:17:a4:af:26:06:6c:9d:70: 1d:bb:b5:73:4d:5b:31:79:15:b0:dc:62:3a:33:ea: 4f:78:f4:c0:81:aa:bd:f8:4a:c4:cf:26:b3:09:eb: 26:04:b9:7c:1f:de:fc:30:42:fa:70:3e:1a:ac:c8: 13:f1:f5:0d:48:bf:ca:c1:36:7f:7b:fa:da:6e:04: 09:6e:61:69:2a:26:62:6e:f2:fd:be:c5:6a:a1:cb: f8:c5:80:a4:b5:dc:2b:64:b3:8a:fc:0f:3f:68:22: 58:ff:bc:75:06:d7:59:5d:db:14:aa:04:75:e3:f4: 3e:18:e7:8e:8f:d3:f5:60:f0:93:61:6b:59:fa:1e: 37:34:12:43:f5:3f:d3:85:fc:b8:5f:77:ed:e4:bc: 65:5f:2b:12:4f:eb:b5:2a:db:0e:7b:9d:44:25:c9: a9:e9:fe:d8:7b:65:68:0c:57:28:74:94:97:01:52: cf:d2:af:4a:ca:d1:12:ab:35:30:02:57:0e:bf:0b: c9:1a:60:a6:df:1a:4d:4e:ff:c2:4f:44:6d:9e:14: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B1:1A:2F:8A:EE:0B:5B:16:91:46:E5:C4:E4:89:A4:DA:A0:35:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8575584a-f21c-318f-b79a-76be415c0096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:44:f2:f2:1e:cc:4f:a0:42:5e:e3:e5:79:c0:c9:17:8b:f8: 3d:f0:73:4a:b0:11:4d:30:f4:1d:61:57:79:85:94:33:9b:85: 09:cd:d3:c0:2d:4a:03:f8:a4:1a:3c:85:81:4e:b2:ce:db:d5: 90:b9:dc:36:99:93:d2:d2:bf:7b:d3:34:46:89:00:c4:27:c3: 9b:93:18:cf:d6:db:09:a6:ec:40:9a:92:36:bc:36:09:89:ec: 82:75:b8:55:0d:a5:73:06:18:cb:5e:03:6e:e6:24:34:8d:48: 58:b6:99:82:7d:ad:7c:3a:42:ca:e1:28:a9:31:c9:e8:41:d2: 48:69:76:b5:52:04:96:e2:d6:f5:7a:6c:0a:29:2b:d7:21:83: 89:07:c1:08:91:75:c6:86:f7:dd:51:79:00:9f:d6:0c:68:73: 6a:63:7a:0a:dd:e0:3c:34:30:b8:b5:8d:69:1a:51:1d:23:43: f6:71:64:0e:5b:67:f7:66:b2:35:6a:1d:e2:7e:b4:fc:03:2c: f1:31:5c:25:5e:6c:d0:1a:95:0a:fe:8a:b3:6b:5b:a9:d8:aa: ed:e5:2b:cb:30:d1:6c:47:d4:76:e0:01:24:58:bf:13:12:db: 19:bb:6b:7f:26:6d:fe:85:6e:88:e3:38:39:35:f5:80:28:f1: be:47:ae:28 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCMfgbLC6PHoBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjYwYzJkZDItMDk3OS00MmRmLTkxZGMtNWM5N2FiNDA0OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18w3fjBkLFX1YULSl5vNLtU+5NIWlpZXPB9f da975r6cNkRHvS2j3bz652Be/SYoW2THF6SvJgZsnXAdu7VzTVsxeRWw3GI6M+pP ePTAgaq9+ErEzyazCesmBLl8H978MEL6cD4arMgT8fUNSL/KwTZ/e/rabgQJbmFp KiZibvL9vsVqocv4xYCktdwrZLOK/A8/aCJY/7x1BtdZXdsUqgR14/Q+GOeOj9P1 YPCTYWtZ+h43NBJD9T/Thfy4X3ft5LxlXysST+u1KtsOe51EJcmp6f7Ye2VoDFco dJSXAVLP0q9KytESqzUwAlcOvwvJGmCm3xpNTv/CT0RtnhRMMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKixGi+K7gtbFpFG5cTkiaTaoDUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU3NTU4NGEtZjIxYy0z MThmLWI3OWEtNzZiZTQxNWMwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfRPLyHsxPoEJe4+V5wMkXi/g98HNKsBFNMPQdYVd5hZQzm4UJzdPA LUoD+KQaPIWBTrLO29WQudw2mZPS0r970zRGiQDEJ8ObkxjP1tsJpuxAmpI2vDYJ ieyCdbhVDaVzBhjLXgNu5iQ0jUhYtpmCfa18OkLK4SipMcnoQdJIaXa1UgSW4tb1 emwKKSvXIYOJB8EIkXXGhvfdUXkAn9YMaHNqY3oK3eA8NDC4tY1pGlEdI0P2cWQO W2f3ZrI1ah3ifrT8AyzxMVwlXmzQGpUK/oqza1up2Krt5SvLMNFsR9R24AEkWL8T EtsZu2t/Jm3+hW6I4zg5NfWAKPG+R64o -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:18 2026 by rpki-client