$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa File: 890f82b4-9a88-3384-8b10-1f2bab75f976.roa (raw, json) Hash identifier: HpiFRvomroOpnUyeVFVEimerhrgHsR0hB1L3/DhW6+A= Subject key identifier: B7:B4:BB:C5:08:CB:FD:A6:15:9A:6C:3F:AA:E4:7B:6F:CF:A8:8C:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797EA3CB939AF80744F7D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396571 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:ea:3c:b9:39:af:80:74:4f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=89b2047e-5ba7-4476-b72c-5138984ad2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:c2:36:4c:74:2e:75:43:dc:fc:58:99:59: 6c:d0:97:5e:8c:e9:d4:0d:25:37:00:f6:8a:d3:2f: 30:da:0a:ae:42:a3:66:0a:fd:71:e7:c2:1a:f8:d1: 4a:93:6b:fb:fd:74:3b:2e:f9:a4:5e:e7:07:b5:22: 88:a6:d1:8a:4e:a6:49:22:84:be:8b:2c:61:a1:d1: c9:08:ea:f0:c1:f3:74:a3:ae:0d:21:28:e6:4c:8a: f8:61:3e:06:d1:f8:cc:fb:ee:1f:0e:45:98:71:96: 3c:78:d3:b7:5a:92:b4:24:2f:94:43:4c:d2:50:2f: 45:bf:f9:73:06:c8:0c:51:3e:a1:d5:7d:da:fe:ec: 0e:92:52:dc:31:0f:22:c5:e4:69:b7:aa:8a:37:39: 68:6c:e7:fe:93:73:27:3a:15:fe:4d:96:b7:50:16: e5:95:b8:be:6a:10:f1:78:82:ec:c8:2b:07:7b:97: b0:64:9b:a9:59:09:3d:62:3d:2f:60:a6:4d:e3:62: 97:d8:b4:95:4d:62:c5:0a:a3:cc:11:4d:19:8f:9f: 0e:2e:ec:43:91:92:91:fc:26:8f:55:7f:9f:da:4f: 37:44:36:eb:4e:cd:5e:3d:f7:73:2e:99:89:bc:8e: 31:00:31:be:d2:a8:21:97:4a:7c:43:09:f0:87:f2: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B4:BB:C5:08:CB:FD:A6:15:9A:6C:3F:AA:E4:7B:6F:CF:A8:8C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1e:81:5a:d8:b0:53:89:02:aa:ca:55:d6:46:d4:f3:ac:0e: 7c:21:5d:94:54:1e:a7:40:55:44:04:a1:e0:57:da:41:73:33: 10:d5:43:48:11:13:9d:1d:21:da:d0:49:38:59:9e:56:13:31: 32:51:e4:60:f8:87:49:1f:7f:75:e7:50:6e:ff:27:d1:4e:64: ff:a5:85:0a:35:f9:27:41:5f:7a:6e:c4:f5:45:83:ee:ed:76: d3:81:51:e0:0b:5d:af:b3:39:2f:0d:aa:93:37:ad:ec:46:e0: 7b:7d:89:b8:31:91:21:2b:24:5b:9f:b1:a0:3b:ba:c1:df:9f: bd:6a:60:13:75:eb:33:99:1e:43:cb:ce:0b:26:6e:24:e4:1d: ef:86:1e:f1:c1:d6:58:98:52:9d:4b:cd:f5:33:53:10:5c:01: 0a:28:8f:8a:4b:0f:0e:0b:a9:f7:83:5a:8f:16:d7:b2:5f:a0: da:6f:e3:08:ef:ad:81:a6:48:e9:df:f1:8c:14:0d:4e:7a:04: d0:29:d0:b7:47:6f:f9:30:ac:8c:92:55:1a:17:7b:69:43:ba: 72:3c:e4:e2:18:d2:f8:f6:09:41:8a:e1:8d:e0:1f:61:1f:db: 94:f5:e9:37:19:f0:66:30:b5:73:37:57:a0:36:49:09:91:a8: 92:12:12:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+o8uTmvgHRPfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODliMjA0N2UtNWJhNy00NDc2LWI3MmMtNTEzODk4NGFkMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLCNkx0LnVD3PxYmVls0JdejOnUDSU3APaK 0y8w2gquQqNmCv1x58Ia+NFKk2v7/XQ7LvmkXucHtSKIptGKTqZJIoS+iyxhodHJ COrwwfN0o64NISjmTIr4YT4G0fjM++4fDkWYcZY8eNO3WpK0JC+UQ0zSUC9Fv/lz BsgMUT6h1X3a/uwOklLcMQ8ixeRpt6qKNzlobOf+k3MnOhX+TZa3UBbllbi+ahDx eILsyCsHe5ewZJupWQk9Yj0vYKZN42KX2LSVTWLFCqPMEU0Zj58OLuxDkZKR/CaP VX+f2k83RDbrTs1ePfdzLpmJvI4xADG+0qghl0p8Qwnwh/KnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe0u8UIy/2mFZpsP6rke2/PqIzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwZjgyYjQtOWE4OC0z Mzg0LThiMTAtMWYyYmFiNzVmOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgegVrYsFOJAqrKVdZG1POsDnwhXZRUHqdAVUQEoeBX2kFzMxDVQ0gR E50dIdrQSThZnlYTMTJR5GD4h0kff3XnUG7/J9FOZP+lhQo1+SdBX3puxPVFg+7t dtOBUeALXa+zOS8NqpM3rexG4Ht9ibgxkSErJFufsaA7usHfn71qYBN16zOZHkPL zgsmbiTkHe+GHvHB1liYUp1LzfUzUxBcAQooj4pLDw4LqfeDWo8W17JfoNpv4wjv rYGmSOnf8YwUDU56BNAp0LdHb/kwrIySVRoXe2lDunI85OIY0vj2CUGK4Y3gH2Ef 25T16TcZ8GYwtXM3V6A2SQmRqJISEqA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:08 2026 by rpki-client