$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa File: 8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa (raw, json) Hash identifier: /PsBDFCz+VMVac3vMbLcYytpK3UgWi4V8HCASu8BjZU= Subject key identifier: 27:25:18:A1:1A:BF:19:02:91:7D:B5:20:CB:94:B1:88:52:18:79:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79005975BB02E571D30FA30 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396575 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:05:97:5b:b0:2e:57:1d:30:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=13600f2c-1dce-446b-9282-eba40388e726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:d0:38:6e:89:70:ac:47:ca:06:b1:31:21: 74:fb:40:1d:4a:94:78:07:ed:3a:99:79:3a:2a:0a: 39:bf:15:ec:96:4d:f0:79:e0:51:15:08:43:c8:79: f4:5f:41:c4:e9:73:b3:f4:6e:46:b6:33:02:6f:5c: 1a:78:8c:a2:90:fa:55:45:e1:1e:53:14:c6:77:e5: a5:1f:62:b6:4e:ee:d3:a0:e3:63:3b:24:a5:96:55: 81:f6:c3:2e:ae:68:b6:d2:29:0d:6d:e9:d0:ba:df: f1:d7:c4:0d:8f:de:ba:0a:6d:65:16:85:a8:f5:3c: 14:d1:5f:15:47:f0:57:36:7e:01:a8:3b:0c:77:cb: f5:46:69:7c:f4:11:38:33:23:6f:b1:e4:37:f2:91: 1c:25:39:09:b4:81:cb:52:e6:f9:02:95:10:21:d9: 9a:b7:09:c6:9b:d7:e9:a5:58:de:fe:81:9e:64:3b: f0:d5:03:45:86:9d:26:f6:89:be:c8:1e:58:cc:88: 9c:f8:b2:cd:63:ab:84:61:8c:a6:e8:8c:e2:b3:f7: 0d:9d:80:7f:23:cd:d5:19:0b:34:44:fe:a3:9e:f1: 02:4f:17:4a:46:1b:da:59:c3:63:e6:7a:4d:b0:ba: 99:d5:d3:26:a1:d5:53:f0:19:18:35:b3:ad:95:11: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:25:18:A1:1A:BF:19:02:91:7D:B5:20:CB:94:B1:88:52:18:79:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a1ead11-1cf6-3e9d-bbf0-8d6085fec75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a1:4e:00:1e:e6:c1:2a:b6:07:2b:bc:71:89:0f:98:a3:b3: 87:5b:be:50:9b:c0:e3:ee:6b:2f:9d:17:db:1f:9d:a0:6f:ca: 2e:13:08:94:45:85:9b:31:3a:4b:a4:64:6f:98:60:3e:f6:9e: 24:53:2d:9b:3f:36:22:36:8b:e7:fa:8c:a9:b4:c1:d8:82:ab: a1:9f:02:00:fa:58:db:3d:0c:ea:f2:b7:1c:7f:8a:d2:f5:7b: b9:35:0d:4b:05:c9:cc:31:a3:25:d2:7f:c8:15:60:da:2c:2e: b0:72:73:9c:db:af:7d:45:79:5c:dd:af:0e:ca:78:0c:79:51: e2:ff:07:64:09:18:5c:08:90:3b:d9:bd:ab:05:eb:cb:cc:9b: 61:85:49:9d:b0:4f:cb:75:b7:9c:1e:9d:6d:3c:8f:fa:fe:7a: 9b:3f:a8:ca:97:21:4f:bd:88:54:52:eb:71:d5:45:ae:44:73: 9f:83:22:98:bc:6b:80:7e:ae:71:e5:c4:fd:f6:60:c6:1a:1f: db:65:cd:a0:59:df:17:8e:87:27:6c:db:ee:b1:21:f9:a1:59: 35:53:9e:5f:5e:1f:c4:39:8b:dd:1f:47:e0:e7:97:14:e1:cf: 7e:28:09:f0:09:a6:12:d6:35:35:cc:b8:5a:0b:2d:ab:ea:13: 23:bc:7b:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAWXW7AuVx0w+jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTM2MDBmMmMtMWRjZS00NDZiLTkyODItZWJhNDAzODhlNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMfQOG6JcKxHygaxMSF0+0AdSpR4B+06mXk6 Kgo5vxXslk3weeBRFQhDyHn0X0HE6XOz9G5GtjMCb1waeIyikPpVReEeUxTGd+Wl H2K2Tu7ToONjOySlllWB9sMurmi20ikNbenQut/x18QNj966Cm1lFoWo9TwU0V8V R/BXNn4BqDsMd8v1Rml89BE4MyNvseQ38pEcJTkJtIHLUub5ApUQIdmatwnGm9fp pVje/oGeZDvw1QNFhp0m9om+yB5YzIic+LLNY6uEYYym6Izis/cNnYB/I83VGQs0 RP6jnvECTxdKRhvaWcNj5npNsLqZ1dMmodVT8BkYNbOtlRHp6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCclGKEavxkCkX21IMuUsYhSGHlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGExZWFkMTEtMWNmNi0z ZTlkLWJiZjAtOGQ2MDg1ZmVjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFoU4AHubBKrYHK7xxiQ+Yo7OHW75Qm8Dj7msvnRfbH52gb8ouEwiU RYWbMTpLpGRvmGA+9p4kUy2bPzYiNovn+oyptMHYgquhnwIA+ljbPQzq8rccf4rS 9Xu5NQ1LBcnMMaMl0n/IFWDaLC6wcnOc2699RXlc3a8OyngMeVHi/wdkCRhcCJA7 2b2rBevLzJthhUmdsE/LdbecHp1tPI/6/nqbP6jKlyFPvYhUUutx1UWuRHOfgyKY vGuAfq5x5cT99mDGGh/bZc2gWd8XjocnbNvusSH5oVk1U55fXh/EOYvdH0fg55cU 4c9+KAnwCaYS1jU1zLhaCy2r6hMjvHsS -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:21 2026 by rpki-client