$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa File: 8d4e180d-b294-340d-8292-f0182164165c.roa (raw, json) Hash identifier: ZGHkQKHsqmUq+eCxNnvZXjBIaIlr+8b0yTBMTjH9Yz0= Subject key identifier: 33:2D:90:0F:AC:51:93:73:B0:B3:87:5F:C2:52:24:18:D1:35:D1:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790374D34CA20955417D800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397201 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:37:4d:34:ca:20:95:54:17:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5f4a4e28-9898-43db-8f95-25e59d2ba97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:44:c7:25:69:8e:9e:c5:de:ec:ec:32:99: ba:b9:8b:bc:f9:a3:91:9a:b9:01:7c:fb:6f:45:8f: 0e:b3:1a:ed:14:31:ea:7c:88:26:17:69:bb:dc:68: 74:1e:ae:70:2c:b9:e0:88:f8:ad:d2:76:f7:12:b1: 07:4e:64:32:fa:5a:88:85:2a:67:12:5b:62:64:78: a6:e3:8b:9b:5f:d5:7b:93:01:57:34:3a:85:05:3b: 3b:83:f3:35:7f:83:f5:7e:9d:68:d0:30:85:74:bf: 81:a4:e0:b9:49:a4:ba:69:d7:de:23:b4:5d:49:02: f9:f6:ef:06:1e:20:ab:87:c7:3f:81:73:41:b5:8d: c6:8a:18:af:4b:39:83:d0:a7:6d:ee:fb:28:b0:97: 5a:e2:95:24:c5:ea:17:69:fe:a3:54:b6:19:89:ef: 9b:68:e9:f6:24:19:a6:31:e7:cc:de:67:f2:99:32: c9:19:6f:16:96:3e:35:75:6a:5c:59:dd:c9:5d:cb: 07:42:b2:0e:df:55:5d:96:33:c3:88:f0:f8:fc:57: f0:05:a1:47:6c:89:ae:04:83:ab:d8:2f:1d:c5:64: b2:f8:23:3e:f8:26:3a:85:05:e7:13:53:af:89:e3: 0d:e8:ad:00:5c:03:30:9a:d3:5e:18:35:22:42:21: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:90:0F:AC:51:93:73:B0:B3:87:5F:C2:52:24:18:D1:35:D1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4d:3a:95:21:16:b5:0f:16:c7:7b:14:f0:33:29:ab:81:53: 87:67:45:1d:fc:cb:b7:f8:bb:e8:49:58:6d:d4:cc:98:65:b7: 27:fc:7a:cc:09:f4:50:93:0a:7c:fe:5c:3e:e1:17:a9:70:13: 76:8d:9c:69:db:06:a8:e3:b7:04:b9:6f:ec:bd:d4:5b:fa:a2: 45:cb:31:4e:6f:36:f8:ca:e1:37:ae:38:8e:49:b1:67:6e:5a: 5e:0e:00:2c:07:0a:7e:fc:8d:40:cb:36:fc:62:c0:05:36:4d: a6:0d:d4:20:ff:f9:b8:7a:d2:60:8f:79:e4:37:dc:56:79:90: 7d:2a:fc:cb:82:46:89:69:bc:6f:5a:d0:1a:3a:8e:46:ae:28: 90:c9:ca:02:dc:32:26:b0:a6:6c:31:74:c7:16:cf:6e:e0:2e: d9:97:e9:42:ed:ab:af:a9:e9:c8:13:7e:d2:92:e9:7e:ee:57: 65:aa:0f:8a:16:61:31:ff:ba:29:01:11:6c:b2:0f:b2:b1:e1: 28:1d:54:40:30:fd:ea:61:6b:b5:98:4c:bd:24:b8:ac:98:1d: c7:a1:a2:ed:c4:61:76:14:aa:bf:1c:a7:af:13:8a:51:a0:3b: 63:8e:11:fe:c5:90:3a:6e:01:cf:51:44:62:c8:a0:66:1d:9f: 40:c0:be:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkDdNNMoglVQX2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWY0YTRlMjgtOTg5OC00M2RiLThmOTUtMjVlNTlkMmJhOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5ZExyVpjp7F3uzsMpm6uYu8+aORmrkBfPtv RY8OsxrtFDHqfIgmF2m73Gh0Hq5wLLngiPit0nb3ErEHTmQy+lqIhSpnEltiZHim 44ubX9V7kwFXNDqFBTs7g/M1f4P1fp1o0DCFdL+BpOC5SaS6adfeI7RdSQL59u8G HiCrh8c/gXNBtY3GihivSzmD0Kdt7vsosJda4pUkxeoXaf6jVLYZie+baOn2JBmm MefM3mfymTLJGW8Wlj41dWpcWd3JXcsHQrIO31VdljPDiPD4/FfwBaFHbImuBIOr 2C8dxWSy+CM++CY6hQXnE1OvieMN6K0AXAMwmtNeGDUiQiHvywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDMtkA+sUZNzsLOHX8JSJBjRNdGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ0ZTE4MGQtYjI5NC0z NDBkLTgyOTItZjAxODIxNjQxNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYTTqVIRa1DxbHexTwMymrgVOHZ0Ud/Mu3+LvoSVht1MyYZbcn/HrM CfRQkwp8/lw+4RepcBN2jZxp2wao47cEuW/svdRb+qJFyzFObzb4yuE3rjiOSbFn blpeDgAsBwp+/I1Ayzb8YsAFNk2mDdQg//m4etJgj3nkN9xWeZB9KvzLgkaJabxv WtAaOo5GriiQycoC3DImsKZsMXTHFs9u4C7Zl+lC7auvqenIE37Skul+7ldlqg+K FmEx/7opARFssg+yseEoHVRAMP3qYWu1mEy9JLismB3HoaLtxGF2FKq/HKevE4pR oDtjjhH+xZA6bgHPUURiyKBmHZ9AwL4m -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:26 2026 by rpki-client