$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa File: 9af53576-fb1d-3bd4-a681-12fe3df74d39.roa (raw, json) Hash identifier: QAqdpGck2zvFvUeU8Z8N08Er2KRBC4GcmGml9HvEuFc= Subject key identifier: 4A:0B:68:42:45:95:CA:44:A1:E9:EC:80:38:CA:B2:9B:E7:7A:C7:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7986860988AA7C4D46AC380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396544 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:68:60:98:8a:a7:c4:d4:6a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=edd29ed4-3442-4bb6-8f68-193738f2ac0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:51:70:9c:b0:c4:9c:17:3b:a6:93:6e:2f:66: 6a:57:0b:b2:ba:46:97:2e:4d:d0:71:dd:31:1d:20: 25:0d:79:f4:b1:05:fa:fd:e6:9f:8c:41:75:6d:82: ab:13:04:b9:f1:0b:df:a3:1b:ea:45:a9:ca:c6:2e: 1b:8a:d1:ac:11:1d:18:18:cb:51:a1:c4:f7:d1:26: 71:2a:38:b3:21:49:0c:b0:e8:0c:ba:64:41:08:d4: 7d:46:38:d2:82:c9:fe:b9:fe:9d:9c:da:f7:5d:72: 58:98:8f:45:62:a3:ff:0e:b6:29:fd:cd:88:ed:b9: 8a:4b:bb:ef:92:88:d8:74:c8:5a:86:1c:85:d9:f3: e8:7c:d2:8b:30:50:09:6f:44:87:88:a8:9f:d0:94: 5c:5e:b8:e9:5c:39:d4:4f:3f:f6:70:00:fe:9b:46: 3c:cd:61:98:ab:38:d4:b3:1b:16:ed:7f:95:c3:3d: b7:b5:9c:ae:94:e3:3c:04:1c:86:47:10:da:8b:5f: 9f:dc:75:44:25:39:d8:a4:25:c5:d3:7b:bf:79:db: de:dc:45:9b:8f:84:fd:61:10:96:e2:5d:ff:1e:ed: c0:26:f2:3c:b6:2a:3c:26:fb:9a:f3:67:74:e7:0b: 38:75:15:0c:01:32:37:41:b9:04:68:bc:71:8e:27: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0B:68:42:45:95:CA:44:A1:E9:EC:80:38:CA:B2:9B:E7:7A:C7:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9af53576-fb1d-3bd4-a681-12fe3df74d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:28:e0:48:73:c3:e2:77:f4:26:27:df:cb:d0:12:46:6f:70: b3:1d:30:01:ee:c6:d4:26:c5:5b:a3:58:9b:28:53:12:f5:92: 5a:70:ea:89:74:62:64:3b:44:0f:73:fb:14:9f:87:73:41:6c: 56:74:fa:73:6d:9a:e3:1b:93:b8:54:db:49:21:be:a1:95:5f: e0:ab:6c:cb:c3:ca:ec:83:7f:a8:08:b3:f3:7b:35:c1:b4:ed: 0c:33:7c:11:5c:45:9d:d7:d4:2e:09:af:d1:15:e4:97:bc:e6: 92:73:a2:de:e7:6b:9f:d5:06:05:75:bb:35:ad:9e:f6:9e:44: 9a:68:2d:e3:bc:c9:a3:57:10:27:42:6e:d2:ad:2c:7c:d0:26: 7c:c7:cd:c6:d2:3e:eb:db:97:5d:fa:10:ec:a0:9f:25:4b:5d: e3:62:a5:f6:fa:07:b1:d7:96:f8:ba:38:8d:d8:2f:43:a7:2d: 5d:e4:33:79:2f:c8:1c:36:92:f6:fd:e2:ec:0e:e3:7b:1a:aa: 30:ca:b2:4f:d9:6d:f8:3f:2f:cd:5f:92:aa:ae:bf:2c:4b:e1: 77:7c:8c:cf:6f:19:05:c7:04:9f:2c:e4:32:68:6c:9c:71:65: db:64:56:b3:99:64:e4:72:57:a3:7d:c9:7c:cb:7a:8b:95:e1: a2:24:62:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGhgmIqnxNRqw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWRkMjllZDQtMzQ0Mi00YmI2LThmNjgtMTkzNzM4ZjJhYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1FwnLDEnBc7ppNuL2ZqVwuyukaXLk3Qcd0x HSAlDXn0sQX6/eafjEF1bYKrEwS58QvfoxvqRanKxi4bitGsER0YGMtRocT30SZx KjizIUkMsOgMumRBCNR9RjjSgsn+uf6dnNr3XXJYmI9FYqP/DrYp/c2I7bmKS7vv kojYdMhahhyF2fPofNKLMFAJb0SHiKif0JRcXrjpXDnUTz/2cAD+m0Y8zWGYqzjU sxsW7X+Vwz23tZyulOM8BByGRxDai1+f3HVEJTnYpCXF03u/edve3EWbj4T9YRCW 4l3/Hu3AJvI8tio8Jvua82d05ws4dRUMATI3QbkEaLxxjicn2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoLaEJFlcpEoensgDjKspvnesclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWFmNTM1NzYtZmIxZC0z YmQ0LWE2ODEtMTJmZTNkZjc0ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0o4Ehzw+J39CYn38vQEkZvcLMdMAHuxtQmxVujWJsoUxL1klpw6ol0 YmQ7RA9z+xSfh3NBbFZ0+nNtmuMbk7hU20khvqGVX+CrbMvDyuyDf6gIs/N7NcG0 7QwzfBFcRZ3X1C4Jr9EV5Je85pJzot7na5/VBgV1uzWtnvaeRJpoLeO8yaNXECdC btKtLHzQJnzHzcbSPuvbl136EOygnyVLXeNipfb6B7HXlvi6OI3YL0OnLV3kM3kv yBw2kvb94uwO43saqjDKsk/Zbfg/L81fkqquvyxL4Xd8jM9vGQXHBJ8s5DJobJxx ZdtkVrOZZORyV6N9yXzLeouV4aIkYiA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:53 2026 by rpki-client