$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa File: 9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa (raw, json) Hash identifier: mvgGxBbC4mIMlSl75aUtjvnySDS+1hiLhw5t9sdrwvk= Subject key identifier: FE:1B:67:AD:62:85:9D:C7:66:AD:3D:A3:21:79:F0:0E:EF:BD:45:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900716A44C848B2C4D1D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397212 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:07:16:a4:4c:84:8b:2c:4d:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ae7db8c2-cfeb-492e-9963-9b8c91308808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:29:48:97:3b:98:e4:bc:19:39:6f:d5:5f: a3:0c:dc:bc:ed:df:c1:0c:68:a1:46:78:3a:12:55: fc:f4:1d:9d:ba:e9:d4:b0:c3:1c:12:a7:32:e8:51: 05:e9:c8:4a:2b:9c:99:14:80:1d:82:2b:16:61:52: 2b:30:4a:1a:14:89:19:63:31:1c:63:b9:cb:46:8b: 19:1a:61:63:25:ce:c0:f9:b8:6c:5b:58:03:79:bf: 6d:0e:15:8e:d5:ce:76:0c:7b:82:70:00:11:61:32: 5e:e9:52:54:e0:57:b7:6c:d9:69:9d:a3:d4:c8:b1: 66:1b:3b:35:b2:5e:db:53:8a:5e:67:2d:50:93:3f: b4:9b:74:b3:6b:7b:48:df:64:17:27:45:9b:ef:b3: 93:b3:19:25:00:5f:39:72:04:ad:36:a7:a5:32:c4: 61:2c:76:d7:40:0e:a5:b9:03:4d:13:a1:5d:82:da: e2:4c:5e:9f:4f:06:96:99:2d:fb:3b:c7:23:14:94: 8f:eb:9c:cf:fd:8a:02:47:a6:3a:5e:39:03:fa:f2: c9:4a:d2:19:3f:2b:68:1e:7c:e5:8b:2b:0a:35:72: 5c:16:5c:f3:48:d6:2b:ab:4c:57:c2:df:ac:c0:4b: 04:81:bc:63:3e:74:77:ee:78:fd:26:10:32:b9:b3: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1B:67:AD:62:85:9D:C7:66:AD:3D:A3:21:79:F0:0E:EF:BD:45:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d8eb275-7be8-39ac-90a0-1afe2a22a898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cf:b9:78:36:b0:95:aa:29:ad:47:4e:4b:a0:e3:dc:87:f3: 2a:6b:c5:77:b7:9f:17:5c:ae:a9:6d:bb:fa:db:77:24:63:76: 97:79:ba:29:76:2d:d2:dc:a0:43:05:9c:d8:f8:45:59:2d:2c: 29:d3:37:6f:6d:e2:51:4f:2b:62:ab:53:94:1b:27:64:1d:d0: 4c:e1:8c:10:d8:ad:40:2c:1b:a5:ec:8d:32:66:91:59:35:27: 99:01:67:74:92:c5:33:22:d1:0a:06:b1:24:b1:8c:ae:9e:09: 03:0a:6b:2a:38:19:bb:7c:56:32:32:24:63:0c:32:f5:8e:ad: 51:40:12:44:8a:12:a5:4a:a8:c0:43:2f:fb:2a:93:3a:5d:03: cf:54:bc:d9:3b:20:6c:f3:43:5f:ef:7e:ea:c9:51:8f:18:09: 2c:77:db:ba:46:db:ed:76:08:9f:d5:aa:60:ae:a2:51:35:88: c5:de:59:09:35:b0:2f:e8:d8:89:db:30:d3:0b:f1:47:a5:a0: 72:58:b5:fa:47:b8:fa:65:86:a6:0b:08:2c:ba:cc:9a:90:70: d0:6a:60:e5:8b:96:42:ed:e9:79:9b:e2:bc:0b:0d:35:45:1d: af:7e:cc:e6:7d:30:44:1e:23:5a:57:15:d3:f5:f7:ae:f4:e6: 0b:e9:39:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAcWpEyEiyxNHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWU3ZGI4YzItY2ZlYi00OTJlLTk5NjMtOWI4YzkxMzA4ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIwpSJc7mOS8GTlv1V+jDNy87d/BDGihRng6 ElX89B2duunUsMMcEqcy6FEF6chKK5yZFIAdgisWYVIrMEoaFIkZYzEcY7nLRosZ GmFjJc7A+bhsW1gDeb9tDhWO1c52DHuCcAARYTJe6VJU4Fe3bNlpnaPUyLFmGzs1 sl7bU4peZy1Qkz+0m3Sza3tI32QXJ0Wb77OTsxklAF85cgStNqelMsRhLHbXQA6l uQNNE6FdgtriTF6fTwaWmS37O8cjFJSP65zP/YoCR6Y6XjkD+vLJStIZPytoHnzl iysKNXJcFlzzSNYrq0xXwt+swEsEgbxjPnR37nj9JhAyubO6WwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP4bZ61ihZ3HZq09oyF58A7vvUUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ4ZWIyNzUtN2JlOC0z OWFjLTkwYTAtMWFmZTJhMjJhODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHz7l4NrCVqimtR05LoOPch/Mqa8V3t58XXK6pbbv623ckY3aXebop di3S3KBDBZzY+EVZLSwp0zdvbeJRTytiq1OUGydkHdBM4YwQ2K1ALBul7I0yZpFZ NSeZAWd0ksUzItEKBrEksYyungkDCmsqOBm7fFYyMiRjDDL1jq1RQBJEihKlSqjA Qy/7KpM6XQPPVLzZOyBs80Nf737qyVGPGAksd9u6Rtvtdgif1apgrqJRNYjF3lkJ NbAv6NiJ2zDTC/FHpaByWLX6R7j6ZYamCwgsusyakHDQamDli5ZC7el5m+K8Cw01 RR2vfszmfTBEHiNaVxXT9feu9OYL6TlM -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:40 2026 by rpki-client