$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa File: a88ae204-02d7-3894-948d-7e85b2b229e5.roa (raw, json) Hash identifier: kFCSIgXTFfmCcoKSTeszOy7veM/J6Xq3Pn0ZRwBbNWM= Subject key identifier: 66:7E:D8:2D:84:EA:EE:1A:14:79:02:79:CC:82:74:1A:2D:4A:E2:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900B417B2F2419796C4CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36621 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:0b:41:7b:2f:24:19:79:6c:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3dc5ec27-0883-4459-a07e-5605d018c73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:2d:fe:fe:27:2e:ac:43:9a:09:81:ab:d4: 92:f2:96:9a:1d:39:e0:33:15:b0:2a:d6:b5:92:b7: 56:c7:c6:d7:27:c1:f4:ab:cb:a5:66:31:d6:e9:22: 67:bd:89:8a:8f:60:9d:70:dc:8b:a6:8a:b3:1f:49: ec:fb:8b:9c:37:75:53:b8:98:8a:94:0e:48:c8:30: 69:b8:c5:73:85:20:fc:80:03:55:1a:98:a2:d7:c5: f5:54:7c:2c:31:21:94:1b:a4:cc:ae:9e:06:b3:e3: 7e:f4:cd:18:c7:e9:9a:df:14:39:4f:4f:d9:ef:cb: 25:70:57:f6:f4:0d:e8:9b:10:ae:1c:ca:fe:80:4d: d1:27:e6:de:fd:3f:65:36:90:4e:07:9b:b3:7a:b5: 44:7e:c9:87:ec:64:52:73:4e:91:ff:e1:9a:15:f7: 81:f8:67:2e:c9:b3:bc:38:ab:17:36:d7:51:82:f1: 92:5a:b6:62:67:dd:c7:66:00:c4:00:ea:87:20:eb: ac:ec:9f:0d:b7:fb:8f:1d:2e:31:0d:1f:66:54:35: e3:ed:5b:cd:54:84:e5:d8:9e:a1:c3:70:71:9e:a5: a2:6b:a0:6d:50:64:42:dc:5a:86:35:47:68:77:13: d5:7b:26:05:d8:18:ca:7c:67:99:74:9c:cd:61:15: 62:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:D8:2D:84:EA:EE:1A:14:79:02:79:CC:82:74:1A:2D:4A:E2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a88ae204-02d7-3894-948d-7e85b2b229e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dd:8e:47:60:00:9b:91:48:0c:35:71:7b:3c:54:a8:dc:e2: d3:3b:65:7b:48:e9:48:bc:f8:f1:b9:83:75:ce:d3:00:96:c5: af:9d:31:dd:78:b5:ef:82:0b:00:9c:f2:8c:88:8e:4e:1f:66: 65:a7:44:dd:a2:9c:34:8d:6a:01:f0:45:9a:25:01:dc:e2:40: 27:c5:68:aa:ba:8e:61:a2:f0:47:dc:22:86:d2:39:04:72:cb: 20:6c:68:6a:dc:aa:b5:7b:bf:46:cd:73:08:7b:12:e5:98:fc: ab:f2:8f:5a:14:db:8f:26:97:36:36:f9:69:96:f5:1b:54:ca: d6:fd:67:50:60:58:26:bd:bc:76:54:ac:0b:4c:9a:af:3f:5c: f2:65:39:83:66:af:8a:e2:17:56:17:72:27:8c:d8:52:09:16: 57:7b:44:1e:74:46:a8:82:57:00:1b:77:74:9e:68:2c:48:59: 38:bd:cf:a5:c2:21:b6:74:4f:ee:65:0d:eb:f4:24:5a:0e:49: 18:ed:ce:40:a7:94:dc:e2:f5:98:e5:04:e8:39:17:c9:47:7c: bd:40:c5:b4:ed:bc:c8:b2:ff:5c:1f:23:68:1e:24:30:fd:ce: 22:fb:20:e7:f3:7e:30:d6:2e:c3:46:44:76:9b:f8:a5:a4:3f: 94:30:41:be -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAtBey8kGXlsTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2RjNWVjMjctMDg4My00NDU5LWEwN2UtNTYwNWQwMThjNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihot/v4nLqxDmgmBq9SS8paaHTngMxWwKta1 krdWx8bXJ8H0q8ulZjHW6SJnvYmKj2CdcNyLpoqzH0ns+4ucN3VTuJiKlA5IyDBp uMVzhSD8gANVGpii18X1VHwsMSGUG6TMrp4Gs+N+9M0Yx+ma3xQ5T0/Z78slcFf2 9A3omxCuHMr+gE3RJ+be/T9lNpBOB5uzerVEfsmH7GRSc06R/+GaFfeB+GcuybO8 OKsXNtdRgvGSWrZiZ93HZgDEAOqHIOus7J8Nt/uPHS4xDR9mVDXj7VvNVITl2J6h w3BxnqWia6BtUGRC3FqGNUdodxPVeyYF2BjKfGeZdJzNYRViSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZ+2C2E6u4aFHkCecyCdBotSuKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4YWUyMDQtMDJkNy0z ODk0LTk0OGQtN2U4NWIyYjIyOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB53Y5HYACbkUgMNXF7PFSo3OLTO2V7SOlIvPjxuYN1ztMAlsWvnTHd eLXvggsAnPKMiI5OH2Zlp0Tdopw0jWoB8EWaJQHc4kAnxWiquo5hovBH3CKG0jkE cssgbGhq3Kq1e79GzXMIexLlmPyr8o9aFNuPJpc2NvlplvUbVMrW/WdQYFgmvbx2 VKwLTJqvP1zyZTmDZq+K4hdWF3InjNhSCRZXe0QedEaoglcAG3d0nmgsSFk4vc+l wiG2dE/uZQ3r9CRaDkkY7c5Ap5Tc4vWY5QToORfJR3y9QMW07bzIsv9cHyNoHiQw /c4i+yDn834w1i7DRkR2m/ilpD+UMEG+ -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:04 2026 by rpki-client