$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa File: af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa (raw, json) Hash identifier: /BYqV4Ga7TC2+vV/n/KNm4f+hpljFCw549pCsYL0w2I= Subject key identifier: FC:00:7B:3C:C4:B0:01:BB:92:25:EC:DC:A3:C4:2F:0A:A9:66:1B:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797F1906598FE5388F5A080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397195 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:f1:90:65:98:fe:53:88:f5:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=34b9f287-f4cd-4d6e-982f-a40a66eccd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:e1:fd:e6:22:30:45:83:02:cd:ec:a8:65: ee:62:fe:f4:44:46:bf:d7:8f:53:af:e9:f7:55:9b: a5:5f:09:77:31:1d:2b:bb:69:bf:a2:c2:72:4f:97: 16:4b:38:0e:c6:2d:c6:3c:31:8f:2b:f8:1d:84:96: d8:c7:9c:83:05:80:13:9d:55:25:ab:65:9c:e7:66: a1:b3:e4:17:11:0f:dc:36:fe:18:8e:83:93:c9:97: fd:f6:4c:fe:ee:74:cc:fa:ba:f8:14:f9:55:84:3f: d8:65:37:1c:37:ff:9b:6a:6e:74:44:f0:10:f2:0e: 2c:1a:59:c6:ec:47:0d:a6:47:a4:58:50:22:a4:04: 32:e8:4a:33:9b:28:95:f5:53:08:1d:de:48:7f:a2: 76:12:bc:a1:2f:90:8b:72:0c:e3:b3:33:b4:3c:1a: 4d:35:0b:19:0c:3d:9f:e9:7b:81:54:fb:9f:f1:0b: 6c:11:b5:2c:40:7f:93:95:74:e6:f8:62:4a:b3:48: 1a:70:09:e8:5e:dc:ba:e0:11:b1:d9:b1:af:9f:f9: cc:92:77:f8:3a:b8:53:1d:21:9a:4e:1a:2f:eb:4d: ac:50:62:72:84:68:44:c7:48:96:79:5e:0b:28:83: 23:5b:ab:0a:42:e4:af:a5:27:7b:5f:e2:30:99:5b: 5d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:7B:3C:C4:B0:01:BB:92:25:EC:DC:A3:C4:2F:0A:A9:66:1B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5a:ef:65:68:8d:17:63:02:5f:9b:81:ac:a9:0e:a2:a0:09: a6:ef:a0:8b:da:b0:aa:08:39:c0:d6:68:cf:0b:c0:84:db:b9: 7c:b4:eb:1e:20:ef:4f:0e:ce:ef:92:bb:ee:07:2a:07:5f:b2: bb:14:74:09:d1:ab:6f:97:de:3d:31:c2:87:89:d4:98:2d:b4: 7f:2e:23:2a:2a:bb:83:17:03:4f:9f:b8:fc:3b:52:a4:a4:3b: 4b:d2:a4:99:f3:b2:01:e4:34:49:4e:ca:b0:b0:67:cf:5a:d7: af:cc:69:aa:ae:77:c8:d9:5d:cd:35:f6:37:af:a7:f6:18:e0: ba:e5:50:66:be:0d:0c:ad:54:55:86:7c:5d:36:d2:94:a9:ea: ce:b3:69:7a:95:58:c8:e3:b5:8a:f5:29:78:37:d0:5a:69:22: d3:97:d7:8c:68:db:2c:4e:98:24:19:9e:22:bb:50:b4:60:12: ff:6e:66:57:2c:0d:55:8f:26:f5:51:83:b1:1e:24:26:ad:15: c8:06:c0:73:a5:e8:d9:38:78:a4:2f:68:8e:cc:aa:1b:ef:bc: 2d:68:cf:4a:ec:a5:33:fb:83:81:6f:f6:41:3c:dc:24:fc:d7: c4:95:85:e1:7a:06:4e:eb:3e:af:cd:73:02:ea:1a:5b:1b:ce: 56:4a:8c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl/GQZZj+U4j1oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzRiOWYyODctZjRjZC00ZDZlLTk4MmYtYTQwYTY2ZWNjZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8zh/eYiMEWDAs3sqGXuYv70REa/149Tr+n3 VZulXwl3MR0ru2m/osJyT5cWSzgOxi3GPDGPK/gdhJbYx5yDBYATnVUlq2Wc52ah s+QXEQ/cNv4YjoOTyZf99kz+7nTM+rr4FPlVhD/YZTccN/+bam50RPAQ8g4sGlnG 7EcNpkekWFAipAQy6EozmyiV9VMIHd5If6J2EryhL5CLcgzjszO0PBpNNQsZDD2f 6XuBVPuf8QtsEbUsQH+TlXTm+GJKs0gacAnoXty64BGx2bGvn/nMknf4OrhTHSGa Thov602sUGJyhGhEx0iWeV4LKIMjW6sKQuSvpSd7X+IwmVtdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwAezzEsAG7kiXs3KPELwqpZhuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjM1ZWItOGUzOS0z NTk5LWJjYmQtZDZhZjdkOTcwOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBa72VojRdjAl+bgaypDqKgCabvoIvasKoIOcDWaM8LwITbuXy06x4g 708Ozu+Su+4HKgdfsrsUdAnRq2+X3j0xwoeJ1JgttH8uIyoqu4MXA0+fuPw7UqSk O0vSpJnzsgHkNElOyrCwZ89a16/Maaqud8jZXc019jevp/YY4LrlUGa+DQytVFWG fF020pSp6s6zaXqVWMjjtYr1KXg30FppItOX14xo2yxOmCQZniK7ULRgEv9uZlcs DVWPJvVRg7EeJCatFcgGwHOl6Nk4eKQvaI7MqhvvvC1oz0rspTP7g4Fv9kE83CT8 18SVheF6Bk7rPq/NcwLqGlsbzlZKjBQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:23 2026 by rpki-client