$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa File: b59f5ba0-880c-39fa-9f3d-3044adac6916.roa (raw, json) Hash identifier: gNQ+dtl4r3qMC9IwFZI17FDouh2fKu8ee9h3x5nzhFk= Subject key identifier: A9:17:F6:EA:4B:F8:70:77:6B:80:DC:A5:44:1B:D2:57:39:6F:BB:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7986CA602F80F55BDB61480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397208 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:6c:a6:02:f8:0f:55:bd:b6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4848f963-2741-4848-8c5c-846e988917c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:da:23:22:21:d7:9e:a3:33:11:96:cf:d5: a7:a3:d6:84:d3:2f:3b:f1:66:53:7e:9a:59:63:62: f1:97:e6:bd:33:eb:3f:a1:fd:26:ba:9e:72:cd:2f: a0:dd:13:ac:de:21:2c:57:e7:2f:78:fa:b8:e6:d6: ee:f7:b2:dc:e1:2c:e5:3c:88:2f:76:a6:ef:82:a6: ce:63:7a:89:10:1c:b3:82:3f:04:7b:81:b5:4a:91: 7b:d5:b5:fc:f6:fd:65:c9:d2:9e:9c:f5:c7:fa:94: 93:06:ad:d7:4c:b7:03:4e:38:42:1f:4a:c2:77:50: 75:45:dd:56:f1:be:b9:bd:6e:b1:0d:0d:70:97:e0: c0:b9:8c:fe:f4:1d:8d:e3:cb:65:7a:48:32:dc:68: 33:75:85:0e:3f:0a:fb:e2:3f:60:39:b7:db:cd:20: b5:8d:09:19:f5:ee:30:af:40:82:93:32:9b:13:50: 95:2c:1e:ef:5a:51:3a:c2:87:bd:b2:8d:7c:88:d1: 2a:20:00:15:32:07:f1:f5:52:45:88:0a:72:2f:30: b8:79:4b:0f:aa:7a:05:5c:c0:47:8f:b6:9b:76:2b: 74:17:dc:d5:c1:49:20:5c:9d:c2:76:46:a6:4e:d3: af:40:e0:45:ed:54:62:bd:14:f2:70:2d:69:10:d1: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:17:F6:EA:4B:F8:70:77:6B:80:DC:A5:44:1B:D2:57:39:6F:BB:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b59f5ba0-880c-39fa-9f3d-3044adac6916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:32:d1:91:cb:07:7d:0e:9c:4f:70:0c:37:60:af:63:41:87: ff:40:7b:b5:8f:bc:f3:c9:f0:ab:8a:cf:08:64:b8:42:09:7c: b8:52:e2:60:4a:85:54:40:67:de:6b:1d:55:32:6c:a9:92:16: a5:72:a4:a4:9c:6d:38:80:25:0e:28:ab:9c:ab:00:2f:01:8d: 73:9c:5c:63:12:98:14:9c:3f:8f:3c:a3:ea:6b:f1:cf:2c:c0: 1c:cd:8b:70:c7:f6:aa:12:4a:24:3e:fe:35:b3:2a:52:d7:71: 47:b7:68:92:8a:a9:15:3d:f9:64:15:eb:33:b9:a8:9e:03:bd: 74:e8:7b:d5:22:3e:d1:b7:f1:d1:11:ac:2d:9a:f5:37:57:49: 39:9b:24:65:9f:d2:dc:5a:e9:b1:1f:a4:50:27:44:d6:3c:06: 7f:41:ec:62:8d:e6:16:2b:05:5d:0f:4b:25:65:4f:bd:6f:87: 2d:6e:89:82:4d:7b:be:57:60:04:63:32:97:4f:e7:03:dd:97: 83:68:7d:97:66:56:2d:30:eb:f1:1a:80:bf:77:f8:da:38:3a: 1f:27:40:b5:15:fd:10:b7:e8:13:55:3e:0a:c9:da:c3:a1:a5: 4d:71:0c:50:da:a4:84:b6:82:d9:07:26:d8:b5:91:52:50:e3: 7a:12:a5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGymAvgPVb22FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDg0OGY5NjMtMjc0MS00ODQ4LThjNWMtODQ2ZTk4ODkxN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00PaIyIh156jMxGWz9Wno9aE0y878WZTfppZ Y2Lxl+a9M+s/of0mup5yzS+g3ROs3iEsV+cvePq45tbu97Lc4SzlPIgvdqbvgqbO Y3qJEByzgj8Ee4G1SpF71bX89v1lydKenPXH+pSTBq3XTLcDTjhCH0rCd1B1Rd1W 8b65vW6xDQ1wl+DAuYz+9B2N48tlekgy3GgzdYUOPwr74j9gObfbzSC1jQkZ9e4w r0CCkzKbE1CVLB7vWlE6woe9so18iNEqIAAVMgfx9VJFiApyLzC4eUsPqnoFXMBH j7abdit0F9zVwUkgXJ3CdkamTtOvQOBF7VRivRTycC1pENGyMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkX9upL+HB3a4DcpUQb0lc5b7u9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjU5ZjViYTAtODgwYy0z OWZhLTlmM2QtMzA0NGFkYWM2OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoy0ZHLB30OnE9wDDdgr2NBh/9Ae7WPvPPJ8KuKzwhkuEIJfLhS4mBK hVRAZ95rHVUybKmSFqVypKScbTiAJQ4oq5yrAC8BjXOcXGMSmBScP488o+pr8c8s wBzNi3DH9qoSSiQ+/jWzKlLXcUe3aJKKqRU9+WQV6zO5qJ4DvXToe9UiPtG38dER rC2a9TdXSTmbJGWf0txa6bEfpFAnRNY8Bn9B7GKN5hYrBV0PSyVlT71vhy1uiYJN e75XYARjMpdP5wPdl4NofZdmVi0w6/EagL93+No4Oh8nQLUV/RC36BNVPgrJ2sOh pU1xDFDapIS2gtkHJti1kVJQ43oSpfw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:31 2026 by rpki-client