$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa File: b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa (raw, json) Hash identifier: 0v2Eyr6jjl/GxGJRYKXv+LSrDOZuv2IzEdGm/8giLfg= Subject key identifier: 55:8E:14:55:7F:A8:AE:F5:A3:75:A1:33:6F:26:E2:CC:D1:31:61:B6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA797EDFB2270C34EA11B0A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36632 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:ed:fb:22:70:c3:4e:a1:1b:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3861c30e-1795-434b-9707-a896d491f220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a1:e5:9e:55:b4:48:5b:2b:1c:71:a1:2d:1e: 79:9c:34:5b:c8:f3:09:1a:67:1e:9c:63:c0:69:81: e7:53:67:88:36:b0:dc:46:59:75:f4:6d:a2:ab:e2: e4:bd:d0:33:71:94:af:08:97:fb:5c:e2:dc:02:99: 45:e9:86:73:cd:19:aa:2d:14:42:10:62:8d:2a:48: 0e:e2:31:e7:39:9b:91:f8:5a:dd:4c:7f:7e:fb:2b: e9:0f:a3:22:50:ed:e4:dd:1a:e9:d6:01:b5:15:c3: 89:f1:e9:db:3d:0b:16:17:e5:e4:17:14:e2:60:bc: b4:94:f7:af:92:70:38:a8:34:52:06:5a:3a:32:da: 57:61:f9:0c:86:1d:71:ea:ca:85:01:51:58:61:9c: 08:df:34:e3:07:13:00:75:3f:d1:63:1a:5d:73:90: 64:a8:00:98:84:53:72:76:b5:13:34:1a:cf:97:4a: 08:d9:d2:d2:57:be:55:1a:38:b1:71:a2:e5:81:d0: e7:4a:4d:5d:f0:61:8d:b8:84:58:61:62:6d:09:c7: f9:17:1e:09:af:ae:58:26:d7:44:c4:0e:4f:db:ae: 73:e6:1f:74:46:ef:d0:cc:71:d0:8d:d8:82:cc:16: 7c:31:26:7b:8b:36:58:e9:76:6e:cc:0d:30:4c:54: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:14:55:7F:A8:AE:F5:A3:75:A1:33:6F:26:E2:CC:D1:31:61:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b689e2a0-7356-3cc0-8e11-4f0905784cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:64:fc:65:1b:00:7f:fa:29:19:a6:49:4d:31:2f:0e:ab:ad: 76:9a:a3:18:42:dc:84:b0:f8:4e:25:e0:35:2f:1b:e3:42:80: a6:f1:27:e0:b6:b9:ea:f2:0d:f8:50:3c:19:80:cf:14:3e:43: 15:80:92:96:11:26:ed:92:2c:63:8d:86:df:aa:d6:9c:cf:28: ea:c3:1b:0c:fb:c2:6f:98:2a:05:2b:fc:fb:69:4a:d9:7d:e3: 2c:90:3c:c1:b5:ee:cd:c3:02:80:62:ad:aa:88:50:94:0d:fa: 88:16:ce:5a:d8:fa:71:e4:eb:c0:10:e6:d4:fb:93:44:cb:33: d0:b9:80:cf:6c:12:1c:0f:14:34:fa:54:91:5f:6a:66:cd:4a: 64:3d:43:c5:44:17:0b:99:ee:61:ab:c2:9e:5d:6b:23:c0:aa: e2:2e:94:8d:be:23:65:9d:1f:af:d1:dc:77:d4:19:6f:6b:6c: e5:53:b6:dd:dc:96:88:c5:dd:17:73:97:1b:c2:2c:d8:3c:ea: be:c1:19:88:6f:69:7c:fa:b0:64:94:95:96:8e:0d:42:98:7c: bd:90:ab:a7:81:43:3e:d0:f7:4d:fe:cc:be:8d:30:6e:4b:46: 15:09:5a:bc:90:00:af:24:8f:74:52:b6:f8:b7:77:04:f0:1e: d7:10:5b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+37InDDTqEbCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Mzg2MWMzMGUtMTc5NS00MzRiLTk3MDctYTg5NmQ0OTFmMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaHlnlW0SFsrHHGhLR55nDRbyPMJGmcenGPA aYHnU2eINrDcRll19G2iq+LkvdAzcZSvCJf7XOLcAplF6YZzzRmqLRRCEGKNKkgO 4jHnOZuR+FrdTH9++yvpD6MiUO3k3Rrp1gG1FcOJ8enbPQsWF+XkFxTiYLy0lPev knA4qDRSBlo6MtpXYfkMhh1x6sqFAVFYYZwI3zTjBxMAdT/RYxpdc5BkqACYhFNy drUTNBrPl0oI2dLSV75VGjixcaLlgdDnSk1d8GGNuIRYYWJtCcf5Fx4Jr65YJtdE xA5P265z5h90Ru/QzHHQjdiCzBZ8MSZ7izZY6XZuzA0wTFS09wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWOFFV/qK71o3WhM28m4szRMWG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY4OWUyYTAtNzM1Ni0z Y2MwLThlMTEtNGYwOTA1Nzg0Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBk/GUbAH/6KRmmSU0xLw6rrXaaoxhC3ISw+E4l4DUvG+NCgKbxJ+C2 ueryDfhQPBmAzxQ+QxWAkpYRJu2SLGONht+q1pzPKOrDGwz7wm+YKgUr/PtpStl9 4yyQPMG17s3DAoBiraqIUJQN+ogWzlrY+nHk68AQ5tT7k0TLM9C5gM9sEhwPFDT6 VJFfambNSmQ9Q8VEFwuZ7mGrwp5dayPAquIulI2+I2WdH6/R3HfUGW9rbOVTtt3c lojF3RdzlxvCLNg86r7BGYhvaXz6sGSUlZaODUKYfL2Qq6eBQz7Q903+zL6NMG5L RhUJWryQAK8kj3RStvi3dwTwHtcQW1o= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:45 2026 by rpki-client