$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa File: b8dfb07e-3184-3414-9556-d94b7275778b.roa (raw, json) Hash identifier: BjPlTvMMyo7tzB8kMhWG82FZC22GCPsQBkxaGEMd+iE= Subject key identifier: 01:43:25:B5:BB:AE:48:F0:87:28:86:AF:AF:B8:A8:86:83:C8:99:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED002003DABAFE99D3BD22790 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 198.41.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:00:3d:ab:af:e9:9d:3b:d2:27:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=ae8d63af-48ce-4500-b722-7386d5cf5dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:25:11:bb:40:f0:14:2b:18:50:e6:fc:78: f8:90:de:6e:b0:35:85:ba:0f:48:8b:33:e2:0c:09: c0:0d:09:d3:a5:ec:0c:48:36:db:65:f3:67:02:90: ba:b4:a5:45:f2:5d:32:1a:4d:9c:de:46:09:a9:4d: 61:42:0e:98:54:a5:88:39:72:d9:74:3d:f2:e0:13: f0:32:4c:d2:66:65:fa:bc:5e:13:2e:1b:28:cf:00: 31:2f:a3:a1:51:47:aa:8e:3e:0c:7e:76:df:2a:46: 4f:6d:57:31:56:b5:f8:88:00:32:03:f0:70:72:e9: 85:51:cf:8e:2f:4d:09:44:07:29:bf:d9:c6:99:ea: c3:d0:b7:93:97:0d:14:60:03:cb:89:f8:0e:bd:d7: 0e:49:c4:29:dd:1b:70:20:e9:2c:7b:d4:be:70:50: ef:c4:8a:0d:2b:77:6e:73:c5:58:fa:3b:98:e1:fa: e1:af:9f:34:22:3e:36:87:70:d7:fc:b4:b1:91:e8: 6e:fd:b4:95:b2:a4:b9:a2:2f:c9:f7:a6:e6:64:e0: e5:28:8e:fa:2e:4b:d3:8e:fc:6a:88:2c:f4:b5:11: 02:05:11:34:b7:aa:a1:b6:7d:e4:4b:28:e1:1c:e8: ff:db:23:18:5d:1b:50:6e:91:07:e4:b3:c3:ad:b8: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:43:25:B5:BB:AE:48:F0:87:28:86:AF:AF:B8:A8:86:83:C8:99:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b8dfb07e-3184-3414-9556-d94b7275778b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4d:0b:59:a2:79:7b:c1:73:88:3d:b5:00:c3:2f:c8:0a:21: ea:27:4e:9e:fa:c2:cb:5d:9a:38:9b:4d:8a:c6:77:0a:05:13: 9f:c6:c0:87:ac:03:8a:5e:00:94:57:d2:31:4a:99:ca:c4:99: 6a:64:f3:32:26:bc:b1:b6:51:c4:23:d1:22:77:19:78:32:08: bf:4a:29:80:e6:09:7f:3e:71:c2:e7:39:91:e6:9e:d5:5a:d4: 15:ac:fb:db:3a:88:84:dc:35:d1:1a:7d:41:1b:6a:58:14:9f: eb:ba:dd:a4:a5:67:8c:5b:3b:d4:11:11:2e:c1:49:1c:a8:c5: bb:dd:1a:dd:27:e3:ed:50:87:a1:81:55:06:bb:4f:a1:fd:85: ea:36:b1:94:66:30:a3:97:b2:86:44:1f:72:2c:d6:9f:ae:45: 46:6e:50:53:11:55:d9:66:49:af:f2:aa:b0:40:81:42:d2:f3: 20:1e:f1:4f:0f:a9:ee:78:9d:64:e9:83:a3:2d:de:74:ca:dc: d9:f6:a0:23:a4:5b:6a:ac:ec:74:11:49:df:e4:93:63:56:09: a3:ee:e6:d7:b5:6e:1b:e7:15:29:f8:6b:b1:73:e3:e0:61:a2: 70:5b:44:cc:3f:97:b9:ca:7d:97:3c:26:8c:7e:c3:ca:27:81: 1c:ad:32:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgA9q6/pnTvSJ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YWU4ZDYzYWYtNDhjZS00NTAwLWI3MjItNzM4NmQ1Y2Y1ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSMlEbtA8BQrGFDm/Hj4kN5usDWFug9IizPi DAnADQnTpewMSDbbZfNnApC6tKVF8l0yGk2c3kYJqU1hQg6YVKWIOXLZdD3y4BPw MkzSZmX6vF4TLhsozwAxL6OhUUeqjj4MfnbfKkZPbVcxVrX4iAAyA/BwcumFUc+O L00JRAcpv9nGmerD0LeTlw0UYAPLifgOvdcOScQp3RtwIOkse9S+cFDvxIoNK3du c8VY+juY4frhr580Ij42h3DX/LSxkehu/bSVsqS5oi/J96bmZODlKI76LkvTjvxq iCz0tRECBRE0t6qhtn3kSyjhHOj/2yMYXRtQbpEH5LPDrbhRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFDJbW7rkjwhyiGr6+4qIaDyJn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjhkZmIwN2UtMzE4NC0z NDE0LTk1NTYtZDk0YjcyNzU3NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxikCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5NC1mieXvBc4g9tQDDL8gKIeonTp76wstdmjibTYrGdwoFE5/GwIes A4peAJRX0jFKmcrEmWpk8zImvLG2UcQj0SJ3GXgyCL9KKYDmCX8+ccLnOZHmntVa 1BWs+9s6iITcNdEafUEbalgUn+u63aSlZ4xbO9QRES7BSRyoxbvdGt0n4+1Qh6GB VQa7T6H9heo2sZRmMKOXsoZEH3Is1p+uRUZuUFMRVdlmSa/yqrBAgULS8yAe8U8P qe54nWTpg6Mt3nTK3Nn2oCOkW2qs7HQRSd/kk2NWCaPu5te1bhvnFSn4a7Fz4+Bh onBbRMw/l7nKfZc8Jox+w8ongRytMpc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:50 2026 by rpki-client