$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa File: c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa (raw, json) Hash identifier: Hi6CP1QPGo7n5OyQsSX0nkryJfPzy4aDHMqCB5IdB8A= Subject key identifier: D0:7B:95:96:B2:37:3E:CA:FC:26:05:12:51:D0:19:1A:01:BB:7E:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7987060178BABBBCC5ED740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396592 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:70:60:17:8b:ab:bb:cc:5e:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1f81275-20c6-4c55-9b43-9bd6add61a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:62:4f:27:f9:25:64:a4:ba:96:68:9a:23: 8d:d6:6e:61:4e:33:44:4e:50:6c:5d:cf:ed:2f:04: ce:1d:c9:27:39:92:27:68:80:c0:dd:e8:b1:dc:80: e5:dc:c1:43:c9:2b:4c:1a:44:1e:2d:85:7e:c9:24: cb:90:00:b2:75:a6:12:eb:b6:36:a2:8a:59:10:12: 9a:5b:b8:b8:af:69:ee:39:6b:fe:4b:52:8a:9a:32: fa:14:3f:b0:69:78:aa:5c:69:53:0f:3e:27:64:1e: eb:5e:b3:45:91:9f:7c:3b:ad:a2:9f:a9:fb:11:5d: fd:b7:ec:25:27:cf:fb:55:42:b9:a4:a9:08:80:ee: 91:f4:ab:96:d7:e5:6c:f7:89:21:77:5c:00:1a:63: df:c6:51:3f:2d:04:cf:14:d2:87:ce:3f:78:18:84: 43:07:65:de:bb:2f:84:01:c4:ff:23:91:da:a2:17: f9:ea:04:4c:f1:5e:df:10:b7:13:71:29:c2:19:af: 97:b5:c9:be:0d:d5:ca:7f:9f:39:70:84:12:27:74: 4b:5c:01:0e:4d:6d:7e:bb:98:e9:35:18:58:b6:3a: 7f:75:1f:12:44:bf:6d:9b:c8:33:75:cd:19:f7:1a: 87:c7:32:49:a4:01:64:3f:ee:29:47:7d:7b:70:02: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:95:96:B2:37:3E:CA:FC:26:05:12:51:D0:19:1A:01:BB:7E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8570da6-3a07-356b-a5ba-08adaa29e3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b8:b7:5c:e1:83:3a:57:67:59:5a:c0:61:53:af:72:17:cf: 5d:ef:16:1f:ab:43:e7:09:bf:2f:79:96:f6:6c:39:96:8e:19: 1c:c9:b1:61:7d:0c:21:8a:4e:7c:13:40:6c:33:2d:ca:8a:16: 57:83:2f:2b:82:35:f3:67:30:f9:a8:90:3b:3f:75:12:4b:a2: 63:a3:97:c2:b7:70:a7:c0:94:bf:96:c6:da:3f:9d:dc:a3:a8: ff:81:fc:e6:e5:58:bf:11:a6:c2:0e:80:8b:a7:65:1c:7f:5b: 45:62:34:3b:0a:b4:16:aa:a2:77:17:77:30:87:f0:ec:5e:4b: 9d:11:15:af:a6:34:98:eb:e5:9a:4a:72:34:87:bb:fc:96:b2: 38:bc:0c:c2:fb:dd:03:4d:33:cb:37:f7:10:db:f3:29:2a:55: 22:c5:e6:b1:2f:71:49:4d:dc:61:9f:81:b5:23:14:61:81:e6: a1:5c:6d:fd:7f:68:8d:11:b0:cd:8e:9c:f1:58:01:25:cc:0a: c5:71:7b:0f:fe:89:f0:82:12:e7:14:ad:33:ed:89:dc:3f:75: db:9b:01:ac:e8:fb:74:bf:ff:8e:d0:1c:c0:30:a9:fa:aa:e3: 27:25:84:50:73:8a:4b:12:d6:5a:85:63:05:79:cf:f6:d8:24: 90:8b:c2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHBgF4uru8xe10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFmODEyNzUtMjBjNi00YzU1LTliNDMtOWJkNmFkZDYxYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZhiTyf5JWSkupZomiON1m5hTjNETlBsXc/t LwTOHcknOZInaIDA3eix3IDl3MFDyStMGkQeLYV+ySTLkACydaYS67Y2oopZEBKa W7i4r2nuOWv+S1KKmjL6FD+waXiqXGlTDz4nZB7rXrNFkZ98O62in6n7EV39t+wl J8/7VUK5pKkIgO6R9KuW1+Vs94khd1wAGmPfxlE/LQTPFNKHzj94GIRDB2Xeuy+E AcT/I5Haohf56gRM8V7fELcTcSnCGa+Xtcm+DdXKf585cIQSJ3RLXAEOTW1+u5jp NRhYtjp/dR8SRL9tm8gzdc0Z9xqHxzJJpAFkP+4pR317cAKDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB7lZayNz7K/CYFElHQGRoBu37PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1NzBkYTYtM2EwNy0z NTZiLWE1YmEtMDhhZGFhMjllM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG4t1zhgzpXZ1lawGFTr3IXz13vFh+rQ+cJvy95lvZsOZaOGRzJsWF9 DCGKTnwTQGwzLcqKFleDLyuCNfNnMPmokDs/dRJLomOjl8K3cKfAlL+Wxto/ndyj qP+B/OblWL8RpsIOgIunZRx/W0ViNDsKtBaqoncXdzCH8OxeS50RFa+mNJjr5ZpK cjSHu/yWsji8DML73QNNM8s39xDb8ykqVSLF5rEvcUlN3GGfgbUjFGGB5qFcbf1/ aI0RsM2OnPFYASXMCsVxew/+ifCCEucUrTPtidw/ddubAazo+3S//47QHMAwqfqq 4yclhFBziksS1lqFYwV5z/bYJJCLwmY= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:27 2026 by rpki-client