$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa File: cf57e6de-89da-30d1-aea8-b79080996615.roa (raw, json) Hash identifier: ZSOtTD11dy3mcQL5kTMMH+JRLa/enndKF/mrffbrUD0= Subject key identifier: F5:B9:9C:0A:CB:D1:EB:29:86:B3:39:C8:F3:5A:2D:F4:68:E3:AA:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790217E1F15BAB2EFE82C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396610 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:21:7e:1f:15:ba:b2:ef:e8:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=07e2b71f-2341-4d54-89b9-a7ad972bf7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:14:f3:a8:e2:b0:5a:ab:02:58:b3:c1:8a: c6:ff:af:36:26:59:ec:84:4f:74:84:e0:c8:db:8f: 00:eb:76:b4:49:83:fa:f9:4e:3b:e1:88:fa:46:ad: 4e:da:72:8e:65:41:6f:48:4d:3b:b7:d4:42:31:8d: a3:80:19:8b:b3:ce:ca:5b:3a:7e:c9:24:c4:b3:66: 04:f1:a5:46:43:75:b2:7a:7a:ea:e7:21:be:d2:91: 97:7e:99:0d:20:51:5e:ea:00:f2:fb:30:b4:bc:c7: 6b:97:df:86:52:1b:b4:47:1e:b2:5f:1a:63:7f:ae: 88:4d:01:a5:dc:00:dc:24:45:bf:78:27:43:f6:28: 8c:d8:2b:28:47:9d:ae:81:e4:2c:b6:92:67:02:e5: 6d:96:e5:5d:a8:7d:23:02:fe:11:10:fc:f7:2e:9f: dc:7f:a6:a4:36:30:df:03:94:28:4e:da:a6:79:27: 0d:49:6d:56:d9:d2:54:74:9e:88:3b:da:f7:eb:30: 64:a0:cf:36:03:3c:c0:ba:2f:c2:d2:2a:0c:0b:40: 09:1e:93:55:23:63:08:2c:a6:3e:6b:7f:e0:68:56: 26:00:0f:28:02:62:f1:77:f8:12:22:01:68:b7:f7: 5b:45:49:e4:6f:71:c8:94:3e:10:ad:2a:fc:8a:34: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B9:9C:0A:CB:D1:EB:29:86:B3:39:C8:F3:5A:2D:F4:68:E3:AA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ec:88:e0:b1:41:3b:72:5d:0c:e0:ef:9d:3a:2e:c6:67:83: f1:72:4e:27:1d:59:5a:36:50:28:79:8a:63:25:34:96:25:ad: 25:fe:94:1b:79:d7:a9:23:05:e7:10:52:63:2f:c1:db:3e:06: 87:44:fc:83:c2:ff:65:9c:a7:91:f9:5e:b3:6a:92:49:79:2d: fd:73:f2:c4:8a:be:23:6c:d1:3e:ac:b5:b2:2d:2c:a1:99:51: 48:7c:fa:86:d6:88:04:bc:9f:2c:e6:07:d7:ce:33:87:d4:af: 68:55:25:8e:6e:f1:8a:3e:61:38:88:b2:78:8a:74:41:0a:cf: ea:ed:ba:7d:1c:83:47:56:4d:b4:69:7b:30:1c:12:ad:ea:5d: 75:37:a0:de:a9:99:ad:09:b6:3c:80:83:2f:83:12:fb:8f:10: ae:ef:3c:6d:75:b7:60:4d:d5:62:f8:bc:9c:d9:11:7f:0b:bd: a7:cb:76:f6:74:89:28:b7:6a:92:04:41:63:4b:e9:4f:5c:30: 8d:78:dc:7f:92:56:81:8f:fd:e1:e1:92:62:3c:e1:a5:7a:30: f6:09:ec:c0:0a:68:f4:b7:09:be:b1:d8:96:2e:37:23:76:4d: 70:ee:7d:1b:06:2b:6f:a1:84:30:2d:cf:9c:d0:fe:a9:73:26: ac:4d:68:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCF+HxW6su/oLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDdlMmI3MWYtMjM0MS00ZDU0LTg5YjktYTdhZDk3MmJmN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp4U86jisFqrAlizwYrG/682JlnshE90hODI 248A63a0SYP6+U474Yj6Rq1O2nKOZUFvSE07t9RCMY2jgBmLs87KWzp+ySTEs2YE 8aVGQ3Wyenrq5yG+0pGXfpkNIFFe6gDy+zC0vMdrl9+GUhu0Rx6yXxpjf66ITQGl 3ADcJEW/eCdD9iiM2CsoR52ugeQstpJnAuVtluVdqH0jAv4REPz3Lp/cf6akNjDf A5QoTtqmeScNSW1W2dJUdJ6IO9r36zBkoM82AzzAui/C0ioMC0AJHpNVI2MILKY+ a3/gaFYmAA8oAmLxd/gSIgFot/dbRUnkb3HIlD4QrSr8ijSldwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPW5nArL0esphrM5yPNaLfRo46rbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y1N2U2ZGUtODlkYS0z MGQxLWFlYTgtYjc5MDgwOTk2NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC7IjgsUE7cl0M4O+dOi7GZ4Pxck4nHVlaNlAoeYpjJTSWJa0l/pQb edepIwXnEFJjL8HbPgaHRPyDwv9lnKeR+V6zapJJeS39c/LEir4jbNE+rLWyLSyh mVFIfPqG1ogEvJ8s5gfXzjOH1K9oVSWObvGKPmE4iLJ4inRBCs/q7bp9HINHVk20 aXswHBKt6l11N6DeqZmtCbY8gIMvgxL7jxCu7zxtdbdgTdVi+Lyc2RF/C72ny3b2 dIkot2qSBEFjS+lPXDCNeNx/klaBj/3h4ZJiPOGlejD2CezACmj0twm+sdiWLjcj dk1w7n0bBitvoYQwLc+c0P6pcyasTWjb -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:52 2026 by rpki-client