$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa File: d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa (raw, json) Hash identifier: s0s2EuxjwYT4DyToGz+15WRXWbdP/dxdY2+glCY+VFM= Subject key identifier: 93:2E:A5:AA:7B:7F:A2:70:72:73:3D:C5:1A:36:58:18:96:86:55:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79871BB97B762AFC72FB800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396545 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:71:bb:97:b7:62:af:c7:2f:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7254e398-edf2-4aca-8469-655f32e3cb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:34:96:da:6e:82:61:16:0f:d1:81:0a:c6: 28:56:d5:f3:4b:0f:6d:67:c0:1d:7c:4a:ab:f6:3c: ae:cf:64:cc:02:1e:90:e5:72:20:32:c3:2f:99:77: 07:15:01:51:da:7f:bd:66:da:87:d2:b2:74:f5:c8: 35:03:6b:d3:86:1e:da:b1:8c:6f:da:8a:f6:63:00: 7b:d2:0b:f8:da:ce:6b:d8:b0:60:84:1c:28:e4:88: 2c:c4:7e:fd:08:be:93:99:f1:06:4b:be:f3:46:dc: 88:74:df:8b:b6:f6:4a:97:1b:54:5d:49:3d:9d:13: 07:d5:7d:f0:10:89:48:0b:9c:80:a8:ff:1b:80:10: bd:a8:97:3f:f0:05:34:47:e0:e7:11:c1:7b:18:8b: 5e:e1:4e:f9:2a:54:49:4c:0c:c2:ad:48:e3:77:ef: 9b:3a:0d:ca:0d:37:e3:dc:57:ff:83:b5:47:7c:9e: c9:da:f9:0a:93:81:36:ed:21:f8:12:7a:9c:17:5c: 9f:21:13:2e:d2:ef:51:3f:b0:7e:80:03:ab:13:41: fa:30:75:4e:83:30:1a:b2:1e:8f:da:13:bd:20:4f: f0:9f:30:3a:03:ee:68:35:85:c3:f0:35:cd:15:57: 87:03:e3:af:0c:d6:d8:6f:61:48:75:bd:09:ee:39: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:A5:AA:7B:7F:A2:70:72:73:3D:C5:1A:36:58:18:96:86:55:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:33:74:5d:15:89:72:51:49:31:c1:37:63:59:b2:d9:82:75: f6:08:0d:3b:8b:f5:c5:2b:71:e4:08:f6:7b:a5:4d:76:87:a6: 95:3d:a6:97:95:24:d9:bb:38:82:55:50:19:b4:88:68:cf:4c: dc:18:74:cc:e5:af:a9:60:d1:96:a5:2e:85:f6:ef:66:e0:93: 79:9b:14:0f:3c:2b:b0:38:6d:15:ce:23:7d:8b:10:4e:3e:3a: d6:e4:b9:b0:40:6e:d9:91:4b:2a:58:d8:2c:c1:01:c5:e0:9e: 34:b5:ff:48:17:d9:7a:c9:bd:00:da:a8:9b:83:1e:34:bc:91: e0:16:f9:1f:e9:53:bd:42:f3:82:00:7f:c2:95:37:54:e0:74: b7:cd:19:54:31:42:cb:44:49:4d:5d:84:1e:0c:71:ba:fe:44: e9:e1:fd:d1:2c:b2:0a:ca:6e:89:64:bc:0f:5e:28:7e:25:da: 68:9f:9f:e2:02:ac:a8:fe:de:7c:4d:f4:27:87:33:71:c8:7e: f9:bc:a7:d0:74:e7:57:fe:8c:5a:85:d6:2d:25:34:2e:9d:a8: 96:c5:70:6d:dd:cd:66:14:68:b6:f0:a8:2a:2d:05:49:67:22: f7:d7:c0:12:15:f0:68:ec:95:8c:d0:44:3d:f1:bc:77:6a:a2: 54:54:6b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHG7l7dir8cvuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzI1NGUzOTgtZWRmMi00YWNhLTg0NjktNjU1ZjMyZTNjYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaA0ltpugmEWD9GBCsYoVtXzSw9tZ8AdfEqr 9jyuz2TMAh6Q5XIgMsMvmXcHFQFR2n+9ZtqH0rJ09cg1A2vThh7asYxv2or2YwB7 0gv42s5r2LBghBwo5IgsxH79CL6TmfEGS77zRtyIdN+LtvZKlxtUXUk9nRMH1X3w EIlIC5yAqP8bgBC9qJc/8AU0R+DnEcF7GIte4U75KlRJTAzCrUjjd++bOg3KDTfj 3Ff/g7VHfJ7J2vkKk4E27SH4EnqcF1yfIRMu0u9RP7B+gAOrE0H6MHVOgzAash6P 2hO9IE/wnzA6A+5oNYXD8DXNFVeHA+OvDNbYb2FIdb0J7jnazQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMupap7f6JwcnM9xRo2WBiWhlWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA1NWY5ODktOTU5Yy0z Y2RjLWIxZGQtYmY4ZGVjZmRmNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEzdF0ViXJRSTHBN2NZstmCdfYIDTuL9cUrceQI9nulTXaHppU9ppeV JNm7OIJVUBm0iGjPTNwYdMzlr6lg0ZalLoX272bgk3mbFA88K7A4bRXOI32LEE4+ OtbkubBAbtmRSypY2CzBAcXgnjS1/0gX2XrJvQDaqJuDHjS8keAW+R/pU71C84IA f8KVN1TgdLfNGVQxQstESU1dhB4Mcbr+ROnh/dEssgrKbolkvA9eKH4l2mifn+IC rKj+3nxN9CeHM3HIfvm8p9B051f+jFqF1i0lNC6dqJbFcG3dzWYUaLbwqCotBUln IvfXwBIV8GjslYzQRD3xvHdqolRUa+M= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:38 2026 by rpki-client