$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa File: d9df40ab-642c-3d6c-9c68-188c8debb70e.roa (raw, json) Hash identifier: pGwZL5dyX9DBf8bZB/JTCW0pddybzIBqmMqrxhfgBB4= Subject key identifier: 8F:6B:BF:68:26:49:E1:3C:95:D8:D2:41:4B:2D:19:82:84:97:6E:DF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902D57B583E5A38AD05E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396584 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:2d:57:b5:83:e5:a3:8a:d0:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c919867-b3a8-470f-8f98-e497a1bc4df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:38:e5:60:30:cf:dc:b1:c8:f3:98:6c:3e: 3c:ca:b6:8a:e4:f1:4a:b9:e8:c8:d5:c8:44:ff:95: 4d:c1:28:73:a0:7d:e7:aa:e0:fa:31:f9:b0:2f:34: 65:fb:3a:5b:4d:c5:1d:f9:fa:0a:e8:22:d8:9d:c4: 18:47:3d:0c:f5:5b:31:e1:a6:77:2e:81:62:70:54: e9:8f:1c:85:4d:5f:3c:11:b0:d1:42:8b:55:c6:45: 73:0f:fe:8a:22:a9:05:a5:13:3a:ca:84:a7:d5:6a: b7:09:1a:20:fa:c3:08:81:da:fb:a6:03:72:1a:b7: 93:87:ae:5b:a5:83:46:5f:4e:b5:42:6d:13:5c:3d: bd:61:4d:0f:9f:5c:bf:0d:1a:b6:5e:e0:56:a5:ff: d6:64:85:0f:c5:3e:be:11:54:48:0b:f1:c7:c2:c1: bb:59:d3:45:c7:a8:94:9b:80:3d:ff:96:9d:b8:ec: 19:90:12:11:41:17:13:48:98:bc:4d:51:27:1e:22: 84:04:bf:78:16:e9:6d:05:04:be:02:53:da:04:b9: 22:e7:02:a1:d0:62:a2:3d:6c:b6:13:1e:6f:3a:24: 98:67:f0:c4:a2:4e:51:85:1f:b9:08:3c:72:47:8a: c2:26:06:5d:d4:c6:56:2b:99:38:c5:ef:5f:b4:ec: 76:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:BF:68:26:49:E1:3C:95:D8:D2:41:4B:2D:19:82:84:97:6E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9df40ab-642c-3d6c-9c68-188c8debb70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:64:a6:34:d5:12:9c:2e:26:27:3c:f7:2c:4e:53:cc:0c:5a: a8:67:cf:3e:ec:11:ec:69:92:0b:84:99:54:79:e6:b8:bb:a4: fc:c8:36:d8:45:a6:de:a6:d5:ce:3f:8e:92:07:f4:65:19:54: 58:8a:89:55:c9:c6:87:00:04:ab:86:d4:7c:2a:79:4c:aa:a8: bb:82:9f:ed:d9:3c:b8:85:55:11:48:ee:6b:35:5e:21:1f:25: aa:8e:be:c8:af:5d:e3:af:5d:7b:a3:6a:3b:d0:e6:1b:ed:6a: af:9e:c2:d6:cd:86:11:c2:06:08:9a:26:f5:ef:04:c2:92:76: c0:75:24:cf:72:bf:87:f3:07:67:55:ee:06:50:0e:3b:5f:22: 1a:28:df:c5:8f:86:ff:22:a1:54:ec:ea:15:43:b8:40:f5:09: 7b:11:d0:aa:98:0e:df:78:fa:5d:de:23:e7:8a:3c:a6:16:fc: 76:0d:b3:5e:77:37:03:8d:d3:82:57:32:65:19:6d:a9:82:1a: 61:65:8c:f9:ac:37:d7:0e:1f:b7:23:d8:e3:52:e4:24:79:67: 72:8e:d2:35:93:9a:65:1d:a7:b5:a4:00:16:b2:e1:60:78:42: 2b:83:74:7d:56:a0:49:25:ef:4a:77:62:7e:3c:60:2d:5c:6a: 85:7c:5b:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkC1XtYPlo4rQXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGM5MTk4NjctYjNhOC00NzBmLThmOTgtZTQ5N2ExYmM0ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx445WAwz9yxyPOYbD48yraK5PFKuejI1chE /5VNwShzoH3nquD6MfmwLzRl+zpbTcUd+foK6CLYncQYRz0M9Vsx4aZ3LoFicFTp jxyFTV88EbDRQotVxkVzD/6KIqkFpRM6yoSn1Wq3CRog+sMIgdr7pgNyGreTh65b pYNGX061Qm0TXD29YU0Pn1y/DRq2XuBWpf/WZIUPxT6+EVRIC/HHwsG7WdNFx6iU m4A9/5aduOwZkBIRQRcTSJi8TVEnHiKEBL94FultBQS+AlPaBLki5wKh0GKiPWy2 Ex5vOiSYZ/DEok5RhR+5CDxyR4rCJgZd1MZWK5k4xe9ftOx2gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI9rv2gmSeE8ldjSQUstGYKEl27fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDlkZjQwYWItNjQyYy0z ZDZjLTljNjgtMTg4YzhkZWJiNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALZKY01RKcLiYnPPcsTlPMDFqoZ88+7BHsaZILhJlUeea4u6T8yDbY RabeptXOP46SB/RlGVRYiolVycaHAASrhtR8KnlMqqi7gp/t2Ty4hVURSO5rNV4h HyWqjr7Ir13jr117o2o70OYb7WqvnsLWzYYRwgYImib17wTCknbAdSTPcr+H8wdn Ve4GUA47XyIaKN/Fj4b/IqFU7OoVQ7hA9Ql7EdCqmA7fePpd3iPnijymFvx2DbNe dzcDjdOCVzJlGW2pghphZYz5rDfXDh+3I9jjUuQkeWdyjtI1k5plHae1pAAWsuFg eEIrg3R9VqBJJe9Kd2J+PGAtXGqFfFsz -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:08 2026 by rpki-client