$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa File: da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa (raw, json) Hash identifier: reVFcvNd8NCngE+IFYZOcrn5+Rnc+SPspZqDqwUgtDU= Subject key identifier: 03:A8:9C:0C:52:44:43:20:53:73:5F:6B:CB:B4:9A:E2:60:72:36:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7900035E5BC3C89DF96A540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396551 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:00:35:e5:bc:3c:89:df:96:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=97996808-68fb-47a3-a175-f7107f659038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8b:ec:85:01:c1:28:c2:e6:16:72:63:0a:6f: 02:87:08:8e:98:be:dc:f7:be:42:88:02:60:4a:36: a0:ec:f2:1d:a1:6a:c2:fd:04:05:d3:4b:81:91:c8: 06:6a:79:89:d7:8d:8c:55:35:70:df:88:ce:ae:81: b0:ae:b9:56:fd:27:13:1f:63:1a:58:9e:fc:a1:bf: 3d:08:78:72:b1:3e:96:4a:6c:8d:c0:75:2e:a4:8f: 80:c2:c3:11:b9:69:55:26:21:3b:c0:f6:0c:98:74: de:68:a0:5d:6b:06:75:63:68:aa:21:ef:e1:6d:ce: aa:97:25:c4:e7:71:a4:de:34:75:b1:fc:a1:ae:fb: 93:9a:a3:c0:e4:11:06:e3:a8:62:11:12:4c:6a:4b: c2:54:53:f3:95:99:36:45:c9:23:b0:0d:18:84:8a: d0:f7:30:c8:1e:d5:80:ed:a2:18:bc:a6:b6:c9:9a: 1f:24:b7:fe:82:11:06:d9:e3:90:87:3d:7f:7e:93: 84:f5:64:61:a5:84:82:7d:13:af:99:57:35:a0:4b: f3:4e:db:a8:a9:b8:9a:95:88:22:de:3b:85:f9:3f: 2b:c0:bd:f7:b9:73:cd:f5:43:aa:ae:cb:f8:eb:bf: 2d:7d:e6:35:f7:23:4e:9c:1e:1b:50:ae:71:a3:e3: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:9C:0C:52:44:43:20:53:73:5F:6B:CB:B4:9A:E2:60:72:36:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da3cc7cb-97de-37a7-b7f9-83b8e6f12376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a8:b3:8e:af:19:2e:d1:df:61:c5:e6:2d:cf:7c:4c:d7:26: 0d:ac:07:82:6c:7b:a0:5f:5a:b9:c2:f1:1b:9e:eb:f7:fe:b3: ab:9e:ad:de:f7:bb:d4:41:4c:28:1c:12:e5:27:17:1d:22:48: f4:3a:03:5d:9b:b2:ce:de:b5:32:55:9e:f6:ab:24:e5:b7:8f: ac:4c:73:e5:48:e5:94:e2:37:63:58:2b:84:1a:51:70:71:96: 7b:65:72:60:ff:33:5f:d0:60:67:ce:5d:ba:62:86:81:27:2d: 67:8b:5e:fb:f6:8f:d7:93:bf:d8:5f:24:59:e1:73:58:b9:a3: 23:6e:99:d5:ec:6e:08:53:46:dd:6d:36:22:c0:5a:73:2e:fc: 93:84:8e:16:b0:92:20:61:72:1a:64:11:af:bb:1f:bb:16:eb: 11:3d:4e:5c:bc:36:1d:58:48:61:13:96:9a:55:b9:aa:49:99: 1a:29:84:5e:93:93:89:2d:92:eb:ea:7b:15:fa:33:aa:50:f1: 99:5b:9c:55:59:bc:76:d9:a3:d9:1f:9e:ab:c6:31:69:c0:6a: 4f:ae:c1:da:20:fd:a6:73:1a:9c:9c:40:80:dc:9c:18:ca:17: 10:9f:c5:db:52:15:c5:ae:a6:ef:74:30:79:b8:f7:a8:0a:16: 1f:49:c0:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAA15bw8id+WpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTc5OTY4MDgtNjhmYi00N2EzLWExNzUtZjcxMDdmNjU5MDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgovshQHBKMLmFnJjCm8ChwiOmL7c975CiAJg Sjag7PIdoWrC/QQF00uBkcgGanmJ142MVTVw34jOroGwrrlW/ScTH2MaWJ78ob89 CHhysT6WSmyNwHUupI+AwsMRuWlVJiE7wPYMmHTeaKBdawZ1Y2iqIe/hbc6qlyXE 53Gk3jR1sfyhrvuTmqPA5BEG46hiERJMakvCVFPzlZk2RckjsA0YhIrQ9zDIHtWA 7aIYvKa2yZofJLf+ghEG2eOQhz1/fpOE9WRhpYSCfROvmVc1oEvzTtuoqbialYgi 3juF+T8rwL33uXPN9UOqrsv4678tfeY19yNOnB4bUK5xo+NX0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAOonAxSREMgU3Nfa8u0muJgcjbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEzY2M3Y2ItOTdkZS0z N2E3LWI3ZjktODNiOGU2ZjEyMzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOqLOOrxku0d9hxeYtz3xM1yYNrAeCbHugX1q5wvEbnuv3/rOrnq3e 97vUQUwoHBLlJxcdIkj0OgNdm7LO3rUyVZ72qyTlt4+sTHPlSOWU4jdjWCuEGlFw cZZ7ZXJg/zNf0GBnzl26YoaBJy1ni1779o/Xk7/YXyRZ4XNYuaMjbpnV7G4IU0bd bTYiwFpzLvyThI4WsJIgYXIaZBGvux+7FusRPU5cvDYdWEhhE5aaVbmqSZkaKYRe k5OJLZLr6nsV+jOqUPGZW5xVWbx22aPZH56rxjFpwGpPrsHaIP2mcxqcnECA3JwY yhcQn8XbUhXFrqbvdDB5uPeoChYfScBe -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:59 2026 by rpki-client