$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa File: daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa (raw, json) Hash identifier: SKZNxdtUvlDczvvEA447DZWv3XpYilz5dHfFT5OmUmk= Subject key identifier: 4C:41:1F:79:0F:A7:CA:6A:99:65:95:C8:F0:AD:E1:A3:C5:D2:23:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79043711665BF34091C2380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396546 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:43:71:16:65:bf:34:09:1c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=af48979b-a103-46a0-bc6c-969e1577c217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:49:d5:aa:d6:c0:54:05:d9:7b:db:c9:b2: 26:ab:24:f8:57:60:0f:0f:b9:48:23:7b:09:e2:17: f7:03:3f:a6:91:96:c9:59:2f:13:00:af:ca:81:67: 22:94:ae:19:06:b9:ce:5a:e0:fb:50:f2:91:66:75: e7:4d:68:cc:a1:73:f7:fe:11:38:39:64:48:36:82: f2:83:d3:38:98:e8:55:a8:a3:67:e4:0a:f6:32:fd: 70:7c:33:7f:51:a1:96:d3:e6:6f:ae:e1:38:bf:0f: 02:1a:2f:09:3c:a2:44:ae:ba:08:ea:22:7d:8c:f4: 18:69:cf:86:1d:85:e1:20:55:40:0a:97:cc:3d:9b: 2c:ba:2c:4e:76:14:48:2a:dd:34:85:fd:12:0f:05: 5c:46:c3:13:ac:f9:7d:fe:06:34:6a:9a:fe:1e:fd: c8:04:f2:2f:1b:46:d1:6c:f3:14:65:cd:db:ca:fc: 4d:4c:89:53:db:80:52:98:d5:32:07:e3:0f:09:c5: 75:7e:f4:2c:db:fd:fd:a0:1d:d5:57:33:b8:20:58: 8f:57:15:b7:60:d9:1b:69:1e:6e:91:fa:73:69:07: 80:91:c6:f1:e1:d9:30:58:fb:bf:b0:af:36:9b:e0: c0:82:18:13:7b:89:3b:e3:20:6d:a7:51:c5:a2:58: 3a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:1F:79:0F:A7:CA:6A:99:65:95:C8:F0:AD:E1:A3:C5:D2:23:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7b:23:c2:7d:55:a5:61:71:c1:eb:ca:52:48:61:60:a6:1e: 53:70:28:c2:3b:87:ff:b0:79:6d:59:13:fc:7c:a3:13:92:f6: 9a:4f:01:18:7c:77:76:b7:26:d4:fe:47:ff:ae:4c:83:0e:12: de:43:a4:67:7d:15:26:36:91:d1:21:e1:d5:52:1b:7d:5d:7b: 5c:a9:fd:9b:54:02:c9:dd:13:c7:ce:27:ec:97:a8:f0:d7:c6: 8c:13:d0:c4:f6:75:35:7d:05:7e:0e:3e:83:f6:28:89:02:60: ea:23:01:fe:d7:cd:95:21:3d:aa:6a:f5:97:60:4d:17:19:19: 2f:8f:a8:8e:37:f1:fb:c0:52:6d:13:c4:a5:ff:6b:74:09:42: ca:d5:3f:46:be:44:56:ee:72:1e:8d:f2:69:e8:08:bc:ee:c0: 8c:96:1f:f0:e6:c5:24:a2:14:59:8d:b6:ef:2c:ed:da:0f:34: bd:1c:23:f0:4c:fd:ab:09:84:68:8f:d5:96:60:31:de:fc:6a: 39:36:69:b2:3f:d2:d9:dc:3c:88:71:9b:6a:c1:d1:a3:59:4d: 31:ed:92:ec:31:a4:d6:a2:f7:cd:e4:dd:53:8d:47:f8:5e:e1: 63:39:ba:88:6a:af:a3:19:4e:1c:da:c8:8b:71:bc:42:51:cf: cc:68:a1:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkENxFmW/NAkcI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWY0ODk3OWItYTEwMy00NmEwLWJjNmMtOTY5ZTE1NzdjMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9J1arWwFQF2XvbybImqyT4V2APD7lII3sJ 4hf3Az+mkZbJWS8TAK/KgWcilK4ZBrnOWuD7UPKRZnXnTWjMoXP3/hE4OWRINoLy g9M4mOhVqKNn5Ar2Mv1wfDN/UaGW0+ZvruE4vw8CGi8JPKJErroI6iJ9jPQYac+G HYXhIFVACpfMPZssuixOdhRIKt00hf0SDwVcRsMTrPl9/gY0apr+Hv3IBPIvG0bR bPMUZc3byvxNTIlT24BSmNUyB+MPCcV1fvQs2/39oB3VVzO4IFiPVxW3YNkbaR5u kfpzaQeAkcbx4dkwWPu/sK82m+DAghgTe4k74yBtp1HFolg6cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFExBH3kPp8pqmWWVyPCt4aPF0iMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFlYzI2NTMtOGNjYi0z Y2NiLTkwZGMtMjNkOGFkOTFkOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8eyPCfVWlYXHB68pSSGFgph5TcCjCO4f/sHltWRP8fKMTkvaaTwEY fHd2tybU/kf/rkyDDhLeQ6RnfRUmNpHRIeHVUht9XXtcqf2bVALJ3RPHzifsl6jw 18aME9DE9nU1fQV+Dj6D9iiJAmDqIwH+182VIT2qavWXYE0XGRkvj6iON/H7wFJt E8Sl/2t0CULK1T9GvkRW7nIejfJp6Ai87sCMlh/w5sUkohRZjbbvLO3aDzS9HCPw TP2rCYRoj9WWYDHe/Go5NmmyP9LZ3DyIcZtqwdGjWU0x7ZLsMaTWovfN5N1TjUf4 XuFjObqIaq+jGU4c2siLcbxCUc/MaKFZ -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:11 2026 by rpki-client