$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa File: dea0163b-a1dc-39da-b708-1302f54a1bf0.roa (raw, json) Hash identifier: NjVS5vKpPPP6s7OGftFpz3DRbInjju5b4fV2BV2fRQA= Subject key identifier: 50:8E:9E:8E:CE:54:59:2C:5B:99:09:E9:7E:AD:BB:22:C9:FA:F0:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79874C23D2BB9AE600E3140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396576 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:74:c2:3d:2b:b9:ae:60:0e:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4004ecee-d3d8-46c9-984f-f55947728690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:a6:c3:87:40:47:68:2a:c0:b2:f0:c3:01: 4f:93:fa:0e:56:2f:4a:71:3e:43:49:39:2f:22:10: f8:44:92:30:b2:9b:d1:f3:8a:e9:44:5e:14:dc:c1: d4:dc:46:f9:99:28:18:87:3e:f5:ee:46:4a:74:6e: 97:f9:9c:59:be:5a:12:2d:22:fb:09:b6:67:52:a1: f3:17:c1:c5:89:f1:5c:ea:95:08:be:cc:e8:8a:21: 49:a0:c9:e2:a2:f8:2f:f7:6d:2f:bc:b9:b4:be:e6: 8a:48:04:4a:23:52:8c:bd:b8:32:c0:e9:ac:2a:e3: 3c:19:36:69:17:5f:27:d2:02:2e:53:49:74:29:1a: 4c:70:f5:d9:63:81:4e:04:6c:25:a3:bc:d7:c6:af: 02:6a:f3:cd:45:4c:6c:70:4d:37:7a:42:75:e2:28: bc:68:a0:5f:f9:00:13:b0:c3:08:13:ff:99:97:c1: eb:3d:ad:18:92:83:c5:48:28:53:b3:a6:8d:9f:ce: 4e:d4:82:ee:4b:7c:d1:43:b9:1f:9e:4b:ee:b7:df: 77:9c:62:99:c3:2a:b4:ae:47:3b:d4:1f:e4:90:bd: 78:64:e0:0f:11:a5:8e:fa:51:58:42:5f:e9:b4:4e: bb:b4:d1:6e:f8:2d:52:3b:ef:b0:7a:18:2d:3f:d3: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8E:9E:8E:CE:54:59:2C:5B:99:09:E9:7E:AD:BB:22:C9:FA:F0:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dea0163b-a1dc-39da-b708-1302f54a1bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:90:97:6c:6e:64:51:38:1f:1f:60:0c:1e:6d:ba:65:50:b8: 0a:1e:ba:b2:24:8f:d6:f2:6c:c3:d5:82:ea:65:81:d9:9c:d4: 90:79:80:4a:a2:5a:05:72:96:f0:c5:65:f6:69:df:14:53:53: 0e:03:2e:0b:d0:1c:fa:17:80:3e:bf:d3:d0:b3:de:8d:60:69: c2:90:d5:f4:9f:ce:73:e9:c8:dc:f7:b8:5a:ab:4d:d8:75:be: c7:5e:8b:9b:8b:0b:79:f9:00:d1:a8:7f:55:6d:ae:cd:50:25: 48:be:bf:d4:ee:9b:27:87:df:84:24:0a:7a:ec:48:ac:fb:90: 5a:38:e1:26:61:2e:ed:24:84:8f:a1:fe:c3:f6:ef:69:17:c8: 79:2c:4a:11:ee:18:7a:38:5a:79:0e:92:e9:28:44:bb:48:25: 7e:b6:d9:a2:1e:33:6a:f6:23:4a:d4:8e:85:74:e3:c1:ff:d8: f3:e7:23:66:b3:1d:e6:10:94:08:82:96:9a:83:3e:4d:ae:33: ff:0f:5f:fb:17:aa:a0:3e:33:84:2c:6e:a3:e7:7f:e0:99:25: e1:f4:ac:29:08:5a:c4:05:28:45:db:62:63:43:03:14:0f:48: 6b:af:f6:6a:2a:7a:bb:ca:40:e9:1c:8e:f7:12:e8:41:0e:70: 41:2a:73:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHTCPSu5rmAOMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDAwNGVjZWUtZDNkOC00NmM5LTk4NGYtZjU1OTQ3NzI4NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUimw4dAR2gqwLLwwwFPk/oOVi9KcT5DSTkv IhD4RJIwspvR84rpRF4U3MHU3Eb5mSgYhz717kZKdG6X+ZxZvloSLSL7CbZnUqHz F8HFifFc6pUIvszoiiFJoMniovgv920vvLm0vuaKSARKI1KMvbgywOmsKuM8GTZp F18n0gIuU0l0KRpMcPXZY4FOBGwlo7zXxq8CavPNRUxscE03ekJ14ii8aKBf+QAT sMMIE/+Zl8HrPa0YkoPFSChTs6aNn85O1ILuS3zRQ7kfnkvut993nGKZwyq0rkc7 1B/kkL14ZOAPEaWO+lFYQl/ptE67tNFu+C1SO++wehgtP9P+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCOno7OVFksW5kJ6X6tuyLJ+vD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVhMDE2M2ItYTFkYy0z OWRhLWI3MDgtMTMwMmY1NGExYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Ql2xuZFE4Hx9gDB5tumVQuAoeurIkj9bybMPVguplgdmc1JB5gEqi WgVylvDFZfZp3xRTUw4DLgvQHPoXgD6/09Cz3o1gacKQ1fSfznPpyNz3uFqrTdh1 vsdei5uLC3n5ANGof1Vtrs1QJUi+v9TumyeH34QkCnrsSKz7kFo44SZhLu0khI+h /sP272kXyHksShHuGHo4WnkOkukoRLtIJX622aIeM2r2I0rUjoV048H/2PPnI2az HeYQlAiClpqDPk2uM/8PX/sXqqA+M4QsbqPnf+CZJeH0rCkIWsQFKEXbYmNDAxQP SGuv9moqervKQOkcjvcS6EEOcEEqc+4= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:19 2026 by rpki-client