$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa File: ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa (raw, json) Hash identifier: r+mB40rmEOpGchhF3bT80a3xPMwHtoKC2DOl1jEnmAA= Subject key identifier: 2C:D5:D3:A4:08:F7:51:D0:DD:91:D3:68:35:87:C8:48:D7:FD:20:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79008CE4CC757F30D9B0980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397197 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:08:ce:4c:c7:57:f3:0d:9b:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=87c9b93c-07d9-4121-b2f9-cbb9a0cfd037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:bf:8b:09:20:c4:65:59:f2:48:fe:f4:83: 3e:7b:14:f8:5d:d1:c7:b2:4b:1a:a0:2f:40:6f:e9: fb:18:01:3b:73:84:fa:7b:75:f3:65:36:33:71:d5: ee:ed:57:48:60:a2:8b:81:a2:98:e4:c7:ea:94:dc: 3a:b4:ee:83:fd:5e:62:34:8d:f8:5c:d1:c4:8f:ce: dd:66:14:e3:0e:05:5b:11:a5:04:3f:a7:21:9e:54: 34:14:ff:f7:ef:e8:9e:c4:f0:e7:a1:1e:4e:e6:9f: ec:2d:dc:d7:a4:b6:fe:9a:99:d4:6c:36:40:12:6b: 87:73:fe:0a:ae:cc:83:4b:6b:fd:dc:8a:6f:d2:5d: f7:bd:4e:a8:08:8a:e3:b3:bd:78:5f:21:40:ff:a0: 14:06:03:38:3a:da:74:03:f6:e8:d3:7f:e2:58:e8: 34:bb:da:6b:7a:63:e9:33:8a:e6:74:6e:a6:64:c1: bc:1c:e3:03:0a:48:8d:ee:16:d8:4c:5e:da:15:1e: 3e:5d:71:86:08:06:d6:ef:c6:5b:f1:27:48:6d:fb: ff:36:f6:e2:7d:82:94:eb:b9:9a:82:3b:fc:a7:85: bb:c4:33:22:bd:2a:5d:e2:28:cb:14:d9:13:24:26: 88:5e:00:f2:b7:d9:08:6b:2c:90:7e:35:15:26:c8: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:D3:A4:08:F7:51:D0:DD:91:D3:68:35:87:C8:48:D7:FD:20:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec9ae2be-56f7-352c-b3fd-e349668c11b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d4:b9:ca:47:8e:11:f8:12:cb:aa:81:b3:19:ea:ac:c9:f2: 08:3a:df:7c:46:e7:e5:f5:85:04:ce:09:bd:6d:40:39:36:16: 70:35:85:55:f4:c3:ed:6c:f2:b4:8a:94:c5:c9:27:4a:3b:b1: 23:38:ce:8a:e5:1f:30:89:ed:e6:fe:ba:1b:e2:e0:0d:30:33: 7a:32:db:d7:00:d8:58:29:e8:d7:5a:d8:05:05:70:38:7e:69: ac:b3:b5:47:86:55:9b:40:5c:ce:df:30:a8:74:86:c6:e3:34: ec:76:4b:ca:34:c0:65:a5:b6:ea:12:52:0c:e8:c7:e0:42:bf: 28:b8:b9:66:e4:af:67:5c:f6:c7:ec:da:50:e2:3a:e3:ce:f0: fe:3b:a5:34:a3:39:96:15:b0:85:94:6d:6c:d7:c6:73:35:6c: 86:3b:88:70:a4:9f:55:d2:22:93:ce:e6:05:a9:eb:98:ad:79: 10:56:5f:b8:de:39:ba:2a:4a:f7:45:e8:70:b8:7e:48:1d:a2: 2f:9c:b6:38:75:fd:71:e7:9c:cb:47:d7:9e:a2:19:2c:bf:89: d1:9b:41:a7:0e:f3:4c:f3:e9:08:89:37:52:f0:4c:f4:1a:e7: 0a:d8:60:d2:c6:60:96:86:49:ae:73:7d:15:aa:3f:8d:3a:d1: 93:bb:dc:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAjOTMdX8w2bCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODdjOWI5M2MtMDdkOS00MTIxLWIyZjktY2JiOWEwY2ZkMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiW/iwkgxGVZ8kj+9IM+exT4XdHHsksaoC9A b+n7GAE7c4T6e3XzZTYzcdXu7VdIYKKLgaKY5MfqlNw6tO6D/V5iNI34XNHEj87d ZhTjDgVbEaUEP6chnlQ0FP/37+iexPDnoR5O5p/sLdzXpLb+mpnUbDZAEmuHc/4K rsyDS2v93Ipv0l33vU6oCIrjs714XyFA/6AUBgM4Otp0A/bo03/iWOg0u9premPp M4rmdG6mZMG8HOMDCkiN7hbYTF7aFR4+XXGGCAbW78Zb8SdIbfv/NvbifYKU67ma gjv8p4W7xDMivSpd4ijLFNkTJCaIXgDyt9kIayyQfjUVJsjHPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCzV06QI91HQ3ZHTaDWHyEjX/SAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM5YWUyYmUtNTZmNy0z NTJjLWIzZmQtZTM0OTY2OGMxMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBD1LnKR44R+BLLqoGzGeqsyfIIOt98Rufl9YUEzgm9bUA5NhZwNYVV 9MPtbPK0ipTFySdKO7EjOM6K5R8wie3m/rob4uANMDN6MtvXANhYKejXWtgFBXA4 fmmss7VHhlWbQFzO3zCodIbG4zTsdkvKNMBlpbbqElIM6MfgQr8ouLlm5K9nXPbH 7NpQ4jrjzvD+O6U0ozmWFbCFlG1s18ZzNWyGO4hwpJ9V0iKTzuYFqeuYrXkQVl+4 3jm6Kkr3RehwuH5IHaIvnLY4df1x55zLR9eeohksv4nRm0GnDvNM8+kIiTdS8Ez0 GucK2GDSxmCWhkmuc30Vqj+NOtGTu9wN -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:43 2026 by rpki-client