$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa File: f150fec7-3078-3cd8-8458-add28adfb037.roa (raw, json) Hash identifier: yXwQrRLnvW0H2YK4aBnKXl1W2Yy6dCnKFuXVhToov50= Subject key identifier: 83:88:8A:27:01:5E:B5:0E:0A:28:D7:01:2D:37:BF:77:E4:F1:D1:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA798086B4A8FC0244D097780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396582 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:08:6b:4a:8f:c0:24:4d:09:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=42f39d96-b30e-4142-8034-7ed37d617545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:97:bf:d3:7b:66:cc:4c:7b:90:d3:76:1e: 07:c8:d6:24:a4:a0:3f:68:ee:dd:00:c1:d4:4a:5e: 38:9a:d5:6b:0f:07:99:b2:26:87:96:2b:e6:86:be: 71:ae:73:af:ec:de:1a:b8:76:bd:c1:2f:0a:08:69: e4:ff:81:0c:48:bd:28:f4:8f:93:da:6e:93:58:61: 2f:88:b4:f2:4f:a7:13:74:9d:91:c0:8c:5b:e3:6d: 3d:a4:3a:5c:c5:71:58:3f:66:db:57:b6:f9:ea:e4: 5b:8b:a4:81:72:d2:c0:cd:29:a1:f2:17:13:fd:45: 21:a4:7b:0c:e4:a5:78:e6:7b:b9:31:c5:8c:3e:73: 2a:a8:1e:b5:a4:ac:8d:3d:b5:3f:ac:62:98:2e:08: 95:85:0b:61:7b:cc:48:b0:b3:de:dc:bb:91:64:57: aa:08:3c:0e:e2:45:37:31:20:8f:75:86:6b:3b:33: d7:65:a1:2a:cd:02:1b:cd:db:86:d2:9f:ee:0a:b2: 9b:55:3d:52:29:67:66:bd:47:ae:d8:8d:0e:76:d4: 82:f0:54:90:d6:e9:32:f5:35:35:af:7b:04:68:ec: 78:a0:63:51:0a:49:4b:a6:eb:5d:d1:8a:fa:81:97: a8:c1:2b:24:53:27:f6:a6:bf:41:b0:f6:dc:94:2b: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:88:8A:27:01:5E:B5:0E:0A:28:D7:01:2D:37:BF:77:E4:F1:D1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ca:df:60:0f:b3:6c:e0:65:a7:dc:5b:b3:91:76:e3:c6:fd: e6:95:2a:6a:2e:dc:08:f4:9d:fa:1d:fd:dc:0a:4b:a0:37:f7: 84:06:81:be:fc:38:97:d8:c0:84:4d:1c:3c:94:55:c8:61:8a: 5e:6f:28:34:46:32:4e:c1:57:98:64:b3:80:3e:57:cb:3c:47: 2f:4a:51:35:10:c3:ac:bd:5d:dd:83:f4:ab:5b:60:c8:67:3e: bb:f2:24:14:53:46:d9:f6:30:6e:3b:59:32:ad:df:7d:d0:60: 32:82:ab:f7:fd:2a:c4:94:da:03:d2:d0:2a:ad:70:a5:33:30: 68:07:2d:12:3a:7d:1b:8f:cc:98:de:4b:df:8b:89:75:96:2d: c2:5f:d4:bb:05:a4:67:76:49:55:b0:8d:1a:22:13:12:c3:68: 9b:49:f9:c7:9b:25:7e:db:e8:01:d6:29:63:98:9e:e8:a5:0f: 23:4a:aa:21:87:83:ad:26:11:37:44:36:59:2d:b7:e5:2f:b6: 6d:02:df:d8:51:17:0b:15:0b:4f:51:08:56:16:0e:df:f0:9e: 34:33:2c:bb:6b:72:8a:91:ea:3b:da:53:c0:3a:37:11:f8:db: ef:07:bc:31:48:7a:1b:f7:11:ab:c7:fd:04:95:64:91:a4:fa: 31:85:22:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAhrSo/AJE0Jd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDJmMzlkOTYtYjMwZS00MTQyLTgwMzQtN2VkMzdkNjE3NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sWXv9N7ZsxMe5DTdh4HyNYkpKA/aO7dAMHU Sl44mtVrDweZsiaHlivmhr5xrnOv7N4auHa9wS8KCGnk/4EMSL0o9I+T2m6TWGEv iLTyT6cTdJ2RwIxb4209pDpcxXFYP2bbV7b56uRbi6SBctLAzSmh8hcT/UUhpHsM 5KV45nu5McWMPnMqqB61pKyNPbU/rGKYLgiVhQthe8xIsLPe3LuRZFeqCDwO4kU3 MSCPdYZrOzPXZaEqzQIbzduG0p/uCrKbVT1SKWdmvUeu2I0OdtSC8FSQ1uky9TU1 r3sEaOx4oGNRCklLputd0Yr6gZeowSskUyf2pr9BsPbclCtYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOIiicBXrUOCijXAS03v3fk8dHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE1MGZlYzctMzA3OC0z Y2Q4LTg0NTgtYWRkMjhhZGZiMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXK32APs2zgZafcW7ORduPG/eaVKmou3Aj0nfod/dwKS6A394QGgb78 OJfYwIRNHDyUVchhil5vKDRGMk7BV5hks4A+V8s8Ry9KUTUQw6y9Xd2D9KtbYMhn PrvyJBRTRtn2MG47WTKt333QYDKCq/f9KsSU2gPS0CqtcKUzMGgHLRI6fRuPzJje S9+LiXWWLcJf1LsFpGd2SVWwjRoiExLDaJtJ+cebJX7b6AHWKWOYnuilDyNKqiGH g60mETdENlktt+Uvtm0C39hRFwsVC09RCFYWDt/wnjQzLLtrcoqR6jvaU8A6NxH4 2+8HvDFIehv3EavH/QSVZJGk+jGFIgY= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:54 2026 by rpki-client