$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa File: f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa (raw, json) Hash identifier: 1B0ntWSTrDu1KsuA5iIKLSyrhOqksK9SQaGcVgiVkxs= Subject key identifier: B9:CE:A3:9E:39:5C:2F:73:EC:CB:F1:62:AC:E8:6D:D6:82:98:36:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79043CA87A416DFB560EB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396599 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:43:ca:87:a4:16:df:b5:60:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ecb1251b-0684-4d82-a84c-fb4d7d03658a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:3e:f2:b9:a2:f6:3a:b6:1a:a1:d7:5c:cb: 9f:e1:ac:8b:f7:d2:fa:57:18:99:a4:e2:c8:8a:07: 9b:1a:f5:39:98:a7:26:d2:af:89:36:8b:41:19:f4: 0b:b4:6a:5c:44:f4:2e:b4:03:01:b1:6c:51:c1:9a: 09:a6:8c:02:69:8e:20:a3:da:03:7f:40:04:42:e7: df:8f:83:10:55:69:ab:90:7e:bc:5d:52:bd:40:5e: 4f:aa:e0:eb:00:4d:1b:46:73:4e:95:b0:27:55:dc: 64:a7:03:c1:84:53:93:ba:31:63:c3:91:7a:55:a8: a9:cc:3a:bf:c6:f0:90:f6:fb:f2:6a:ed:83:24:e6: db:ce:8e:d3:91:9f:b2:1a:56:cc:92:27:5c:81:61: 66:f1:4f:b7:ed:bf:46:1c:4b:39:02:e7:77:36:b9: 07:80:db:bf:a6:cc:22:ab:14:5f:72:ac:79:e0:66: 69:9d:fe:ea:0d:d0:97:73:05:7d:15:23:c1:15:6d: 3c:87:64:01:ea:7e:1d:36:99:cd:b9:db:b7:8d:14: 87:6f:eb:ae:e7:e2:80:4e:6e:47:ee:da:ef:c1:2c: d7:8a:72:eb:c6:6f:59:5d:42:3d:f7:2c:a5:12:3a: 16:79:29:9c:94:cf:b6:ec:aa:95:83:1f:fd:21:be: 67:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CE:A3:9E:39:5C:2F:73:EC:CB:F1:62:AC:E8:6D:D6:82:98:36:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f54e5aa8-3402-3eb0-84c0-c9b9d52f9e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a9:00:b4:e9:67:94:65:a9:9c:60:6c:d8:83:72:10:85:36: 01:6d:44:d8:53:2c:6e:f8:18:d3:96:6a:00:50:87:3f:87:a8: a1:df:37:66:58:63:c1:43:49:27:37:4c:1b:5e:31:a8:af:d6: 2d:87:22:ef:71:ca:29:23:41:7d:e2:7d:bf:9f:65:32:ec:30: a2:0a:85:68:8b:70:ad:c3:cf:24:9e:f9:46:ee:aa:29:84:12: 86:e9:f4:4c:c3:11:f1:3a:2b:8e:dd:55:fe:ee:3e:5d:8c:42: 29:ce:85:f1:b3:5a:37:26:60:56:c4:1b:d8:47:39:b7:26:af: 5f:f0:31:05:78:fc:6f:22:05:70:b3:45:ce:45:b6:5e:2c:c7: 02:fa:fd:cd:2e:04:29:cd:8d:08:e8:7d:36:97:46:c9:60:d0: 0e:2b:bf:fb:43:c6:8d:47:3a:29:7c:26:3c:38:4e:6d:b3:91: 9c:ee:02:27:1c:95:be:26:64:af:5d:aa:df:63:ae:09:2b:a0: 50:66:5b:8a:50:93:47:1d:82:6b:be:cf:c0:2c:43:97:c7:f8: 18:2d:e3:3f:ac:f5:06:69:e8:e6:20:30:4f:db:b9:11:ef:8d: d2:95:c9:12:94:d4:15:45:d1:9d:63:b4:cd:db:fb:ee:ee:c8: 40:e6:b7:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkEPKh6QW37Vg64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWNiMTI1MWItMDY4NC00ZDgyLWE4NGMtZmI0ZDdkMDM2NThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JQ+8rmi9jq2GqHXXMuf4ayL99L6VxiZpOLI igebGvU5mKcm0q+JNotBGfQLtGpcRPQutAMBsWxRwZoJpowCaY4go9oDf0AEQuff j4MQVWmrkH68XVK9QF5PquDrAE0bRnNOlbAnVdxkpwPBhFOTujFjw5F6VaipzDq/ xvCQ9vvyau2DJObbzo7TkZ+yGlbMkidcgWFm8U+37b9GHEs5Aud3NrkHgNu/pswi qxRfcqx54GZpnf7qDdCXcwV9FSPBFW08h2QB6n4dNpnNudu3jRSHb+uu5+KATm5H 7trvwSzXinLrxm9ZXUI99yylEjoWeSmclM+27KqVgx/9Ib5nOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLnOo545XC9z7MvxYqzobdaCmDbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU0ZTVhYTgtMzQwMi0z ZWIwLTg0YzAtYzliOWQ1MmY5ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKqQC06WeUZamcYGzYg3IQhTYBbUTYUyxu+BjTlmoAUIc/h6ih3zdm WGPBQ0knN0wbXjGor9YthyLvccopI0F94n2/n2Uy7DCiCoVoi3Ctw88knvlG7qop hBKG6fRMwxHxOiuO3VX+7j5djEIpzoXxs1o3JmBWxBvYRzm3Jq9f8DEFePxvIgVw s0XORbZeLMcC+v3NLgQpzY0I6H02l0bJYNAOK7/7Q8aNRzopfCY8OE5ts5Gc7gIn HJW+JmSvXarfY64JK6BQZluKUJNHHYJrvs/ALEOXx/gYLeM/rPUGaejmIDBP27kR 743SlckSlNQVRdGdY7TN2/vu7shA5rfK -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:54 2026 by rpki-client