$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa File: fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa (raw, json) Hash identifier: V6mh4Mjsp+Qf2gkhzEg46ITnZKRr9pVTbEqc1h8lShI= Subject key identifier: DB:0A:A2:F3:34:1D:13:54:79:13:3F:8E:05:F2:5E:5A:C0:54:07:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79802BDE121B7B2EDA09F60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396573 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:02:bd:e1:21:b7:b2:ed:a0:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0a405739-2cfc-432a-9313-ebd0ca9baea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:da:17:1e:bd:ed:22:a2:b0:93:de:e1:73: 11:20:1d:4e:7c:c7:f8:9d:d7:e6:d9:5d:f8:f3:65: f3:bf:78:16:e9:44:62:c3:3b:52:5c:de:d1:61:fb: c0:6a:f3:18:b7:be:cd:26:eb:59:a6:39:80:09:c9: 51:45:bd:f3:11:de:be:19:bc:d7:21:47:38:fd:9e: fb:f1:b5:cb:f4:2f:c8:57:e2:de:f8:41:c7:9d:3b: 53:74:bf:53:2f:c1:08:fb:df:20:49:fa:5c:04:fe: 5f:1c:18:6f:8b:d0:77:ca:64:dc:cc:f0:f2:6b:18: 15:5d:77:34:18:d0:cc:6a:b4:c0:a2:a5:11:22:ae: 19:75:8e:62:66:72:f2:dd:47:f9:e1:b9:19:e7:09: cb:16:99:44:c6:8f:c0:ee:43:c7:b1:56:4c:f4:55: 10:f4:e6:3b:7a:21:31:eb:f2:1f:ce:68:8e:ec:f6: d8:8b:80:d0:e0:0c:e0:0a:eb:59:8f:02:5a:53:31: 6a:35:8b:07:5e:c2:69:57:ec:3e:b5:27:e6:52:5b: 9f:b9:97:9a:0c:1b:f3:87:ad:a5:3e:8e:34:70:f4: 39:53:90:27:51:8a:25:2f:52:c0:1f:e4:ea:9d:90: be:77:d5:cb:0b:d7:2a:be:b5:61:42:73:b7:94:a0: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0A:A2:F3:34:1D:13:54:79:13:3F:8E:05:F2:5E:5A:C0:54:07:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc728ca5-fe4f-3879-b3ab-f300a5f0e3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d6:44:39:66:b3:82:89:5c:fc:60:12:12:fa:60:31:25:80: e5:8c:38:dc:6d:73:80:44:dc:35:09:65:e0:32:02:d3:3e:2a: cc:cb:77:ee:85:4a:32:00:d9:d1:c3:43:e2:a1:44:9f:78:66: aa:c2:88:bf:58:10:8e:ea:65:d8:26:54:28:74:7f:0d:3a:44: 06:88:0f:28:22:29:bc:58:1a:5d:eb:85:bf:72:30:e3:dd:c2: 87:d2:7b:a1:dc:51:f0:39:82:95:f3:9b:36:df:7f:93:75:c0: 57:77:38:bd:d5:b3:4d:3b:5b:0f:24:24:20:19:61:ad:50:5c: 89:de:0d:47:cd:d9:ec:dd:4f:56:aa:ca:71:d4:ef:f7:09:9f: 75:9f:1d:fc:c0:ca:64:cb:f5:e1:40:fd:6e:c6:18:2a:14:66: ef:90:0a:27:8d:e0:81:38:d6:85:ac:9a:8e:82:df:25:77:b1: 19:d2:88:03:f2:ba:d5:29:60:a4:d3:c6:18:61:21:e0:84:02: 34:1c:b5:c5:b6:ef:3f:f3:f0:40:71:7c:50:96:0d:40:02:9e: f3:ee:0a:07:55:ed:08:c6:4e:f4:31:ce:4d:e9:b6:0f:54:e1: 49:0f:a8:2d:90:2b:cb:2a:86:d7:a4:1f:a4:89:5b:4a:02:0c: a1:b2:1f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAK94SG3su2gn2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGE0MDU3MzktMmNmYy00MzJhLTkzMTMtZWJkMGNhOWJhZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirjaFx697SKisJPe4XMRIB1OfMf4ndfm2V34 82Xzv3gW6URiwztSXN7RYfvAavMYt77NJutZpjmACclRRb3zEd6+GbzXIUc4/Z77 8bXL9C/IV+Le+EHHnTtTdL9TL8EI+98gSfpcBP5fHBhvi9B3ymTczPDyaxgVXXc0 GNDMarTAoqURIq4ZdY5iZnLy3Uf54bkZ5wnLFplExo/A7kPHsVZM9FUQ9OY7eiEx 6/IfzmiO7PbYi4DQ4AzgCutZjwJaUzFqNYsHXsJpV+w+tSfmUlufuZeaDBvzh62l Po40cPQ5U5AnUYolL1LAH+TqnZC+d9XLC9cqvrVhQnO3lKDt/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsKovM0HRNUeRM/jgXyXlrAVAcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmM3MjhjYTUtZmU0Zi0z ODc5LWIzYWItZjMwMGE1ZjBlM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDWRDlms4KJXPxgEhL6YDElgOWMONxtc4BE3DUJZeAyAtM+KszLd+6F SjIA2dHDQ+KhRJ94ZqrCiL9YEI7qZdgmVCh0fw06RAaIDygiKbxYGl3rhb9yMOPd wofSe6HcUfA5gpXzmzbff5N1wFd3OL3Vs007Ww8kJCAZYa1QXIneDUfN2ezdT1aq ynHU7/cJn3WfHfzAymTL9eFA/W7GGCoUZu+QCieN4IE41oWsmo6C3yV3sRnSiAPy utUpYKTTxhhhIeCEAjQctcW27z/z8EBxfFCWDUACnvPuCgdV7QjGTvQxzk3ptg9U 4UkPqC2QK8sqhtekH6SJW0oCDKGyH5s= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:29 2026 by rpki-client