$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa File: 0f0aac1e-83cb-3953-814a-150b44c1756d.roa (raw, json) Hash identifier: 0tXB4cMiCgb3O2Vbwha9FYHwbpGZ5+3vHeAm3scQblg= Subject key identifier: 2D:5C:8B:15:97:FB:96:78:E6:97:EC:A5:DF:13:CA:6C:C3:8F:F3:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F31B97C829FF4F893500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397198 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f3:1b:97:c8:29:ff:4f:89:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=ffb841b3-529f-4ca8-8274-e2cc5d407b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:8a:60:68:0f:20:35:c4:2f:4c:7d:e2:43: 53:4b:a9:5b:6c:84:7a:08:ac:7c:37:e9:8b:d9:d0: 36:2c:af:aa:0e:8c:1c:85:80:b2:9d:c5:2b:43:f3: 5e:6c:f5:62:d2:b1:ba:53:29:0e:cd:26:2d:5e:1e: a9:5d:3b:2f:28:f8:68:8d:f7:06:10:be:f0:f1:2f: fc:7d:84:69:db:65:cf:23:8a:dd:b8:a5:c8:49:77: f3:4b:6b:a0:ae:9e:77:04:6f:17:0e:33:d7:44:88: 25:b4:fa:84:4a:c0:a9:14:ec:90:38:00:66:87:e1: 00:57:04:6e:89:29:95:8b:d6:32:17:db:44:c0:b1: cb:b2:ad:7f:b8:8d:2b:32:e7:ef:97:5a:51:30:89: 60:3a:5f:9a:83:69:11:84:40:da:ed:6b:70:9d:cc: ea:09:e4:a2:a6:f5:8d:99:40:8a:c1:c4:35:a0:51: f7:e0:91:e2:f7:a8:29:6a:42:f9:58:79:4d:60:16: a9:83:08:80:13:0d:90:b3:25:2c:9a:b9:ec:a2:f5: f6:fa:bf:2c:9d:0e:c4:c0:5d:d5:b1:44:a6:b7:de: ce:28:39:10:2d:e6:28:b0:eb:fe:f5:45:79:d9:57: 83:84:cb:9b:9d:97:3c:a9:6a:98:66:ab:20:fb:1a: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5C:8B:15:97:FB:96:78:E6:97:EC:A5:DF:13:CA:6C:C3:8F:F3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f0aac1e-83cb-3953-814a-150b44c1756d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bc:72:6a:03:28:8e:83:d5:26:72:51:da:a6:99:f8:6e:ab: 91:b3:f9:5d:b5:2e:fa:10:f0:30:f1:91:79:0f:51:e2:39:c6: e3:a5:1e:9e:4d:2b:75:d3:5c:c0:2e:59:82:b1:d0:d4:61:49: ab:e8:0c:5a:14:e0:ad:d4:05:ac:ac:4b:ad:ff:8c:e4:ca:55: b7:1f:a3:10:b4:72:52:83:d1:f2:4c:cc:6c:d1:00:41:5e:a9: 33:86:47:9d:21:9d:c4:d4:51:d6:d8:64:f6:e0:60:25:cf:3b: b0:b4:cc:4b:8c:a1:d4:75:27:03:c8:d8:05:1a:0a:c8:79:e6: 11:a1:8d:b9:66:b8:4c:37:d7:de:17:2c:d5:12:a1:1c:07:a4: 56:c5:52:97:d6:86:c6:63:4d:8a:b8:8a:5e:c9:4b:01:11:df: 0a:36:70:70:b9:ed:a6:cd:b7:b4:87:a7:6c:99:09:5f:ca:ab: 1b:11:f9:13:53:09:b0:62:fc:c0:0f:6c:d1:46:9c:db:b7:fe: aa:1b:82:f6:dd:aa:be:61:39:99:56:2e:9a:f7:73:ed:15:b3: 54:50:f0:a7:79:a1:69:25:df:b9:ff:02:4a:4e:d4:6e:b6:d3: 06:30:57:b9:6b:30:8a:93:1e:ff:8e:99:3e:08:92:bf:e7:a4: 1c:50:a5:be -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfMbl8gp/0+JNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZmZiODQxYjMtNTI5Zi00Y2E4LTgyNzQtZTJjYzVkNDA3YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloyKYGgPIDXEL0x94kNTS6lbbIR6CKx8N+mL 2dA2LK+qDowchYCyncUrQ/NebPVi0rG6UykOzSYtXh6pXTsvKPhojfcGEL7w8S/8 fYRp22XPI4rduKXISXfzS2ugrp53BG8XDjPXRIgltPqESsCpFOyQOABmh+EAVwRu iSmVi9YyF9tEwLHLsq1/uI0rMufvl1pRMIlgOl+ag2kRhEDa7WtwnczqCeSipvWN mUCKwcQ1oFH34JHi96gpakL5WHlNYBapgwiAEw2QsyUsmrnsovX2+r8snQ7EwF3V sUSmt97OKDkQLeYosOv+9UV52VeDhMubnZc8qWqYZqsg+xrq6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1cixWX+5Z45pfspd8TymzDj/OjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYwYWFjMWUtODNjYi0z OTUzLTgxNGEtMTUwYjQ0YzE3NTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlvHJqAyiOg9UmclHappn4bquRs/ldtS76EPAw8ZF5D1HiOcbjpR6e TSt101zALlmCsdDUYUmr6AxaFOCt1AWsrEut/4zkylW3H6MQtHJSg9HyTMxs0QBB XqkzhkedIZ3E1FHW2GT24GAlzzuwtMxLjKHUdScDyNgFGgrIeeYRoY25ZrhMN9fe FyzVEqEcB6RWxVKX1obGY02KuIpeyUsBEd8KNnBwue2mzbe0h6dsmQlfyqsbEfkT UwmwYvzAD2zRRpzbt/6qG4L23aq+YTmZVi6a93PtFbNUUPCneaFpJd+5/wJKTtRu ttMGMFe5azCKkx7/jpk+CJK/56QcUKW+ -----END CERTIFICATE-----Generated at Sat Jun 13 16:59:34 2026 by rpki-client