$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa File: 32c53d16-72c4-33dc-9880-0c5e25f17660.roa (raw, json) Hash identifier: qDEcrXzqdS4/xIjtaiLDjSpauDyvO4gUwxpd0+pCQXw= Subject key identifier: 3E:68:03:C2:43:A2:B0:D5:80:41:4D:87:CE:09:76:08:D2:C8:EA:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79801A400119178CB77EBC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397212 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:01:a4:00:11:91:78:cb:77:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9f1d6398-8e2d-448f-a037-f3c618b49c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:e6:6f:88:14:06:4e:02:81:c9:c0:09:41: b4:ab:87:97:eb:87:5a:a8:ff:c3:b4:b4:3d:5e:8d: 48:ca:84:fb:2c:2c:63:56:bc:64:3a:78:8c:47:6b: c3:65:04:dd:18:11:3e:b9:2f:0f:dc:d9:f8:64:b6: 01:77:ad:0c:dd:42:b8:05:44:09:cd:b0:92:b2:c3: b2:f5:7a:65:4f:9b:19:e0:72:69:48:63:7d:85:35: e3:d2:19:95:bf:5b:0f:bc:98:be:49:a4:f4:85:8c: 55:77:23:14:56:a0:c5:9e:01:94:8d:9f:2d:16:73: 14:8d:01:1a:1f:2f:e5:34:1e:c5:37:f1:dd:e5:a6: d8:0f:35:2a:73:1c:ed:68:db:e1:4f:4e:ce:73:50: 52:b0:cb:7b:e5:e1:a0:bb:8b:c9:36:52:a5:cb:3d: 17:48:87:e8:cc:5c:ad:4c:c8:54:84:40:f5:c8:b6: 3a:c8:ed:7e:89:69:ee:29:35:e3:f6:e1:f0:86:8d: 4b:da:b7:20:6f:91:63:20:1b:cc:f7:df:b8:ba:bd: 04:b8:da:2b:b3:26:a0:65:bb:f7:2e:24:a4:ad:46: 22:c9:89:5c:ce:34:94:c7:75:f1:32:f9:fb:52:db: 61:3f:c5:29:a7:d4:55:94:46:26:9f:30:11:e7:7c: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:68:03:C2:43:A2:B0:D5:80:41:4D:87:CE:09:76:08:D2:C8:EA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0c:0e:07:d5:56:cd:fc:56:13:71:91:65:a2:a2:7e:57:ea: 3f:27:38:97:88:30:1f:95:9c:96:50:31:f7:ca:c3:a0:1c:b5: 64:4c:1d:c1:11:16:4c:ba:09:62:a3:b1:3d:dc:5a:d4:6f:cf: e9:e5:26:80:70:b5:f0:d3:5c:2a:1b:b8:02:58:4b:21:3a:41: 9b:42:4c:25:48:eb:f6:2b:cc:0b:15:fc:21:41:5b:64:11:18: 7c:6a:80:3b:38:7c:39:dd:7e:4c:a4:4a:5f:92:47:ef:98:c9: e5:7b:f4:a6:20:9d:f3:da:4e:f3:0c:92:f9:dd:0e:56:e8:52: 1d:76:ae:48:2f:b3:d7:69:84:24:04:49:fc:64:a5:cd:54:6f: 6a:8a:da:b1:62:8d:42:2b:3d:7f:a1:b7:f8:6f:0e:da:84:ef: 2f:f8:a0:35:62:88:88:51:02:90:b2:80:ec:89:a9:64:ee:76: ad:3a:00:21:e4:10:c0:56:a8:97:50:da:00:25:a5:dd:fd:8b: 63:b6:b3:fa:9a:39:18:a6:73:9d:98:d1:b1:77:f5:89:cf:7d: f5:7a:db:ac:cd:f0:d8:a1:84:1b:e5:65:10:12:58:9f:bc:e6: a5:b6:12:5a:62:f3:24:e6:a4:71:02:13:8c:ec:63:de:0f:17: 84:af:10:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAGkABGReMt368AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWYxZDYzOTgtOGUyZC00NDhmLWEwMzctZjNjNjE4YjQ5Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc7mb4gUBk4CgcnACUG0q4eX64daqP/DtLQ9 Xo1IyoT7LCxjVrxkOniMR2vDZQTdGBE+uS8P3Nn4ZLYBd60M3UK4BUQJzbCSssOy 9XplT5sZ4HJpSGN9hTXj0hmVv1sPvJi+SaT0hYxVdyMUVqDFngGUjZ8tFnMUjQEa Hy/lNB7FN/Hd5abYDzUqcxztaNvhT07Oc1BSsMt75eGgu4vJNlKlyz0XSIfozFyt TMhUhED1yLY6yO1+iWnuKTXj9uHwho1L2rcgb5FjIBvM99+4ur0EuNorsyagZbv3 LiSkrUYiyYlczjSUx3XxMvn7UtthP8Upp9RVlEYmnzAR53wcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5oA8JDorDVgEFNh84JdgjSyOo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJjNTNkMTYtNzJjNC0z M2RjLTk4ODAtMGM1ZTI1ZjE3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAMDgfVVs38VhNxkWWion5X6j8nOJeIMB+VnJZQMffKw6ActWRMHcER Fky6CWKjsT3cWtRvz+nlJoBwtfDTXCobuAJYSyE6QZtCTCVI6/YrzAsV/CFBW2QR GHxqgDs4fDndfkykSl+SR++YyeV79KYgnfPaTvMMkvndDlboUh12rkgvs9dphCQE Sfxkpc1Ub2qK2rFijUIrPX+ht/hvDtqE7y/4oDViiIhRApCygOyJqWTudq06ACHk EMBWqJdQ2gAlpd39i2O2s/qaORimc52Y0bF39YnPffV626zN8NihhBvlZRASWJ+8 5qW2Elpi8yTmpHECE4zsY94PF4SvEJ0= -----END CERTIFICATE-----Generated at Wed Jul 29 11:22:26 2026 by rpki-client