$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa File: 3893d1e1-2218-38f4-82f9-5af50426a787.roa (raw, json) Hash identifier: VB8JFxCp360xmaq62EZMpk2z7Vkk0cQCS6WTCRt7DxM= Subject key identifier: 65:C6:53:70:02:66:4F:1F:43:18:49:27:B7:0A:CE:07:A9:65:1F:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5E2B8CC3F2A7C07A177C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396589 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e2:b8:cc:3f:2a:7c:07:a1:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=2b72b090-13aa-4422-adb3-37489be66a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:88:85:49:fd:ab:a7:b8:98:4d:c9:59:3e: 70:b0:7a:3c:0a:0a:93:78:32:3e:00:f6:aa:f8:d8: fa:20:3d:58:1d:7b:ce:b0:e5:1b:56:31:ed:59:e9: 50:0f:09:d9:fe:75:bc:ba:f1:86:7f:96:e7:fb:46: f6:77:42:de:18:72:ad:65:66:4c:69:30:68:fa:5f: 6e:35:ac:a5:97:cd:e5:63:ec:fa:ee:5b:4a:6a:ed: 97:00:71:8a:5e:41:99:e7:b4:6f:76:f2:4c:fb:11: ae:45:74:1b:7c:12:83:90:a4:43:bf:10:e3:a3:ba: be:43:ae:8e:c8:67:bc:9f:b6:25:c8:4b:2a:02:9c: 4f:33:1e:08:2f:4c:89:9c:74:fc:0e:c4:72:51:1e: 6b:5d:12:f6:6c:9e:0c:66:dd:58:5b:d7:0d:9f:cb: a8:ab:ae:58:66:45:29:c9:10:fa:a7:70:7d:3c:db: 67:f2:84:a4:99:b2:f0:28:8a:b2:95:58:83:df:0d: 15:23:b4:1b:3d:29:4a:bd:73:5c:a7:b4:50:eb:ec: ba:f3:17:a6:71:20:0c:1b:a1:f0:d3:6c:31:1f:d6: dd:f4:ee:40:ac:ba:99:65:9f:50:03:69:7e:4e:4a: 43:25:11:e7:dc:ed:c8:3e:0a:c5:cf:c3:30:2d:2c: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:53:70:02:66:4F:1F:43:18:49:27:B7:0A:CE:07:A9:65:1F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3893d1e1-2218-38f4-82f9-5af50426a787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8e:de:c6:70:cf:1b:26:ed:88:65:ad:4f:6c:97:48:b6:a4: e2:af:45:b2:56:29:23:b4:15:f1:73:2f:4d:b4:4d:8c:47:9f: 4c:1d:ed:1d:dc:cd:a8:a4:24:f6:c9:34:00:a0:71:eb:88:35: 5b:49:89:cb:6b:6d:39:6c:14:96:5c:14:a2:74:f1:fb:6a:00: d1:c5:bb:ee:48:13:8c:41:a0:a9:82:27:c5:48:8f:39:04:0a: c3:f9:5e:06:a8:8a:34:b1:c8:90:c1:e4:21:0c:ac:b4:6a:57: ec:b8:67:a9:18:2e:2e:13:0a:d5:ac:95:18:a5:12:2a:c9:57: 69:30:69:8d:42:6a:c2:42:a6:6b:6c:3a:e4:5a:be:68:f4:34: c1:69:dd:08:df:67:c3:9e:0e:73:5a:a5:a0:92:1b:18:28:9c: 64:16:8b:3a:b0:f1:ce:62:73:22:e3:ce:64:3b:0e:86:3b:67: 03:a6:22:99:57:d1:db:57:8a:ef:6a:cb:0c:0a:14:6e:32:c5: d7:c1:ab:61:69:e3:35:74:af:68:66:b8:4d:1b:ac:6c:4d:3d: f8:6e:34:6d:8a:9a:a9:0f:33:9e:ce:d3:24:a7:fc:66:39:b5: a6:95:2b:4c:df:d0:3a:18:ee:55:5f:c9:09:f3:9c:1a:41:83: c4:d8:5f:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3iteK4zD8qfAehd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MmI3MmIwOTAtMTNhYS00NDIyLWFkYjMtMzc0ODliZTY2YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQiIhUn9q6e4mE3JWT5wsHo8CgqTeDI+APaq +Nj6ID1YHXvOsOUbVjHtWelQDwnZ/nW8uvGGf5bn+0b2d0LeGHKtZWZMaTBo+l9u Nayll83lY+z67ltKau2XAHGKXkGZ57RvdvJM+xGuRXQbfBKDkKRDvxDjo7q+Q66O yGe8n7YlyEsqApxPMx4IL0yJnHT8DsRyUR5rXRL2bJ4MZt1YW9cNn8uoq65YZkUp yRD6p3B9PNtn8oSkmbLwKIqylViD3w0VI7QbPSlKvXNcp7RQ6+y68xemcSAMG6Hw 02wxH9bd9O5ArLqZZZ9QA2l+TkpDJRHn3O3IPgrFz8MwLSyWbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXGU3ACZk8fQxhJJ7cKzgepZR94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg5M2QxZTEtMjIxOC0z OGY0LTgyZjktNWFmNTA0MjZhNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAjt7GcM8bJu2IZa1PbJdItqTir0WyVikjtBXxcy9NtE2MR59MHe0d 3M2opCT2yTQAoHHriDVbSYnLa205bBSWXBSidPH7agDRxbvuSBOMQaCpgifFSI85 BArD+V4GqIo0sciQweQhDKy0alfsuGepGC4uEwrVrJUYpRIqyVdpMGmNQmrCQqZr bDrkWr5o9DTBad0I32fDng5zWqWgkhsYKJxkFos6sPHOYnMi485kOw6GO2cDpiKZ V9HbV4rvassMChRuMsXXwathaeM1dK9oZrhNG6xsTT34bjRtipqpDzOeztMkp/xm ObWmlStM39A6GO5VX8kJ85waQYPE2F8a -----END CERTIFICATE-----Generated at Sat Jun 13 16:49:51 2026 by rpki-client