$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa File: 396a189c-7b29-340f-ba67-4b8d052017b8.roa (raw, json) Hash identifier: 4eXL8Yx/qosJdDrgjxpBKTgH0rOr9aWPdxPU9wiIBBc= Subject key identifier: 84:04:21:A8:A0:DB:02:DA:DC:72:D7:D3:AA:DF:E7:AA:C8:82:AB:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F5F0EA555CE939FF5880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396611 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f5:f0:ea:55:5c:e9:39:ff:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=ed4b391b-331a-4a3a-ae95-aaa1261ee627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:7b:10:8c:1f:7e:2b:02:f5:a5:ce:cf:81: 4b:33:41:68:7b:d3:01:7c:44:1a:94:98:62:51:57: 23:73:e8:f0:53:89:ac:a9:2e:04:fe:67:69:b5:d0: 50:9e:a8:a5:bd:35:43:63:00:17:e7:b9:ac:d8:93: 92:37:52:0e:77:49:27:c6:8c:0d:e9:19:4a:15:bd: 21:0d:77:ca:5b:94:80:72:50:f0:c5:7a:c9:db:00: b6:1d:08:ab:60:e6:e2:cd:e6:63:01:f8:fc:eb:18: 27:06:fb:60:49:24:ee:ba:05:de:c2:08:bd:03:8c: 37:d4:aa:bc:04:75:d3:04:d3:8e:55:a4:05:4c:ca: 43:ff:8e:0f:6c:37:b0:65:26:00:6e:af:6f:a8:17: 9b:f9:c4:b5:53:9f:b1:e1:f5:2b:89:94:4b:5f:04: 9e:40:8f:dc:04:aa:5e:77:6b:54:f7:4b:18:e2:cc: e9:9a:05:10:0d:40:14:a7:8f:cd:43:e6:49:ad:7e: fa:0c:40:f2:7e:9a:d2:03:14:e8:f3:ae:e5:83:6c: e0:f8:89:3a:bb:20:b3:b3:6d:c4:b9:9a:19:40:63: f2:b0:96:83:9b:64:b9:40:81:0a:4a:cb:4a:4a:96: b6:5a:38:34:5d:f2:81:5b:64:3f:a2:b5:82:2e:58: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:04:21:A8:A0:DB:02:DA:DC:72:D7:D3:AA:DF:E7:AA:C8:82:AB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a189c-7b29-340f-ba67-4b8d052017b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a6:85:78:83:26:ba:d4:15:a7:d8:0d:9d:5d:04:ef:00:f0: 6c:7c:83:f2:5e:b3:17:7d:bc:93:91:28:6b:e6:03:29:f7:24: 57:55:e4:a9:78:e7:1c:89:a8:0f:ad:76:1b:2b:80:39:a6:9b: e3:07:8b:23:58:8c:bb:54:b3:5d:58:47:3a:e1:c2:ac:ad:7f: e5:bd:af:b7:d5:a5:cd:b9:a9:c7:c6:9d:17:db:3f:65:c1:79: 45:74:6a:d8:7e:dc:37:59:44:e5:46:97:d7:35:50:f8:c1:d0: 61:55:c4:a2:f8:74:3a:cb:b6:b8:ab:14:ed:25:be:c9:89:88: c3:1d:7c:5c:ab:b4:c1:71:34:e9:1b:5b:fe:8f:33:01:b2:dc: 92:4d:83:7d:01:6a:fe:b0:c6:19:3f:5e:ea:36:b5:98:e5:4a: 24:2f:67:02:ba:eb:a6:5b:66:59:07:3e:15:02:b1:11:ab:ab: 93:5b:dd:28:e0:a2:6c:23:19:66:56:85:f4:af:ea:db:80:08: f5:4e:21:7a:64:e8:24:2f:7b:fd:27:c6:c8:cc:fa:05:6b:f9: cd:c3:31:0a:7b:12:38:74:48:75:bf:58:ae:80:70:2c:25:17: 8c:9d:20:a3:76:52:65:6a:d5:bd:8b:eb:b4:c9:b9:33:85:a8: fe:22:b1:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfXw6lVc6Tn/WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZWQ0YjM5MWItMzMxYS00YTNhLWFlOTUtYWFhMTI2MWVlNjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLJ7EIwffisC9aXOz4FLM0Foe9MBfEQalJhi UVcjc+jwU4msqS4E/mdptdBQnqilvTVDYwAX57ms2JOSN1IOd0knxowN6RlKFb0h DXfKW5SAclDwxXrJ2wC2HQirYObizeZjAfj86xgnBvtgSSTuugXewgi9A4w31Kq8 BHXTBNOOVaQFTMpD/44PbDewZSYAbq9vqBeb+cS1U5+x4fUriZRLXwSeQI/cBKpe d2tU90sY4szpmgUQDUAUp4/NQ+ZJrX76DEDyfprSAxTo867lg2zg+Ik6uyCzs23E uZoZQGPysJaDm2S5QIEKSstKSpa2Wjg0XfKBW2Q/orWCLli+7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIQEIaig2wLa3HLX06rf56rIgqusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk2YTE4OWMtN2IyOS0z NDBmLWJhNjctNGI4ZDA1MjAxN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBXpoV4gya61BWn2A2dXQTvAPBsfIPyXrMXfbyTkShr5gMp9yRXVeSp eOcciagPrXYbK4A5ppvjB4sjWIy7VLNdWEc64cKsrX/lva+31aXNuanHxp0X2z9l wXlFdGrYftw3WUTlRpfXNVD4wdBhVcSi+HQ6y7a4qxTtJb7JiYjDHXxcq7TBcTTp G1v+jzMBstySTYN9AWr+sMYZP17qNrWY5UokL2cCuuumW2ZZBz4VArERq6uTW90o 4KJsIxlmVoX0r+rbgAj1TiF6ZOgkL3v9J8bIzPoFa/nNwzEKexI4dEh1v1iugHAs JReMnSCjdlJlatW9i+u0ybkzhaj+IrFJ -----END CERTIFICATE-----Generated at Sat Jun 13 13:20:27 2026 by rpki-client