$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa File: 39ee7223-574a-3025-8c2b-2816b5636e65.roa (raw, json) Hash identifier: 1/ThIZuK8s2f2CK76rVZKJiQneiPoSEDNdeAAhKAUGs= Subject key identifier: 8F:94:A3:32:8D:61:A1:69:94:9E:94:C7:C7:4C:92:22:EF:6D:9A:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F14731D192AD5EC2DE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397209 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f1:47:31:d1:92:ad:5e:c2:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=228f3e1b-7630-4b68-a148-a3ab29f0482a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fb:1d:4a:a4:3a:57:ee:f3:64:d5:b4:69:16: 62:f8:22:1a:dd:81:2f:5c:90:29:44:62:6d:32:58: cc:a6:7b:2b:d3:f8:f8:0c:85:5a:4b:ff:65:e7:dc: ba:94:aa:83:6b:08:60:a1:84:2f:fb:c7:94:8a:e6: bd:ad:80:f3:8a:78:d6:dd:5f:cc:fb:9b:c4:2c:25: 3e:41:8a:05:cb:f0:00:7f:a0:a2:8f:25:92:cc:ce: de:f3:48:50:6c:54:64:fa:ea:15:80:60:3f:7a:4b: 75:db:ce:c0:66:e1:98:3f:36:bb:51:20:66:56:31: 78:a4:03:ee:f2:da:05:db:53:34:86:bf:ff:96:a2: cc:c5:94:55:6d:24:a0:34:f3:d8:10:a4:c9:23:6b: 8a:ef:5a:87:ba:39:fb:bb:8d:5b:8b:18:83:d2:d5: db:18:7b:29:b5:c3:ab:b3:70:4d:df:94:8c:27:8b: a0:fe:51:01:f7:2b:63:43:3d:c9:5a:31:8d:a2:46: be:2c:4e:37:c9:a0:46:26:74:24:49:c8:cc:ea:56: 2a:e5:40:42:22:92:52:91:50:a6:db:10:ce:42:82: 26:d1:08:b6:0d:e2:f0:87:e8:7a:04:d7:08:79:eb: a4:65:33:01:9d:5f:1d:f0:0a:95:7c:2b:47:38:57: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:A3:32:8D:61:A1:69:94:9E:94:C7:C7:4C:92:22:EF:6D:9A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/39ee7223-574a-3025-8c2b-2816b5636e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8f:ae:ca:7f:ef:55:76:8d:2b:3d:8c:2e:3b:52:d1:79:a1: ae:22:f5:02:6d:46:5d:78:ae:d8:1a:54:2b:b2:3d:56:a6:3c: 97:31:a9:c7:56:25:4d:a8:97:6c:2e:56:50:35:49:5c:61:a2: d2:90:92:50:32:52:a3:1c:63:b8:47:05:09:bb:46:87:29:cb: 0c:0b:d8:bd:2f:3a:aa:dd:15:3b:b4:8d:ed:de:05:00:d7:c2: b7:e5:0d:50:a3:0c:3f:0c:ee:c9:cd:4a:6b:fa:a0:e7:e1:4e: 35:65:04:05:ea:fb:2e:fa:59:39:18:b4:e2:51:08:1a:04:99: 72:f1:ca:62:a2:1c:b5:e4:bc:45:fa:5c:34:d5:19:b5:d3:8b: 12:f5:8b:04:3c:91:01:d7:49:0e:6d:b5:0a:c1:e6:ef:3f:ec: d6:3b:a6:a7:e0:87:40:f0:19:3e:33:b7:14:95:44:5b:1c:1f: 28:d6:52:06:c3:ba:44:04:d9:8f:16:d9:86:87:93:ec:1c:ff: 3e:72:84:35:b5:91:2c:29:2c:19:1f:50:46:de:46:d7:85:0b: 0b:6c:6c:15:bc:90:fb:f3:ea:e8:ad:dc:0d:b7:fc:45:8b:f0: 04:78:46:67:42:97:7b:98:96:57:54:de:ff:ee:19:68:21:c1: 2c:04:22:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfFHMdGSrV7C3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MjI4ZjNlMWItNzYzMC00YjY4LWExNDgtYTNhYjI5ZjA0ODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfsdSqQ6V+7zZNW0aRZi+CIa3YEvXJApRGJt MljMpnsr0/j4DIVaS/9l59y6lKqDawhgoYQv+8eUiua9rYDzinjW3V/M+5vELCU+ QYoFy/AAf6CijyWSzM7e80hQbFRk+uoVgGA/ekt1287AZuGYPza7USBmVjF4pAPu 8toF21M0hr//lqLMxZRVbSSgNPPYEKTJI2uK71qHujn7u41bixiD0tXbGHsptcOr s3BN35SMJ4ug/lEB9ytjQz3JWjGNoka+LE43yaBGJnQkScjM6lYq5UBCIpJSkVCm 2xDOQoIm0Qi2DeLwh+h6BNcIeeukZTMBnV8d8AqVfCtHOFcyewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI+UozKNYaFplJ6Ux8dMkiLvbZriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzllZTcyMjMtNTc0YS0z MDI1LThjMmItMjgxNmI1NjM2ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqj67Kf+9Vdo0rPYwuO1LReaGuIvUCbUZdeK7YGlQrsj1WpjyXManH ViVNqJdsLlZQNUlcYaLSkJJQMlKjHGO4RwUJu0aHKcsMC9i9Lzqq3RU7tI3t3gUA 18K35Q1Qoww/DO7JzUpr+qDn4U41ZQQF6vsu+lk5GLTiUQgaBJly8cpiohy15LxF +lw01Rm104sS9YsEPJEB10kObbUKwebvP+zWO6an4IdA8Bk+M7cUlURbHB8o1lIG w7pEBNmPFtmGh5PsHP8+coQ1tZEsKSwZH1BG3kbXhQsLbGwVvJD78+rordwNt/xF i/AEeEZnQpd7mJZXVN7/7hloIcEsBCJY -----END CERTIFICATE-----Generated at Sat Jun 13 15:53:10 2026 by rpki-client