$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa File: 43a7c405-ee0a-3c23-850e-06437fe7b730.roa (raw, json) Hash identifier: HLdRhtwSfsD0RVdHyJq9qtDSx8IUW2gvwSMQ/CtLuIE= Subject key identifier: 3A:ED:27:A7:E1:8D:F7:56:D9:E0:F1:60:0D:7E:6F:3A:48:39:A2:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79004F42FEDE5AA81AD21C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396555 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:04:f4:2f:ed:e5:aa:81:ad:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=03dd7954-6446-40eb-82e3-5dab49e992a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:e2:8a:fd:e7:29:26:29:78:9e:a3:95:db: 0e:f0:56:30:ef:69:83:7a:64:07:31:3f:00:95:c3: cf:cd:e9:6a:e9:6a:bd:e6:d4:e8:9d:15:07:9f:9c: 52:dd:81:6f:eb:67:46:6a:db:5f:24:1a:77:cb:06: 8f:9d:e5:04:76:04:d8:e6:4a:a2:fc:c8:d3:dd:eb: 5e:07:d9:56:10:0d:79:2a:65:61:fb:22:59:52:69: ca:e4:b2:ac:2b:52:b8:d0:01:aa:1c:e9:70:e8:e2: 25:ca:65:a5:ac:aa:4a:6a:bb:63:23:e8:a5:c9:9c: 6e:21:91:d6:c6:db:b9:03:12:93:f8:d7:c2:e2:7e: 33:4d:f4:b0:ea:b9:e8:2f:f9:7d:e4:21:e6:5c:ed: a4:25:e5:69:ae:a6:b1:83:59:08:9d:6b:ca:52:97: 81:f9:af:53:31:d9:33:54:af:10:df:82:56:4b:f7: 8d:d2:a1:a0:44:83:2f:60:55:31:cc:95:d3:26:c1: 34:3c:ec:7b:cd:83:5b:a2:2f:f7:5a:99:73:98:f1: 1b:bb:cc:06:ca:5f:67:c5:a7:b5:e6:2c:c0:65:bc: 40:29:40:7a:c2:8e:e2:db:2f:2f:08:17:ad:04:03: 21:eb:f8:26:09:77:03:4e:4c:e6:2a:79:3c:8f:65: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:ED:27:A7:E1:8D:F7:56:D9:E0:F1:60:0D:7E:6F:3A:48:39:A2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43a7c405-ee0a-3c23-850e-06437fe7b730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f1:8f:5d:c4:30:02:99:ef:8f:4e:c6:59:76:4f:dd:1e:68: 0b:6d:f5:d7:e0:54:fe:f4:a0:ac:f0:e6:8a:5d:03:45:e5:9a: 97:4d:c7:df:72:67:70:22:a6:97:ea:cc:9e:d5:58:a1:26:11: 4a:9e:68:f6:ca:a7:c9:6c:c0:47:13:c3:df:6d:1d:24:5a:1f: e6:10:65:d6:b7:6e:69:ed:41:f9:d2:02:18:95:44:c7:b5:8e: 66:93:43:1f:f1:83:25:ee:a7:26:c5:66:de:59:e2:5e:39:e2: 56:a5:64:a9:5a:86:ac:11:a2:15:2b:cb:d2:8f:ac:d2:3c:82: e7:e1:ce:4a:a9:87:e8:90:e8:ab:7d:e8:0d:f7:60:2e:e1:c1: 43:4b:1f:6c:71:eb:c7:23:58:bf:98:6e:b9:cb:27:43:57:c2: 59:e0:05:98:5b:8d:9d:2b:1d:d8:c8:14:0f:a2:a2:b2:90:cc: b7:86:8e:de:b6:18:ef:2d:b1:ef:5b:f1:76:3a:eb:ba:5a:9d: 54:9d:d1:23:70:71:02:30:21:50:22:f6:9a:8b:f3:fb:55:3e: 87:e1:62:f2:66:d5:8c:c1:f5:42:0d:cb:0f:7a:2a:8d:f9:ee: 78:64:c0:de:fe:89:ad:f8:5d:f1:65:ab:2b:b9:62:dc:c3:71: 9f:46:0d:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAT0L+3lqoGtIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDNkZDc5NTQtNjQ0Ni00MGViLTgyZTMtNWRhYjQ5ZTk5MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAbiiv3nKSYpeJ6jldsO8FYw72mDemQHMT8A lcPPzelq6Wq95tTonRUHn5xS3YFv62dGattfJBp3ywaPneUEdgTY5kqi/MjT3ete B9lWEA15KmVh+yJZUmnK5LKsK1K40AGqHOlw6OIlymWlrKpKartjI+ilyZxuIZHW xtu5AxKT+NfC4n4zTfSw6rnoL/l95CHmXO2kJeVprqaxg1kInWvKUpeB+a9TMdkz VK8Q34JWS/eN0qGgRIMvYFUxzJXTJsE0POx7zYNboi/3WplzmPEbu8wGyl9nxae1 5izAZbxAKUB6wo7i2y8vCBetBAMh6/gmCXcDTkzmKnk8j2VcQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDrtJ6fhjfdW2eDxYA1+bzpIOaIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNhN2M0MDUtZWUwYS0z YzIzLTg1MGUtMDY0MzdmZTdiNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA08Y9dxDACme+PTsZZdk/dHmgLbfXX4FT+9KCs8OaKXQNF5ZqXTcff cmdwIqaX6sye1VihJhFKnmj2yqfJbMBHE8PfbR0kWh/mEGXWt25p7UH50gIYlUTH tY5mk0Mf8YMl7qcmxWbeWeJeOeJWpWSpWoasEaIVK8vSj6zSPILn4c5KqYfokOir fegN92Au4cFDSx9scevHI1i/mG65yydDV8JZ4AWYW42dKx3YyBQPoqKykMy3ho7e thjvLbHvW/F2Ouu6Wp1UndEjcHECMCFQIvaai/P7VT6H4WLyZtWMwfVCDcsPeiqN +e54ZMDe/omt+F3xZasruWLcw3GfRg22 -----END CERTIFICATE-----Generated at Wed Jul 29 04:33:58 2026 by rpki-client