$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa File: 47d03e3d-c464-3f1e-bbde-02be87964859.roa (raw, json) Hash identifier: C9XzI39CHQaIj1TLAskWzwpJrX4VPjguzfK5sStKfp4= Subject key identifier: EF:D4:2C:4F:A6:7F:FC:8C:CA:D1:5A:F3:6E:DC:05:A3:87:F0:2A:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DFA706E9730C5FDCF16E040C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 396591 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:6e:97:30:c5:fd:cf:16:e0:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=fb18f9de-55e7-40c0-b9af-0d579f1c67b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:f1:56:af:31:45:3f:a1:74:85:f8:4f:d4: b2:25:c6:3c:14:0d:eb:17:be:d6:b5:6d:ef:69:b0: 25:75:d8:b0:56:e1:5c:06:e3:15:df:89:4e:b3:e3: 96:4b:80:fb:c9:64:47:98:40:d4:27:6c:0e:bb:a3: 99:3f:b2:d8:50:dc:f8:18:02:3b:b9:a3:79:93:72: aa:cc:d4:9a:26:47:7e:1b:77:47:62:8f:3b:95:69: f8:2a:f2:9b:1a:93:a1:3b:52:ad:fa:1a:63:2d:51: 85:d1:41:14:5f:13:da:0f:15:0b:cf:88:07:35:e3: 45:e6:d1:62:c6:42:e4:4e:fc:65:0e:22:82:98:74: f7:05:2f:41:25:fc:69:41:35:23:5e:4d:0e:d9:5e: 62:63:4e:9f:e4:32:84:43:40:ed:ce:6e:9b:1b:99: c3:36:cd:ce:4b:f0:df:fa:c7:89:33:a0:30:fb:56: 28:56:fd:c3:a2:03:dc:29:2f:e1:3f:b6:9f:c2:2c: 46:44:28:5c:8d:7c:72:bb:a3:c3:cf:67:25:bf:ea: 2e:28:6a:27:88:c2:49:9c:77:6d:f2:f0:99:1d:3e: a1:fb:64:be:ae:60:3f:13:2d:64:e2:a9:1b:35:cc: ab:4d:c3:18:60:73:91:eb:20:51:08:18:de:b7:01: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:2C:4F:A6:7F:FC:8C:CA:D1:5A:F3:6E:DC:05:A3:87:F0:2A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/47d03e3d-c464-3f1e-bbde-02be87964859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6c:c7:a4:87:9e:30:a7:6e:3c:8e:f0:d4:be:a6:25:0c:d1: 1d:5b:df:55:ed:c9:81:96:09:17:cc:f5:bb:2e:59:03:54:8a: c7:f1:d8:61:f8:fa:8e:34:16:d4:3f:9b:86:04:52:a4:b1:b6: 34:b4:8d:cf:7f:a5:cc:e7:18:a1:e1:f8:98:8d:29:4c:bc:28: c0:29:95:1d:45:e5:f3:e0:b5:3e:ab:2b:b5:3d:4a:ae:40:09: 63:7d:f7:c5:75:92:6d:5a:1e:f3:a4:92:2a:47:e9:5c:a6:cf: 91:a6:5e:25:c2:dc:44:f0:d2:7b:fa:5d:be:ac:71:a8:3c:59: 8b:03:8a:90:d5:56:66:28:cf:f4:ac:6c:81:d5:49:9d:41:25: 86:ae:ed:0b:e0:37:9d:fc:ec:7a:79:b9:3a:ee:92:87:25:8f: e6:1c:f3:41:20:33:ce:71:7d:a5:95:38:a4:0d:52:9e:bb:f7: 6f:a7:53:05:2d:d7:64:d8:8e:0d:0d:f9:fa:57:ad:e6:f2:53: 25:41:cb:44:e4:c0:af:46:1b:c2:03:c9:8e:14:56:0e:d8:79: a9:a9:f7:eb:59:4f:87:ac:a2:30:18:2e:9d:c6:fe:7f:40:a2: 9e:93:2c:e0:65:00:27:a0:24:2b:e0:41:76:ca:71:9e:40:69: d1:7a:71:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cG6XMMX9zxbgQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZmIxOGY5ZGUtNTVlNy00MGMwLWI5YWYtMGQ1NzlmMWM2N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgETxVq8xRT+hdIX4T9SyJcY8FA3rF77WtW3v abAlddiwVuFcBuMV34lOs+OWS4D7yWRHmEDUJ2wOu6OZP7LYUNz4GAI7uaN5k3Kq zNSaJkd+G3dHYo87lWn4KvKbGpOhO1Kt+hpjLVGF0UEUXxPaDxULz4gHNeNF5tFi xkLkTvxlDiKCmHT3BS9BJfxpQTUjXk0O2V5iY06f5DKEQ0Dtzm6bG5nDNs3OS/Df +seJM6Aw+1YoVv3DogPcKS/hP7afwixGRChcjXxyu6PDz2clv+ouKGoniMJJnHdt 8vCZHT6h+2S+rmA/Ey1k4qkbNcyrTcMYYHOR6yBRCBjetwFoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/ULE+mf/yMytFa827cBaOH8Cr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDdkMDNlM2QtYzQ2NC0z ZjFlLWJiZGUtMDJiZTg3OTY0ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNsx6SHnjCnbjyO8NS+piUM0R1b31XtyYGWCRfM9bsuWQNUisfx2GH4 +o40FtQ/m4YEUqSxtjS0jc9/pcznGKHh+JiNKUy8KMAplR1F5fPgtT6rK7U9Sq5A CWN998V1km1aHvOkkipH6Vymz5GmXiXC3ETw0nv6Xb6scag8WYsDipDVVmYoz/Ss bIHVSZ1BJYau7QvgN5387Hp5uTrukoclj+Yc80EgM85xfaWVOKQNUp6792+nUwUt 12TYjg0N+fpXrebyUyVBy0TkwK9GG8IDyY4UVg7Yeamp9+tZT4esojAYLp3G/n9A op6TLOBlACegJCvgQXbKcZ5AadF6cXM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:38 2026 by rpki-client