
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3eff34-c800-3b01-aaf8-0ab8bbd1b87d.roa
File: 4c3eff34-c800-3b01-aaf8-0ab8bbd1b87d.roa (raw, json)
Hash identifier: eCz/DAKcs3YwF12AWQTXIwyDuRqYiH23bgC5M8Qtsuo=
Subject key identifier: B4:FB:A5:4A:5A:86:43:BB:E5:2A:9C:AA:E7:9E:84:8A:4B:54:B5:F6
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EA79028C89365EE25EA221400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3eff34-c800-3b01-aaf8-0ab8bbd1b87d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397208
IP address blocks: 198.41.0.4/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:90:28:c8:93:65:ee:25:ea:22:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4685d93b-bdd2-438c-919c-d92aee6f851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:8b:f9:90:06:7b:43:7c:ea:82:b2:3f:b5:
2b:95:b5:9d:0a:1e:bc:50:4c:b7:82:d8:41:b9:a6:
77:eb:12:dc:a7:84:47:21:84:e1:cf:94:ec:b6:a5:
a7:c7:bb:ef:ac:bd:dc:f1:f3:c1:19:2c:6a:e2:5e:
15:22:aa:4a:70:44:d5:6b:2c:f4:d3:a6:46:95:82:
81:e2:b3:11:25:78:84:ce:e9:bf:92:2f:23:38:01:
70:f4:4c:24:1c:eb:41:39:29:34:13:da:73:56:43:
fa:42:6f:18:9f:d2:ef:40:7f:86:86:26:d1:1d:8d:
2b:65:51:01:cb:a5:79:e6:07:4b:43:e6:e1:68:27:
ff:c1:76:ac:21:0d:e7:ee:dc:f7:74:0a:1a:4a:54:
e6:99:dd:ef:ab:8e:65:9e:a0:f8:9e:10:2f:51:4a:
91:a4:d8:c0:3f:9e:e2:0b:ef:69:9a:c1:24:e3:1d:
3b:18:75:f9:b7:1b:20:5c:e4:96:d3:17:7a:1e:9d:
2b:f2:1b:7b:59:d4:20:08:87:9e:3a:16:ce:c0:14:
3d:76:78:ac:e2:5b:4f:2a:83:94:dc:56:17:ca:b1:
eb:e4:71:2d:2a:f0:de:92:20:49:22:db:1e:88:26:
87:85:b5:cd:8d:46:eb:cc:3d:d4:be:e0:c1:78:21:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FB:A5:4A:5A:86:43:BB:E5:2A:9C:AA:E7:9E:84:8A:4B:54:B5:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c3eff34-c800-3b01-aaf8-0ab8bbd1b87d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.0.4/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:6c:19:82:d0:39:92:bc:bd:bf:b5:46:2a:a0:89:b5:48:ba:
1f:21:58:b3:49:e5:5c:9c:10:63:1a:04:74:e6:5e:16:6a:95:
3f:34:7f:8d:96:59:82:3d:9c:7e:37:43:ed:b8:32:9e:66:53:
27:6d:61:e0:a8:9e:67:95:5e:7a:ef:f6:9a:b8:eb:88:53:a5:
9f:e3:3d:78:02:4d:bf:ff:53:02:e1:b7:37:e1:2b:25:e8:b8:
ad:06:f3:03:79:d2:7e:fd:dd:cd:8a:fe:2c:19:a3:f0:76:f1:
23:ab:fe:0d:c2:3e:9e:d5:4c:ad:12:a4:a4:f2:ce:0a:8b:45:
ce:65:17:cb:2d:ae:1e:db:27:9b:e0:96:4c:8a:86:28:44:4e:
e9:9e:33:53:18:e4:b6:63:70:aa:f4:e7:fe:5a:ac:a1:1a:07:
dc:d7:df:d5:54:6a:7c:e0:e2:90:d6:2a:86:c8:b1:55:bd:5c:
0e:73:f9:97:15:4d:f4:0a:d5:84:b7:27:ea:a6:c0:2b:89:f6:
9e:5d:71:8a:ec:a8:91:5e:c0:5e:9a:32:0d:19:e0:16:ca:fc:
f0:c3:cb:85:30:14:1c:a0:7f:44:c6:14:30:ea:f5:15:30:f9:
c8:97:b1:3e:ca:8c:16:11:4b:ba:0a:2a:57:f2:55:ce:5e:e5:
eb:76:ec:4c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkCjIk2XuJeoiFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDY4NWQ5M2ItYmRkMi00MzhjLTkxOWMtZDkyYWVlNmY4NTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbyL+ZAGe0N86oKyP7UrlbWdCh68UEy3gthB
uaZ36xLcp4RHIYThz5TstqWnx7vvrL3c8fPBGSxq4l4VIqpKcETVayz006ZGlYKB
4rMRJXiEzum/ki8jOAFw9EwkHOtBOSk0E9pzVkP6Qm8Yn9LvQH+GhibRHY0rZVEB
y6V55gdLQ+bhaCf/wXasIQ3n7tz3dAoaSlTmmd3vq45lnqD4nhAvUUqRpNjAP57i
C+9pmsEk4x07GHX5txsgXOSW0xd6Hp0r8ht7WdQgCIeeOhbOwBQ9dnis4ltPKoOU
3FYXyrHr5HEtKvDekiBJItseiCaHhbXNjUbrzD3UvuDBeCGG8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLT7pUpahkO75SqcqueehIpLVLX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMzZWZmMzQtYzgwMC0z
YjAxLWFhZjgtMGFiOGJiZDFiODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBBbBmC0DmSvL2/tUYqoIm1SLofIVizSeVcnBBjGgR05l4WapU/NH+N
llmCPZx+N0PtuDKeZlMnbWHgqJ5nlV567/aauOuIU6Wf4z14Ak2//1MC4bc34Ssl
6LitBvMDedJ+/d3Niv4sGaPwdvEjq/4Nwj6e1UytEqSk8s4Ki0XOZRfLLa4e2yeb
4JZMioYoRE7pnjNTGOS2Y3Cq9Of+WqyhGgfc19/VVGp84OKQ1iqGyLFVvVwOc/mX
FU30CtWEtyfqpsArifaeXXGK7KiRXsBemjINGeAWyvzww8uFMBQcoH9ExhQw6vUV
MPnIl7E+yowWEUu6CipX8lXOXuXrduxM
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:07 2026 by rpki-client