$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa File: 4d969e38-8862-3acc-8f97-40db9f1796e3.roa (raw, json) Hash identifier: iVKB/Y1PXT6VzvG/uPGkwhSXMwnPJNy9JWEa21dICDI= Subject key identifier: 21:8C:C8:7C:61:21:A3:08:B2:8E:9B:CA:39:C1:B4:8D:99:A3:DD:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5DEDC032C89055826D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396578 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:de:dc:03:2c:89:05:58:26:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=8d00b6b2-d177-452d-8f3a-b308d1ea68dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:c9:ca:e6:82:60:9e:05:15:a2:e7:d8:96: b7:5b:68:d3:fe:54:85:f5:1a:77:ec:cd:f3:5a:56: 11:29:8b:8d:c2:d2:d5:5c:e9:0f:24:37:09:22:e3: 03:83:d3:83:a0:9a:63:3b:88:88:a6:31:91:25:99: f9:f1:ce:56:3a:81:0a:97:c2:37:82:94:9b:fb:cd: fb:63:79:46:ec:7e:9f:10:09:be:b8:c2:0b:a3:48: fd:ef:76:b8:49:31:74:c0:14:4e:bc:0c:58:7d:23: e6:f1:b2:29:4f:27:ea:45:09:85:f8:a3:1a:75:06: 7f:f4:08:09:f5:8f:eb:c6:c8:82:b9:bc:81:8e:d9: e7:ca:6b:66:bf:d9:68:01:c2:da:4e:69:8d:f0:c6: 96:f2:45:ad:12:ae:60:91:85:6d:19:35:2a:8a:aa: 6a:b6:66:f7:5e:f6:3b:6b:86:f0:b0:eb:39:d4:3d: 11:94:3e:0f:f5:d1:0b:4a:a5:51:04:96:5f:e5:97: 6d:6e:1e:19:5d:66:03:1e:57:c6:3a:bf:36:d6:98: af:45:b9:f0:73:23:79:8b:fc:97:4d:7a:73:b4:56: 77:7f:9f:fa:7c:c3:39:9f:d6:76:cf:0e:5c:64:1b: 24:9f:f3:5b:38:82:5b:21:e6:f5:46:1f:12:97:57: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:C8:7C:61:21:A3:08:B2:8E:9B:CA:39:C1:B4:8D:99:A3:DD:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d969e38-8862-3acc-8f97-40db9f1796e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:58:49:f0:82:44:e3:e3:ad:d2:e1:36:e6:9d:06:09:c2:8e: c1:44:40:3f:1b:b2:1b:6d:c4:12:2d:57:a6:c4:53:d4:78:5f: 26:d1:bf:e7:bf:d6:13:88:97:77:00:ee:af:8f:62:72:47:fb: 31:89:2e:fd:e6:92:56:9e:88:b7:6b:bc:fa:e2:e2:ea:73:a4: 7c:e9:bc:a3:96:46:da:be:95:98:4a:10:d7:45:02:c4:b9:14: 82:f4:ed:4a:bd:c2:91:e8:2a:da:6e:59:fa:9a:11:e4:c9:b7: df:88:04:50:70:c0:4c:e5:b9:16:ef:a1:c3:57:29:f4:12:06: 86:8d:aa:8a:d0:d1:12:58:d0:4b:20:a4:d1:10:2c:50:97:19: b0:7f:f8:9d:56:20:96:80:f7:65:46:c7:33:93:cd:f4:d9:e9: 53:e2:4c:2f:06:89:f4:47:d0:28:97:70:4b:39:25:1f:47:c9: 4d:96:b1:96:9b:14:f7:d5:0c:23:31:1b:61:68:54:48:12:32: 82:57:7d:22:86:bd:3c:01:7e:86:d6:ee:db:c5:fd:bc:2b:50: f2:c8:8a:5a:00:93:87:7e:4f:9f:58:7b:c5:e0:ce:73:81:57: e6:4f:3b:cb:ca:d5:23:6b:11:e6:13:bf:16:4f:67:d6:e9:13: 12:64:03:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itd7cAyyJBVgm1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk OGQwMGI2YjItZDE3Ny00NTJkLThmM2EtYjMwOGQxZWE2OGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic3JyuaCYJ4FFaLn2Ja3W2jT/lSF9Rp37M3z WlYRKYuNwtLVXOkPJDcJIuMDg9ODoJpjO4iIpjGRJZn58c5WOoEKl8I3gpSb+837 Y3lG7H6fEAm+uMILo0j973a4STF0wBROvAxYfSPm8bIpTyfqRQmF+KMadQZ/9AgJ 9Y/rxsiCubyBjtnnymtmv9loAcLaTmmN8MaW8kWtEq5gkYVtGTUqiqpqtmb3XvY7 a4bwsOs51D0RlD4P9dELSqVRBJZf5Zdtbh4ZXWYDHlfGOr821pivRbnwcyN5i/yX TXpztFZ3f5/6fMM5n9Z2zw5cZBskn/NbOIJbIeb1Rh8Sl1eKWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCGMyHxhIaMIso6byjnBtI2Zo93+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ5NjllMzgtODg2Mi0z YWNjLThmOTctNDBkYjlmMTc5NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBuWEnwgkTj463S4TbmnQYJwo7BREA/G7IbbcQSLVemxFPUeF8m0b/n v9YTiJd3AO6vj2JyR/sxiS795pJWnoi3a7z64uLqc6R86byjlkbavpWYShDXRQLE uRSC9O1KvcKR6Crabln6mhHkybffiARQcMBM5bkW76HDVyn0EgaGjaqK0NESWNBL IKTRECxQlxmwf/idViCWgPdlRsczk8302elT4kwvBon0R9Aol3BLOSUfR8lNlrGW mxT31QwjMRthaFRIEjKCV30ihr08AX6G1u7bxf28K1DyyIpaAJOHfk+fWHvF4M5z gVfmTzvLytUjaxHmE78WT2fW6RMSZAO8 -----END CERTIFICATE-----Generated at Sat Jun 13 15:36:17 2026 by rpki-client