$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa File: 4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa (raw, json) Hash identifier: jGPqUYxq+0GrxmhDgh/JToF36xIQZCR/+vUmHnckPOs= Subject key identifier: 3D:DA:34:80:AF:0C:41:FC:B5:1D:ED:E6:5D:45:4E:F8:CB:DF:0E:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FF1E662517C96347AF700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36631 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:f1:e6:62:51:7c:96:34:7a:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6722547f-0f08-4d4c-aa80-57e20c3e847b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:4b:f0:90:9f:e7:69:61:54:fd:7b:d0:32: 69:0a:55:35:cf:0e:51:ce:de:1b:c1:50:6c:16:25: 48:47:da:01:a3:40:59:c3:c3:9c:30:bb:f1:5f:ef: d0:70:58:91:a6:da:03:4c:00:15:01:79:38:9e:f8: f9:1d:74:77:a2:df:b0:c9:ad:dd:dd:8b:e9:54:1e: 46:eb:e9:63:f9:19:02:0c:e4:e6:e1:b0:73:ee:06: f0:62:44:d5:ac:9a:c2:82:7c:20:8e:e0:5b:78:7c: 97:16:de:7c:d7:81:4d:4a:0c:57:97:1f:c0:f1:b8: b7:58:45:77:dd:47:58:fa:ff:32:09:4b:e4:09:ba: df:9b:34:44:1b:93:3a:b6:03:b0:43:1a:5b:52:a2: 92:53:e5:26:8b:6f:5a:ce:35:22:a8:56:0b:d7:9c: a3:7d:08:7a:d5:13:41:07:49:cd:28:90:32:3d:ee: 00:25:48:1e:ab:89:6d:bc:ce:35:ac:ed:29:d9:49: eb:7b:b0:d6:e8:a9:48:ee:d9:6e:90:34:86:13:87: 75:46:ab:d8:ce:99:ba:d1:c4:c7:a7:00:df:b9:5d: ad:63:78:05:49:04:9c:71:c9:3e:5a:fd:1c:de:d5: d7:9b:b4:85:ca:7e:55:83:e8:e9:f5:45:67:a1:5b: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DA:34:80:AF:0C:41:FC:B5:1D:ED:E6:5D:45:4E:F8:CB:DF:0E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4ffa6ed8-bc82-3ea5-bfc6-7b2f86033823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5f:3f:2f:ab:38:b2:32:0e:b3:44:e1:19:cf:07:87:aa:f8: 63:72:ed:09:56:6e:97:a5:a1:5a:45:36:44:0a:9e:f3:89:f0: b7:1b:7a:7c:7d:3a:08:2c:b0:49:85:fb:b3:13:10:b2:e7:c9: 42:a2:f9:d4:18:c6:86:98:93:fd:4a:0d:a8:90:37:90:8c:2b: 82:ae:80:14:b9:5d:f0:33:49:52:0e:3d:c6:b2:9c:51:64:26: c0:aa:f0:9b:d1:9f:5b:c3:dc:7e:e8:91:ad:8f:0f:49:a0:3b: 07:74:fd:d1:73:84:67:68:51:f1:5c:a0:b0:6a:5f:d7:ec:04: 81:f6:92:3c:f6:c2:8f:aa:ce:8a:21:da:1d:21:ab:37:30:16: 68:77:c7:df:35:c2:23:c6:51:bf:b1:63:9d:f6:9f:c2:17:86: 8e:9b:57:22:5e:96:2f:5e:54:51:e4:f8:d0:99:2a:d2:4c:0f: 1e:d7:30:ea:1f:fb:75:16:7e:24:44:a4:87:9f:b1:e9:74:75: 9b:1e:a4:6b:cd:f6:46:a8:b3:4c:38:f0:8b:98:c1:71:78:9a: e6:73:fd:e5:b1:eb:b0:7d:60:3f:0f:04:16:f9:4c:25:3a:30: 7c:05:9c:9b:51:52:04:f8:0b:75:08:3c:5a:ff:6b:c9:28:cb: 2c:3c:33:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/HmYlF8ljR69wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjcyMjU0N2YtMGYwOC00ZDRjLWFhODAtNTdlMjBjM2U4NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8hL8JCf52lhVP170DJpClU1zw5Rzt4bwVBs FiVIR9oBo0BZw8OcMLvxX+/QcFiRptoDTAAVAXk4nvj5HXR3ot+wya3d3YvpVB5G 6+lj+RkCDOTm4bBz7gbwYkTVrJrCgnwgjuBbeHyXFt5814FNSgxXlx/A8bi3WEV3 3UdY+v8yCUvkCbrfmzREG5M6tgOwQxpbUqKSU+Umi29azjUiqFYL15yjfQh61RNB B0nNKJAyPe4AJUgeq4ltvM41rO0p2Unre7DW6KlI7tlukDSGE4d1RqvYzpm60cTH pwDfuV2tY3gFSQSccck+Wv0c3tXXm7SFyn5Vg+jp9UVnoVsPxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD3aNICvDEH8tR3t5l1FTvjL3w5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZmYTZlZDgtYmM4Mi0z ZWE1LWJmYzYtN2IyZjg2MDMzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuXz8vqziyMg6zROEZzweHqvhjcu0JVm6XpaFaRTZECp7zifC3G3p8 fToILLBJhfuzExCy58lCovnUGMaGmJP9Sg2okDeQjCuCroAUuV3wM0lSDj3GspxR ZCbAqvCb0Z9bw9x+6JGtjw9JoDsHdP3Rc4RnaFHxXKCwal/X7ASB9pI89sKPqs6K IdodIas3MBZod8ffNcIjxlG/sWOd9p/CF4aOm1ciXpYvXlRR5PjQmSrSTA8e1zDq H/t1Fn4kRKSHn7HpdHWbHqRrzfZGqLNMOPCLmMFxeJrmc/3lseuwfWA/DwQW+Uwl OjB8BZybUVIE+At1CDxa/2vJKMssPDM/ -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:44 2026 by rpki-client