$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa File: 523ef6f6-d440-330b-aad0-be8d682f4c42.roa (raw, json) Hash identifier: VzFSYS+K3Qy33HYHfF7fKPmEluoS/K8OdwN8eTkSWdI= Subject key identifier: DF:7C:74:64:AC:99:A9:8D:95:A0:73:C5:81:85:5C:F8:B2:30:61:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5D41319D61408FC891600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 20431 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d4:13:19:d6:14:08:fc:89:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=fc50733a-9b26-47bb-a0f8-7394b08bcd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:b3:7f:73:e3:be:73:bc:29:ff:41:2f:c8: eb:4c:c8:65:1a:6a:f0:6d:3b:13:0a:ff:6c:1c:88: 35:95:53:10:7f:ca:e0:9f:93:70:12:05:e0:46:d8: 02:bd:9a:d0:80:51:96:85:e3:ef:17:31:66:17:50: 5b:4a:7e:15:b8:2a:42:e3:ca:ed:3f:98:dd:f0:b5: 60:c5:75:43:d8:e5:11:49:78:5b:7f:f7:1d:56:c5: 33:b7:e5:e4:ae:4f:8b:fe:c1:91:61:a0:7a:a0:aa: 39:5c:22:51:19:eb:dc:bf:44:6a:7b:96:4a:e4:42: a9:fd:55:dc:dd:db:20:93:0d:dd:60:16:39:f8:66: 87:41:7e:cb:b9:5c:52:9d:7d:c2:d3:5c:d3:03:f0: df:19:34:cf:63:04:54:a4:23:54:43:ea:2f:a6:8b: 15:67:d3:9b:1d:26:96:a3:32:2c:b1:67:5a:c4:3f: 5c:9c:2f:d5:47:b7:49:ad:6e:e6:8d:aa:fc:d1:95: 82:25:b3:72:68:0d:30:c7:b1:08:58:3a:e7:f4:d6: aa:69:22:31:bb:d9:32:e0:de:f9:e7:77:37:b7:db: 39:f1:b8:68:2b:5f:f1:05:60:a1:af:a2:91:eb:b2: 57:14:29:4d:de:7f:a6:cc:63:a7:66:ec:1c:13:68: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7C:74:64:AC:99:A9:8D:95:A0:73:C5:81:85:5C:F8:B2:30:61:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/523ef6f6-d440-330b-aad0-be8d682f4c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:31:c8:a1:2f:1e:e6:60:a9:8b:77:94:2d:a7:85:83:1e:47: b2:83:6e:cf:f3:29:a4:b0:2f:06:4f:d0:58:cd:5b:21:3d:62: 48:5e:04:af:3a:c6:14:5e:f9:98:c7:94:6e:a6:d3:af:0b:b1: 8f:9c:fc:6f:06:2e:73:ac:e0:e7:5b:e4:e6:51:9a:87:7b:36: 4d:4c:db:c1:38:11:0d:96:33:fa:16:85:55:6c:f0:15:b2:ca: a2:06:92:8d:e4:d6:4a:59:d3:42:2f:ce:99:e0:30:4a:35:a2: 94:f2:f9:69:8f:28:af:bf:c1:c0:d6:e9:f9:35:74:3f:b1:62: 5f:1f:79:ec:99:a3:d5:ee:e2:12:6a:f2:4a:4c:32:b9:ef:b3: 63:5b:db:d6:61:b0:43:9d:dd:a6:f2:4e:f5:cd:18:53:56:d9: 30:48:e1:6a:8d:b6:85:1d:e7:79:ad:b7:b7:59:2a:b2:97:3d: ec:36:f8:d4:28:c7:22:3a:63:f9:8c:a9:19:9c:24:ea:3a:3d: 03:5b:11:17:df:ee:f0:b6:e7:c5:ac:39:09:40:1a:f0:e7:3e: e7:ab:c3:f6:3a:43:06:ae:b5:ac:7c:fb:f6:8c:ad:7b:e6:ad: 98:06:19:23:ec:c9:b7:70:80:b9:02:42:7f:c1:a0:71:ac:f5: dc:b1:69:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itdQTGdYUCPyJFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZmM1MDczM2EtOWIyNi00N2JiLWEwZjgtNzM5NGIwOGJjZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHmzf3PjvnO8Kf9BL8jrTMhlGmrwbTsTCv9s HIg1lVMQf8rgn5NwEgXgRtgCvZrQgFGWhePvFzFmF1BbSn4VuCpC48rtP5jd8LVg xXVD2OURSXhbf/cdVsUzt+Xkrk+L/sGRYaB6oKo5XCJRGevcv0Rqe5ZK5EKp/VXc 3dsgkw3dYBY5+GaHQX7LuVxSnX3C01zTA/DfGTTPYwRUpCNUQ+ovposVZ9ObHSaW ozIssWdaxD9cnC/VR7dJrW7mjar80ZWCJbNyaA0wx7EIWDrn9NaqaSIxu9ky4N75 53c3t9s58bhoK1/xBWChr6KR67JXFClN3n+mzGOnZuwcE2iowwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN98dGSsmamNlaBzxYGFXPiyMGESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTIzZWY2ZjYtZDQ0MC0z MzBiLWFhZDAtYmU4ZDY4MmY0YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAdMcihLx7mYKmLd5Qtp4WDHkeyg27P8ymksC8GT9BYzVshPWJIXgSv OsYUXvmYx5RuptOvC7GPnPxvBi5zrODnW+TmUZqHezZNTNvBOBENljP6FoVVbPAV ssqiBpKN5NZKWdNCL86Z4DBKNaKU8vlpjyivv8HA1un5NXQ/sWJfH3nsmaPV7uIS avJKTDK577NjW9vWYbBDnd2m8k71zRhTVtkwSOFqjbaFHed5rbe3WSqylz3sNvjU KMciOmP5jKkZnCTqOj0DWxEX3+7wtufFrDkJQBrw5z7nq8P2OkMGrrWsfPv2jK17 5q2YBhkj7Mm3cIC5AkJ/waBxrPXcsWmx -----END CERTIFICATE-----Generated at Sat Jun 13 14:37:34 2026 by rpki-client