$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa File: 6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa (raw, json) Hash identifier: InXOGi1q3dXH1cP6O5J/xUhSvzVU+VtMXDkkLFWjxP8= Subject key identifier: F0:56:30:B7:FA:1A:3C:82:AE:A7:4A:07:FA:10:C3:B9:1F:82:59:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79004DDFC5E78747E4C5D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396565 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:04:dd:fc:5e:78:74:7e:4c:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bad250e6-2b9d-418f-80b7-ae4663ae9231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:50:d1:47:ea:ef:6a:ac:f1:b2:26:e5:83: 51:36:f4:7e:4d:41:e8:7c:4a:99:52:96:e9:9e:68: 6d:9c:17:42:1f:3f:74:2f:98:2e:90:9d:f0:9d:96: eb:16:65:3e:5f:28:f3:93:ff:fd:51:af:17:62:b5: e5:af:70:c5:48:2e:0e:ec:dd:f1:d8:01:0f:3a:0d: 21:ea:43:f6:6c:d7:87:e3:53:bf:dc:7d:29:6b:43: 45:42:fb:f3:0c:d5:10:20:ca:11:fd:35:34:a0:57: e4:07:5f:f6:da:0a:2e:00:0c:04:a0:5c:5e:1b:db: d5:d8:57:96:87:e1:f1:77:e5:29:b5:d0:58:81:e4: fb:cb:a2:1b:82:c0:67:df:b1:9c:17:ec:75:05:74: e0:02:aa:69:cc:2f:3b:f1:07:de:0e:f4:c1:e5:c8: 7e:42:83:c2:55:a5:fe:7a:a7:f5:3b:fe:86:9b:6a: 3c:f5:dc:78:04:c6:9c:ce:82:10:23:bb:29:ca:0c: 32:1d:1f:a3:c7:3b:26:25:d0:69:7c:57:13:d1:46: 4d:03:3c:02:17:f9:ad:44:90:26:26:0d:09:4f:61: a3:2a:89:f4:7f:53:5b:d9:45:6c:42:c6:02:68:83: a0:52:9a:e6:39:dd:bf:8f:c1:99:9f:cc:28:52:9f: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:56:30:B7:FA:1A:3C:82:AE:A7:4A:07:FA:10:C3:B9:1F:82:59:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b8fcd9b-93cd-332d-a9b4-5b45856baf3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:15:c4:67:04:ac:2f:bc:5b:9a:37:ae:a3:c2:9e:0f:89:a1: ef:18:f6:11:3f:b6:36:0d:bb:79:4f:08:ea:a4:c1:2e:af:4e: 3f:be:c0:0d:a0:ac:e7:85:00:17:10:7b:06:e8:16:8b:88:0d: 2b:0b:d8:40:8f:19:d8:01:93:c0:80:31:50:cc:05:95:69:18: 79:cf:d9:4b:70:35:f6:c4:e7:64:e5:34:87:5b:c4:67:cc:ce: b7:ed:07:09:1b:e0:f5:94:b2:ab:87:6e:98:4a:d0:07:e6:49: 0d:b4:6b:59:33:1b:b3:10:c3:1a:bd:ab:57:ee:23:49:9c:5f: 24:87:5b:20:f3:97:0a:04:45:02:4d:89:86:12:c3:12:f4:26: 63:eb:c3:17:a4:75:7e:d8:7b:04:74:28:22:75:34:b9:7a:e7: 2a:45:d8:a6:3f:fb:ce:17:b1:6c:8e:f3:c9:4a:16:6f:62:cd: 06:51:8c:88:50:c9:77:7c:ab:f8:23:5a:5e:20:cf:26:08:f7: 37:d5:63:16:87:38:71:4c:62:b2:dc:90:78:38:df:ec:6e:4c: 6c:12:ea:fe:e2:61:59:cb:99:d2:70:2f:73:ce:a2:90:b7:12: 3b:23:2f:2d:7f:df:ff:e7:5f:37:64:b9:e1:e5:32:28:08:2b: 83:8a:40:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkATd/F54dH5MXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmFkMjUwZTYtMmI5ZC00MThmLTgwYjctYWU0NjYzYWU5MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJlQ0Ufq72qs8bIm5YNRNvR+TUHofEqZUpbp nmhtnBdCHz90L5gukJ3wnZbrFmU+Xyjzk//9Ua8XYrXlr3DFSC4O7N3x2AEPOg0h 6kP2bNeH41O/3H0pa0NFQvvzDNUQIMoR/TU0oFfkB1/22gouAAwEoFxeG9vV2FeW h+Hxd+UptdBYgeT7y6IbgsBn37GcF+x1BXTgAqppzC878QfeDvTB5ch+QoPCVaX+ eqf1O/6Gm2o89dx4BMaczoIQI7spygwyHR+jxzsmJdBpfFcT0UZNAzwCF/mtRJAm Jg0JT2GjKon0f1Nb2UVsQsYCaIOgUprmOd2/j8GZn8woUp+IxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPBWMLf6GjyCrqdKB/oQw7kfglkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmI4ZmNkOWItOTNjZC0z MzJkLWE5YjQtNWI0NTg1NmJhZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPFcRnBKwvvFuaN66jwp4PiaHvGPYRP7Y2Dbt5TwjqpMEur04/vsAN oKznhQAXEHsG6BaLiA0rC9hAjxnYAZPAgDFQzAWVaRh5z9lLcDX2xOdk5TSHW8Rn zM637QcJG+D1lLKrh26YStAH5kkNtGtZMxuzEMMavatX7iNJnF8kh1sg85cKBEUC TYmGEsMS9CZj68MXpHV+2HsEdCgidTS5eucqRdimP/vOF7FsjvPJShZvYs0GUYyI UMl3fKv4I1peIM8mCPc31WMWhzhxTGKy3JB4ON/sbkxsEur+4mFZy5nScC9zzqKQ txI7Iy8tf9//5183ZLnh5TIoCCuDikBb -----END CERTIFICATE-----Generated at Wed Jul 29 06:40:08 2026 by rpki-client