$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa File: 856ae38c-ba86-38fe-b194-3f17bf61b09a.roa (raw, json) Hash identifier: AjXRlzflu6DxwcRWcEAOdTKzRMhtd3o+rEiK4bY0Ym0= Subject key identifier: B0:56:FD:6C:3F:16:7C:BB:E2:F0:D7:41:02:50:15:4B:B6:1F:5B:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5FA37F6CC7A7C81BA0880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397203 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:fa:37:f6:cc:7a:7c:81:ba:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=a5a171da-49f2-444a-8fc0-07b0b10ae490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:c8:23:22:90:ee:95:f2:8a:93:aa:1e:72: 5d:ba:17:7d:09:70:89:f2:66:3d:d7:97:e0:d3:f0: 40:17:9a:8f:8a:2e:2b:ef:10:b8:2d:e7:78:5e:fb: 5f:70:00:5c:8b:2b:48:56:22:79:69:2a:ab:08:f4: 49:a1:de:58:80:74:6e:dc:49:5d:fd:24:91:87:e7: 7d:72:b8:6e:49:37:68:46:81:28:34:74:e6:d2:68: 1e:3a:5e:2d:14:90:80:04:85:96:d2:0d:23:8a:fa: 45:87:c0:1a:68:ba:87:c7:0e:93:e0:37:03:26:74: a3:77:bb:4a:d8:bd:3f:a9:60:fa:d3:e1:0e:47:87: 07:3e:ec:6d:f2:91:ca:2b:75:da:98:10:98:1f:d7: a1:28:c5:af:d5:0d:50:cc:b3:00:94:ac:fc:0d:34: 3e:a0:c2:35:03:76:24:e5:32:b1:6a:ba:25:12:a2: 17:91:a1:59:29:c8:a2:59:76:92:35:18:06:61:f1: fd:41:45:c1:dc:ea:d7:65:e9:b7:4a:d3:cb:bc:2c: 35:ba:3d:22:2c:fe:15:b9:2e:9d:7c:67:21:d4:2a: 51:25:ab:59:f6:09:48:22:ee:ae:ec:90:c2:42:18: 58:11:d3:b1:47:43:67:1a:8d:6e:bb:1c:a5:76:dd: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:56:FD:6C:3F:16:7C:BB:E2:F0:D7:41:02:50:15:4B:B6:1F:5B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856ae38c-ba86-38fe-b194-3f17bf61b09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8f:c9:e0:93:be:11:d3:bf:23:1d:fd:fc:fd:15:b1:33:1c: f2:30:a9:7d:a3:3d:10:49:1a:c0:d0:a0:58:24:b7:4b:81:c1: 88:4a:c3:d5:a1:05:1c:cd:b8:0f:c5:aa:93:bc:b9:45:9e:d9: 97:ce:77:b4:7f:25:d5:b6:83:36:7f:9b:d3:24:6f:99:3b:d3: c8:ee:fa:ed:fb:34:09:67:b6:bf:f7:c4:8a:c8:77:3d:96:03: 44:c6:ee:eb:1d:ee:2e:2c:98:e5:67:5f:b9:e3:de:6e:a4:82: 4b:05:c7:a8:53:42:07:37:bf:6d:c2:ea:f5:19:1d:e0:6d:0d: 7d:16:73:ef:28:27:95:8f:38:c0:3a:2b:be:68:fd:b0:02:29: 2f:89:5d:76:19:81:a3:df:2c:5d:fc:03:83:f7:ea:9c:04:f1: 06:68:d8:d7:25:93:14:db:d3:62:f9:2f:04:ab:f3:a9:cb:e5: e6:18:2d:cd:34:51:89:e3:6e:98:ee:c0:e7:77:85:a6:7d:ab: 41:8c:4e:93:d8:8e:e8:cf:8a:74:e5:35:de:43:03:83:4d:fd: 97:64:55:82:75:04:6d:08:66:ac:1f:f0:cd:b9:d1:73:ba:a1: 44:56:2c:ad:75:42:94:c9:f7:73:0c:33:7b:1d:73:64:b1:2b: ae:94:9b:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfo39sx6fIG6CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YTVhMTcxZGEtNDlmMi00NDRhLThmYzAtMDdiMGIxMGFlNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhDIIyKQ7pXyipOqHnJduhd9CXCJ8mY915fg 0/BAF5qPii4r7xC4Led4XvtfcABciytIViJ5aSqrCPRJod5YgHRu3Eld/SSRh+d9 crhuSTdoRoEoNHTm0mgeOl4tFJCABIWW0g0jivpFh8AaaLqHxw6T4DcDJnSjd7tK 2L0/qWD60+EOR4cHPuxt8pHKK3XamBCYH9ehKMWv1Q1QzLMAlKz8DTQ+oMI1A3Yk 5TKxarolEqIXkaFZKciiWXaSNRgGYfH9QUXB3OrXZem3StPLvCw1uj0iLP4VuS6d fGch1CpRJatZ9glIIu6u7JDCQhhYEdOxR0NnGo1uuxyldt1Y1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLBW/Ww/Fny74vDXQQJQFUu2H1u7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2YWUzOGMtYmE4Ni0z OGZlLWIxOTQtM2YxN2JmNjFiMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSj8ngk74R078jHf38/RWxMxzyMKl9oz0QSRrA0KBYJLdLgcGISsPV oQUczbgPxaqTvLlFntmXzne0fyXVtoM2f5vTJG+ZO9PI7vrt+zQJZ7a/98SKyHc9 lgNExu7rHe4uLJjlZ1+5495upIJLBceoU0IHN79twur1GR3gbQ19FnPvKCeVjzjA Oiu+aP2wAikviV12GYGj3yxd/AOD9+qcBPEGaNjXJZMU29Ni+S8Eq/Opy+XmGC3N NFGJ426Y7sDnd4WmfatBjE6T2I7oz4p05TXeQwODTf2XZFWCdQRtCGasH/DNudFz uqFEViytdUKUyfdzDDN7HXNksSuulJss -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:21 2026 by rpki-client