$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa File: 89bd953d-ca92-3d30-a75f-08e12d302671.roa (raw, json) Hash identifier: df+EYOgpxTVGn+A8moRl0TCs1TkPz+R53omBoA1OvIs= Subject key identifier: 59:4E:87:2B:98:56:B2:FB:39:18:BC:AB:9B:81:99:16:80:D7:6F:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7986586EF23A95773231800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396542 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:65:86:ef:23:a9:57:73:23:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eac94e20-5c12-45c7-bdd4-3d5901e576bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:0a:98:42:1d:0b:c0:04:fd:d7:7a:e0:19: d9:1a:db:a1:56:c2:f3:bc:ca:cc:2b:8d:02:f9:73: 6b:5c:6a:78:fb:09:8e:60:5c:df:1a:c2:9c:70:c5: 72:77:99:b4:9f:1c:61:e1:1f:b2:1a:6a:c0:aa:cb: 7f:16:d1:bb:15:42:26:7e:9d:95:5e:9e:1e:dd:de: 74:7b:fa:ef:e4:6d:ea:70:bd:73:b8:25:33:44:4c: 4a:d8:48:6b:c9:d3:78:f0:30:da:73:b3:00:33:e3: ee:98:e6:77:20:d8:44:93:6d:4a:e1:45:23:84:74: 61:32:f5:d4:41:f4:3f:59:ab:be:bc:33:00:f2:d8: d4:4f:09:98:e6:cb:28:de:6f:de:dc:e8:f5:3b:2a: d1:c9:58:90:68:b4:d4:94:77:37:f6:14:2d:5a:5e: 3e:61:51:cd:3a:a5:f6:6b:f3:69:43:0d:bb:e2:cd: 86:9d:4a:e8:ba:af:01:c1:7f:89:05:0f:b5:7f:be: da:7f:5e:ff:26:cc:81:ed:59:57:3b:de:49:8f:bc: f0:63:26:ad:a1:d8:e6:86:e7:49:ae:5b:eb:97:3c: 43:82:86:74:77:d0:2a:c4:55:48:8a:32:39:fb:e5: b4:55:28:63:53:f7:bf:27:86:d8:7e:41:76:4e:c8: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4E:87:2B:98:56:B2:FB:39:18:BC:AB:9B:81:99:16:80:D7:6F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:14:0d:32:ee:cb:c2:d6:94:dc:48:23:a7:ae:a4:29:46:c6: c0:e7:98:7d:6b:4d:c7:13:18:ab:fa:4c:49:97:f2:71:5b:ed: fe:5c:e1:43:c0:e6:41:ed:cd:d6:43:eb:be:06:f8:8d:4d:72: db:d2:ff:85:d7:65:66:e8:90:6c:eb:3e:dc:11:0e:7a:a2:4b: 6e:e2:ce:1d:af:3e:5f:9f:b9:03:61:fe:0b:d8:b3:e3:65:a8: 0f:d2:28:29:e3:ea:36:13:ae:62:3d:bb:47:58:a1:79:47:1c: 11:5e:db:9d:86:fe:66:96:98:f0:cd:7e:c9:f5:17:b3:82:3f: 08:d2:d2:75:c6:ba:95:0a:a9:7b:b8:19:35:ac:85:d7:e3:5a: 41:b9:34:9f:3b:1e:52:98:7a:1c:8c:75:89:14:13:9a:78:84: 35:b7:1f:f3:76:9e:d8:79:0f:83:70:14:0c:a8:18:8d:b5:a8: 9d:d0:92:59:a1:a6:cd:53:71:7f:a4:3c:a8:b1:0e:73:66:6c: 84:65:1d:84:88:fd:a2:a8:f9:bb:b7:79:43:46:a6:4f:ba:d6: 65:2a:ea:ee:67:62:28:25:f8:97:12:7b:0f:72:09:78:ef:88: d9:ae:4b:94:26:f5:c9:85:87:d0:ce:7c:cc:c3:e7:db:87:6d: 95:cf:cb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmGWG7yOpV3MjGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWFjOTRlMjAtNWMxMi00NWM3LWJkZDQtM2Q1OTAxZTU3NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnAKmEIdC8AE/dd64BnZGtuhVsLzvMrMK40C +XNrXGp4+wmOYFzfGsKccMVyd5m0nxxh4R+yGmrAqst/FtG7FUImfp2VXp4e3d50 e/rv5G3qcL1zuCUzRExK2EhrydN48DDac7MAM+PumOZ3INhEk21K4UUjhHRhMvXU QfQ/Wau+vDMA8tjUTwmY5sso3m/e3Oj1OyrRyViQaLTUlHc39hQtWl4+YVHNOqX2 a/NpQw274s2GnUrouq8BwX+JBQ+1f77af17/JsyB7VlXO95Jj7zwYyatodjmhudJ rlvrlzxDgoZ0d9AqxFVIijI5++W0VShjU/e/J4bYfkF2TshPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlOhyuYVrL7ORi8q5uBmRaA128nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODliZDk1M2QtY2E5Mi0z ZDMwLWE3NWYtMDhlMTJkMzAyNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQUDTLuy8LWlNxII6eupClGxsDnmH1rTccTGKv6TEmX8nFb7f5c4UPA 5kHtzdZD674G+I1NctvS/4XXZWbokGzrPtwRDnqiS27izh2vPl+fuQNh/gvYs+Nl qA/SKCnj6jYTrmI9u0dYoXlHHBFe252G/maWmPDNfsn1F7OCPwjS0nXGupUKqXu4 GTWshdfjWkG5NJ87HlKYehyMdYkUE5p4hDW3H/N2nth5D4NwFAyoGI21qJ3Qklmh ps1TcX+kPKixDnNmbIRlHYSI/aKo+bu3eUNGpk+61mUq6u5nYigl+JcSew9yCXjv iNmuS5Qm9cmFh9DOfMzD59uHbZXPy1A= -----END CERTIFICATE-----Generated at Wed Jul 29 04:42:24 2026 by rpki-client