$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa File: 8d4e180d-b294-340d-8292-f0182164165c.roa (raw, json) Hash identifier: o9nxR2j6OifgF6dl19NGqQN8qOr55dT1AUp8m59uXwM= Subject key identifier: D2:1F:79:7A:2A:26:57:C7:0F:1D:03:D1:C0:98:5D:AC:95:C2:E7:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F580B32AD766EA609700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397201 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f5:80:b3:2a:d7:66:ea:60:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=a3672a00-500e-46b7-b127-061e1a65ce54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:90:3b:3b:8d:60:da:85:12:0f:03:b8:1f: 26:0e:b2:0b:f6:00:75:26:c3:bc:b9:2c:03:3c:7a: 4a:c9:db:76:68:2a:4a:84:7a:f7:b5:6d:43:b0:6b: 55:9e:f5:9d:73:84:c8:1f:0f:3c:db:d6:af:af:ac: ab:f4:c9:63:13:ec:3c:10:aa:65:d2:38:83:62:b3: 70:d6:f4:e8:41:d3:2c:11:b1:21:79:40:ce:0f:b0: d6:2f:c7:d3:c8:9c:17:b0:af:39:81:a9:34:64:a5: 0c:ba:06:0e:59:ad:b7:79:95:49:20:51:f7:6d:84: ac:b7:c9:61:e0:70:39:d1:2a:06:a7:3e:b8:1e:ee: bf:2e:1e:22:28:c6:1a:4f:59:8a:43:66:e7:8d:31: 20:07:6a:d1:8e:2e:3f:f3:48:ed:d2:ba:ad:12:9e: 66:53:7a:c5:c7:e1:0b:18:cb:76:3e:49:15:83:c6: b4:fe:17:cd:93:35:25:74:56:33:31:10:d9:eb:bd: 49:b4:2e:c6:c8:47:9b:e2:46:87:05:de:5b:56:49: 83:d1:a6:45:92:e9:ae:cc:41:48:b7:96:5f:1f:5d: 3c:76:51:03:48:54:72:c0:85:e5:3e:02:1e:91:c5: 42:4c:e8:64:ee:e4:84:36:6f:e5:4a:4d:d2:d5:df: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1F:79:7A:2A:26:57:C7:0F:1D:03:D1:C0:98:5D:AC:95:C2:E7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d4e180d-b294-340d-8292-f0182164165c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f5:4c:e7:d4:48:df:ef:45:02:88:6c:21:c9:98:8d:ca:aa: e5:5b:28:8a:06:05:43:ee:73:73:96:30:53:c1:a5:d1:fb:b9: be:ce:d2:76:66:02:54:aa:26:25:c6:56:23:60:27:bb:9b:8f: 01:8d:37:48:ce:a7:c2:af:16:1f:9a:95:47:6f:8b:50:43:d3: 0b:17:ac:71:dc:4a:1e:93:1b:65:de:53:a5:5b:e7:a4:69:16: 87:81:c3:65:5d:b8:ff:1e:bd:df:4b:3e:8e:11:8a:39:3e:ac: ec:48:bc:6f:c1:32:91:e5:b5:cd:15:04:5d:01:b5:9c:18:f9: a1:16:db:05:6e:03:88:9a:91:9f:3b:cf:f1:6c:15:41:eb:9d: ec:f9:ff:ea:2d:8b:83:aa:65:ee:15:58:87:86:72:06:78:f8: e0:b1:d4:a0:6f:13:d4:2b:83:02:1f:c5:8e:39:15:11:91:df: 68:88:2a:40:28:d5:b3:ee:3a:05:bc:84:f7:49:a5:07:4a:74: 71:55:bb:c2:fb:17:de:13:50:fc:18:66:46:28:69:c4:85:5c: 6f:fd:52:dd:bc:e0:a1:40:ea:13:af:ad:ba:88:88:5b:d2:80: 0c:e2:22:69:b3:da:92:97:80:49:ae:19:82:7b:38:33:1c:a6: a6:64:1e:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfWAsyrXZupglwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YTM2NzJhMDAtNTAwZS00NmI3LWIxMjctMDYxZTFhNjVjZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA492QOzuNYNqFEg8DuB8mDrIL9gB1JsO8uSwD PHpKydt2aCpKhHr3tW1DsGtVnvWdc4TIHw8829avr6yr9MljE+w8EKpl0jiDYrNw 1vToQdMsEbEheUDOD7DWL8fTyJwXsK85gak0ZKUMugYOWa23eZVJIFH3bYSst8lh 4HA50SoGpz64Hu6/Lh4iKMYaT1mKQ2bnjTEgB2rRji4/80jt0rqtEp5mU3rFx+EL GMt2PkkVg8a0/hfNkzUldFYzMRDZ671JtC7GyEeb4kaHBd5bVkmD0aZFkumuzEFI t5ZfH108dlEDSFRywIXlPgIekcVCTOhk7uSENm/lSk3S1d/qOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNIfeXoqJlfHDx0D0cCYXayVwuebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ0ZTE4MGQtYjI5NC0z NDBkLTgyOTItZjAxODIxNjQxNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCN9Uzn1Ejf70UCiGwhyZiNyqrlWyiKBgVD7nNzljBTwaXR+7m+ztJ2 ZgJUqiYlxlYjYCe7m48BjTdIzqfCrxYfmpVHb4tQQ9MLF6xx3Eoekxtl3lOlW+ek aRaHgcNlXbj/Hr3fSz6OEYo5PqzsSLxvwTKR5bXNFQRdAbWcGPmhFtsFbgOImpGf O8/xbBVB653s+f/qLYuDqmXuFViHhnIGePjgsdSgbxPUK4MCH8WOORURkd9oiCpA KNWz7joFvIT3SaUHSnRxVbvC+xfeE1D8GGZGKGnEhVxv/VLdvOChQOoTr626iIhb 0oAM4iJps9qSl4BJrhmCezgzHKamZB49 -----END CERTIFICATE-----Generated at Sat Jun 13 14:43:35 2026 by rpki-client