$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa File: 998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa (raw, json) Hash identifier: K84wuMMo5Qen7iOjlIl6/qZMLohdfRE21JxgpVahuEA= Subject key identifier: F1:28:F9:70:BC:00:F0:42:A0:D0:E2:1E:3C:6A:DF:31:88:E4:21:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79008A967C42940CC69E2D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40647 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:08:a9:67:c4:29:40:cc:69:e2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1277504c-95d2-4b23-88b9-b13c0395eb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b5:66:28:e4:62:4f:98:a4:9a:76:26:7a:91: bb:61:7e:25:6d:f4:e4:1a:9a:f8:a1:6d:a4:3c:87: 73:0c:08:57:a8:80:b9:e9:90:0c:8a:3b:3b:36:ae: 1a:28:ed:e7:1b:d5:be:7f:d5:c1:59:f9:55:4a:b0: 2e:6a:29:9b:4d:eb:3d:f2:38:bd:17:02:b3:c5:48: 72:e4:98:72:ac:d2:f4:6d:cc:92:8c:d1:a3:2a:b0: 5c:fb:e5:82:d6:a6:60:8a:89:2c:d4:42:c9:c6:dd: 0a:65:8b:2e:09:0d:87:67:29:c9:9c:70:c6:6d:31: eb:f3:50:12:d7:b6:fd:7a:c4:ad:cb:11:15:a7:df: 83:77:98:ef:c4:44:ad:91:df:bf:5d:00:56:e7:f9: ed:12:59:e0:72:25:d0:e3:45:f2:e5:2e:c7:26:e1: f8:20:63:d3:69:30:d1:b4:45:d6:d9:c1:11:0f:e0: e1:8a:a0:21:69:5e:d9:aa:fb:de:c3:95:52:0c:55: ee:ac:29:5b:ab:73:6f:96:0a:54:b9:bd:89:e6:d5: 4a:52:70:ca:21:68:6b:e2:46:7a:35:4a:51:2f:fc: 19:7c:f7:77:cc:67:c7:2c:91:00:3e:80:c2:32:a2: 53:28:ea:ba:8c:a7:c7:dc:60:dc:7c:8a:2b:cb:c3: 56:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:28:F9:70:BC:00:F0:42:A0:D0:E2:1E:3C:6A:DF:31:88:E4:21:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0a:5c:2f:96:7d:e5:36:17:e3:5f:13:0f:2e:cc:9f:0b:4f: 7f:4f:45:d9:ff:e8:6a:43:42:87:76:bb:cb:a8:17:be:62:c4: b4:a6:67:e2:25:ad:80:25:21:06:5a:d4:a5:ac:b5:49:cc:35: 6a:ff:60:36:74:86:82:b2:a4:54:20:90:5e:04:35:dd:2d:e8: 18:e9:cf:ab:5b:af:1f:a1:69:53:47:63:34:c7:5e:e6:ee:8c: bb:1b:19:1f:56:33:55:5e:19:15:5b:1b:a8:df:0a:2c:1e:38: ed:14:41:8a:89:46:e2:98:06:d9:56:99:07:a6:4f:2a:46:7c: 94:3b:62:b9:58:9c:1e:ed:c0:b8:b0:cf:57:f2:79:a6:fa:ad: 6d:8d:c6:76:6f:3c:3d:cf:3e:27:35:86:e6:d9:49:f0:45:77: b9:a2:52:86:95:d4:c6:a0:16:0a:0b:f6:08:b3:7b:e0:7d:1e: 67:4c:c7:c8:68:75:e2:03:2f:53:da:e2:a3:7f:94:cf:c0:f2: 22:48:e6:02:94:44:f5:f9:e9:d1:db:15:98:6e:f1:00:e7:d5: 55:4d:a8:f4:45:f5:8b:56:cd:99:b5:92:c6:3e:6f:ba:b6:7e: f3:fe:3f:cd:9e:c4:46:ff:95:58:b7:3c:25:25:6f:e3:33:ee: 6b:3f:48:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkAipZ8QpQMxp4tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTI3NzUwNGMtOTVkMi00YjIzLTg4YjktYjEzYzAzOTVlYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LVmKORiT5ikmnYmepG7YX4lbfTkGpr4oW2k PIdzDAhXqIC56ZAMijs7Nq4aKO3nG9W+f9XBWflVSrAuaimbTes98ji9FwKzxUhy 5JhyrNL0bcySjNGjKrBc++WC1qZgioks1ELJxt0KZYsuCQ2HZynJnHDGbTHr81AS 17b9esStyxEVp9+Dd5jvxEStkd+/XQBW5/ntElngciXQ40Xy5S7HJuH4IGPTaTDR tEXW2cERD+DhiqAhaV7Zqvvew5VSDFXurClbq3NvlgpUub2J5tVKUnDKIWhr4kZ6 NUpRL/wZfPd3zGfHLJEAPoDCMqJTKOq6jKfH3GDcfIory8NWuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPEo+XC8APBCoNDiHjxq3zGI5CH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk4ZGU4YWEtYTkzZC0z YWQ2LWEwNzUtMGE0N2NhYTRiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB+Clwvln3lNhfjXxMPLsyfC09/T0XZ/+hqQ0KHdrvLqBe+YsS0pmfi Ja2AJSEGWtSlrLVJzDVq/2A2dIaCsqRUIJBeBDXdLegY6c+rW68foWlTR2M0x17m 7oy7GxkfVjNVXhkVWxuo3wosHjjtFEGKiUbimAbZVpkHpk8qRnyUO2K5WJwe7cC4 sM9X8nmm+q1tjcZ2bzw9zz4nNYbm2UnwRXe5olKGldTGoBYKC/YIs3vgfR5nTMfI aHXiAy9T2uKjf5TPwPIiSOYClET1+enR2xWYbvEA59VVTaj0RfWLVs2ZtZLGPm+6 tn7z/j/NnsRG/5VYtzwlJW/jM+5rP0jg -----END CERTIFICATE-----Generated at Wed Jul 29 04:41:11 2026 by rpki-client