$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa File: 998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa (raw, json) Hash identifier: znSXhOrRlaXAslJAXQbknYtO5Hh/+QHcl14jCiHyY+w= Subject key identifier: 1B:37:C0:5A:4D:FA:9F:A1:FC:81:C2:5A:07:50:B9:36:BE:8D:59:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5E3F106D12A70E81F2BE8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 40647 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e3:f1:06:d1:2a:70:e8:1f:2b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=2e5d1109-d69f-4d9b-b62e-911b96887b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:e7:0f:4e:06:e8:66:7d:99:29:86:97:2b: 96:ae:11:f2:89:9b:d4:95:8a:73:d6:5b:47:6f:5f: a0:79:e0:d5:5b:97:44:3e:f6:17:f2:c0:52:c6:1f: e0:36:e6:93:f2:dc:78:08:7e:5d:55:66:ca:46:85: 7e:6c:86:f3:21:a1:1d:ae:07:ab:ad:f1:27:6d:88: 41:e9:d6:bc:0d:6f:d6:49:51:f6:10:eb:12:39:ee: b6:dc:54:cc:a9:7a:c3:d9:7e:a4:5d:ec:4d:0a:a3: 2d:f8:bd:59:6b:5a:9e:6c:79:57:a0:e1:ba:5b:f7: 0d:a1:cd:73:4d:20:30:b3:94:a9:43:ed:d9:35:f8: 22:38:87:e2:68:0d:35:74:4a:a3:1b:bd:f4:f5:10: 69:b7:66:ed:26:bf:9d:92:02:f6:f6:db:6e:c1:ed: c3:0f:7f:48:42:e0:36:86:67:8f:3e:a2:4d:68:e5: fa:4a:5a:09:9a:88:24:e6:0b:b6:18:d5:da:8c:6a: 52:9f:e1:1b:7c:e9:86:66:76:2f:92:0c:86:25:6c: 09:64:a7:c5:c9:54:76:ae:2d:45:05:45:0c:6f:72: ac:c2:30:90:bc:b6:4a:64:b3:16:36:12:5b:74:f6: 25:ff:dd:67:4e:2d:8d:72:8c:04:24:bc:85:85:47: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:C0:5A:4D:FA:9F:A1:FC:81:C2:5A:07:50:B9:36:BE:8D:59:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/998de8aa-a93d-3ad6-a075-0a47caa4b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bc:54:ba:99:bd:1f:18:97:4b:53:ff:d4:a8:bd:b2:a7:3e: f9:25:56:6d:c5:48:e0:3a:86:c5:75:c5:03:1a:df:72:83:b7: f1:5c:70:d1:49:34:59:1c:55:a0:65:01:b1:fb:72:d6:dd:ce: 80:60:15:83:b0:be:cb:0a:ab:4e:9f:38:b9:b6:52:ed:be:ad: 52:24:91:89:41:e7:bb:d4:55:9a:7a:51:45:54:c9:ed:e0:bb: cd:eb:8a:5c:81:1a:20:4f:e4:e2:55:a1:40:b9:0f:b8:ee:f3: 56:07:45:48:55:9c:c2:48:8f:2d:57:3c:eb:e4:bd:d6:60:e9: 16:b4:0c:70:26:99:cc:94:6a:ca:39:0a:30:0d:a5:c9:1d:4c: 3a:0f:d8:5f:7e:b3:b7:ec:d6:ac:8e:3a:8a:33:a9:c0:36:f1: 28:4c:40:fe:58:75:63:da:c6:e3:2b:ab:1c:6b:34:31:a0:bd: bb:ff:f1:7d:9b:10:c9:0a:2a:23:61:f4:06:c0:22:f3:17:d2: 0a:e4:f2:b6:86:9a:c9:a0:06:5e:44:44:1e:af:a8:4c:88:23: fa:dc:dd:72:83:8f:ee:13:5d:28:ce:7b:c5:0d:93:96:0d:3e: f1:78:29:0b:7f:18:12:e4:74:97:c7:7c:a3:7c:3b:c0:de:de: 84:3c:c5:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itePxBtEqcOgfK+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MmU1ZDExMDktZDY5Zi00ZDliLWI2MmUtOTExYjk2ODg3Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU7nD04G6GZ9mSmGlyuWrhHyiZvUlYpz1ltH b1+geeDVW5dEPvYX8sBSxh/gNuaT8tx4CH5dVWbKRoV+bIbzIaEdrgerrfEnbYhB 6da8DW/WSVH2EOsSOe623FTMqXrD2X6kXexNCqMt+L1Za1qebHlXoOG6W/cNoc1z TSAws5SpQ+3ZNfgiOIfiaA01dEqjG7309RBpt2btJr+dkgL29ttuwe3DD39IQuA2 hmePPqJNaOX6SloJmogk5gu2GNXajGpSn+EbfOmGZnYvkgyGJWwJZKfFyVR2ri1F BUUMb3KswjCQvLZKZLMWNhJbdPYl/91nTi2NcowEJLyFhUeNUQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBs3wFpN+p+h/IHCWgdQuTa+jVkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk4ZGU4YWEtYTkzZC0z YWQ2LWEwNzUtMGE0N2NhYTRiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7vFS6mb0fGJdLU//UqL2ypz75JVZtxUjgOobFdcUDGt9yg7fxXHDR STRZHFWgZQGx+3LW3c6AYBWDsL7LCqtOnzi5tlLtvq1SJJGJQee71FWaelFFVMnt 4LvN64pcgRogT+TiVaFAuQ+47vNWB0VIVZzCSI8tVzzr5L3WYOkWtAxwJpnMlGrK OQowDaXJHUw6D9hffrO37NasjjqKM6nANvEoTED+WHVj2sbjK6scazQxoL27//F9 mxDJCiojYfQGwCLzF9IK5PK2hprJoAZeREQer6hMiCP63N1yg4/uE10oznvFDZOW DT7xeCkLfxgS5HSXx3yjfDvA3t6EPMW5 -----END CERTIFICATE-----Generated at Sat Jun 13 13:45:40 2026 by rpki-client