$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa File: 9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa (raw, json) Hash identifier: 39I0XFpMSnVl94uq2L+nRHbnueipgqeMLx3nlm4js1k= Subject key identifier: B1:6A:F9:D7:EF:EF:B5:84:97:9D:E7:BA:70:94:72:CE:5E:EC:7B:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79808F2C7085C02CB6B4590 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:08:f2:c7:08:5c:02:cb:6b:45:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=116b3d04-da2f-4572-8348-593991933717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:cc:66:41:66:ff:2b:ab:55:4f:21:e3:ba: b5:ec:93:29:7a:38:63:84:e1:f3:70:74:47:87:66: 81:69:f5:fe:42:9d:d0:bd:b9:ec:8e:31:67:d5:b0: cb:69:6f:4d:9f:f0:b4:e6:23:36:40:9c:a3:56:32: 6e:45:76:35:d9:8e:3c:16:f3:81:b8:2e:1e:1b:df: 88:9a:d9:2e:9e:71:e5:e4:e2:69:30:77:86:6b:f0: a9:c6:c1:fc:f6:76:c2:2d:ce:13:d7:d2:e6:6f:2e: a6:0d:75:4c:c1:82:a6:69:b6:e7:bf:1b:04:84:e2: 9f:f0:6b:bd:57:f7:20:52:aa:97:cc:99:4e:25:bd: 7f:69:e1:f4:da:59:4a:e2:7a:ba:97:c9:3a:9f:ea: f1:7e:69:83:8c:3a:f7:38:1a:bc:42:35:5e:62:02: 95:70:86:98:cd:c2:ff:fa:3f:91:c4:80:92:ea:a8: ed:54:60:4b:16:5f:66:dd:2a:d4:c5:54:43:91:24: 8d:5e:61:0f:46:94:78:0a:1d:e1:21:df:dd:71:2d: 9d:2a:87:f5:2e:dd:f1:00:34:38:77:f8:b1:e4:11: 43:6b:72:fb:e5:c4:85:4e:46:3d:73:f1:58:05:73: 2a:99:e1:fb:bc:60:41:1b:d4:1c:a7:c1:fe:1c:b6: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6A:F9:D7:EF:EF:B5:84:97:9D:E7:BA:70:94:72:CE:5E:EC:7B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3f:ed:15:c8:fa:d2:2c:6f:d4:99:aa:0f:28:24:61:b8:9d: 79:75:24:a0:09:27:00:06:9a:11:95:62:1d:d2:6e:db:8d:ea: 1b:07:eb:8f:a1:e8:4d:9f:f0:4a:6e:f2:49:3b:ef:b4:91:c8: aa:4c:3f:2d:af:a9:a1:8e:a2:84:91:b9:4a:27:62:fc:b3:c9: b7:14:e8:74:1a:99:6f:1b:88:aa:72:71:3f:84:0a:3e:18:4d: d6:98:c7:67:8c:63:91:f6:7f:3a:38:6e:00:5c:80:02:87:18: a2:65:bb:c1:30:c6:d8:b5:28:11:a2:ce:a4:17:be:fc:40:c0: 0b:42:4b:e7:5e:62:b8:50:fe:55:ae:26:cf:0a:d4:c5:c3:cd: 32:04:a1:15:b2:18:be:60:7c:c9:40:57:c6:b4:f7:6f:b3:fe: 8b:7c:ac:e3:d8:9b:cc:7f:81:9d:69:19:46:68:c7:ce:4b:71: 7b:15:51:63:4d:14:34:67:99:3f:10:b0:e6:0e:54:7d:b0:ee: c3:41:5c:77:18:fe:50:0e:e4:b1:2c:1f:af:0e:d3:be:57:96: 47:66:4f:39:48:b5:4d:fc:84:3a:cd:e2:ac:be:be:df:1c:33: 29:18:ba:c9:ca:46:4d:aa:5f:90:84:83:f9:66:e8:24:75:4b: ca:bd:e7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAjyxwhcAstrRZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTE2YjNkMDQtZGEyZi00NTcyLTgzNDgtNTkzOTkxOTMzNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfXMZkFm/yurVU8h47q17JMpejhjhOHzcHRH h2aBafX+Qp3QvbnsjjFn1bDLaW9Nn/C05iM2QJyjVjJuRXY12Y48FvOBuC4eG9+I mtkunnHl5OJpMHeGa/CpxsH89nbCLc4T19Lmby6mDXVMwYKmabbnvxsEhOKf8Gu9 V/cgUqqXzJlOJb1/aeH02llK4nq6l8k6n+rxfmmDjDr3OBq8QjVeYgKVcIaYzcL/ +j+RxICS6qjtVGBLFl9m3SrUxVRDkSSNXmEPRpR4Ch3hId/dcS2dKof1Lt3xADQ4 d/ix5BFDa3L75cSFTkY9c/FYBXMqmeH7vGBBG9Qcp8H+HLYvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFq+dfv77WEl53nunCUcs5e7HtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk5NGEyYzAtNzJmMy0z ZWFjLWIzNmItODU1ODVhMDZmNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs/7RXI+tIsb9SZqg8oJGG4nXl1JKAJJwAGmhGVYh3SbtuN6hsH64+h 6E2f8Epu8kk777SRyKpMPy2vqaGOooSRuUonYvyzybcU6HQamW8biKpycT+ECj4Y TdaYx2eMY5H2fzo4bgBcgAKHGKJlu8Ewxti1KBGizqQXvvxAwAtCS+deYrhQ/lWu Js8K1MXDzTIEoRWyGL5gfMlAV8a092+z/ot8rOPYm8x/gZ1pGUZox85LcXsVUWNN FDRnmT8QsOYOVH2w7sNBXHcY/lAO5LEsH68O075XlkdmTzlItU38hDrN4qy+vt8c MykYusnKRk2qX5CEg/lm6CR1S8q951E= -----END CERTIFICATE-----Generated at Wed Jul 29 04:41:44 2026 by rpki-client