$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa File: a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa (raw, json) Hash identifier: XkprBtpJuzXba/Gl0saeiAxQnEQB48MBjDYAxGEHPkY= Subject key identifier: D7:7B:28:C4:23:BF:98:75:A3:4B:E5:70:E0:63:B5:F3:8B:61:50:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F0F4CFF5432CB0DFFB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396591 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f0:f4:cf:f5:43:2c:b0:df:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=233ac79f-2ec9-463c-bdc1-48b926572552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:54:ab:9c:cc:c4:45:f3:de:ae:26:77:a5: 07:e5:d8:cf:e3:aa:d6:7e:97:bd:be:58:4d:c5:1b: 9c:51:0b:e1:a4:25:19:f7:73:74:45:73:2c:c8:83: f6:f1:a4:d6:ed:7e:a1:45:7f:1f:eb:cc:91:51:be: 3f:3a:ac:da:88:ce:4c:d1:53:de:32:32:cc:2b:e7: b1:85:d8:ab:2e:6d:68:4b:81:e3:d4:98:52:54:df: 3e:17:6b:b7:fb:fa:2b:ed:a9:de:b0:18:c1:87:3a: 8b:dc:01:74:e5:6d:ea:86:24:c8:7d:90:92:ea:23: 27:68:08:72:a5:fa:c4:38:da:02:2b:58:45:07:f2: 28:ca:0e:ce:35:50:02:20:00:cd:66:bf:f6:36:b4: db:52:f9:27:0c:81:74:46:73:4e:85:70:1a:f2:71: 66:48:f3:7b:76:fe:c8:9a:5b:96:62:e2:96:e2:08: 22:d4:e0:f6:c7:ac:a4:82:d7:60:01:f6:50:da:1f: fd:9a:56:89:55:da:93:10:5a:6a:12:ca:f3:5d:27: 80:fb:08:68:ac:c2:cd:32:e4:20:27:88:c3:a8:71: c2:e8:19:7c:b9:61:d2:d7:81:59:5b:e2:9d:83:d5: 32:e5:f6:d6:47:43:2d:6e:b6:e0:fd:5f:47:2c:0a: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:28:C4:23:BF:98:75:A3:4B:E5:70:E0:63:B5:F3:8B:61:50:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a223c442-ad8b-3dcf-bbf0-2e088fd97bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:28:20:85:60:22:57:ae:c1:fa:e7:f2:24:55:2f:6a:4c:d6: a3:1e:64:dc:f1:01:e4:32:cb:22:16:2c:9c:41:00:3e:30:0d: f1:34:ce:13:95:00:a5:0f:d1:d9:84:9d:d9:c8:cb:3c:ea:71: 60:cc:f3:5c:1d:78:54:02:a3:e5:52:54:0b:fe:2f:77:49:3c: 16:5f:5b:cc:24:ce:30:9d:7d:a4:97:ae:3c:7c:78:b4:03:b2: 2e:db:8c:76:46:0d:e8:bb:54:df:aa:69:c7:d9:22:d8:7a:da: eb:93:2b:fb:24:87:49:59:af:f3:68:72:90:8a:a7:ee:c5:b4: 1c:27:28:fb:1e:55:b7:3a:52:40:26:c0:ef:57:2a:4d:49:c6: 20:08:45:19:a5:ce:0b:30:4d:e1:4c:10:ae:59:31:7c:49:3f: 75:97:88:b7:13:62:ea:7c:50:5d:19:b1:af:f0:4f:dd:e6:9f: 58:cb:61:26:33:55:02:23:02:e1:8f:56:a0:c6:56:f5:0a:9f: 9f:e6:d8:c9:4d:fc:1a:c4:ca:70:3d:35:6c:f6:a9:ae:c3:55: 74:cc:45:8e:51:cc:48:c6:bb:40:56:0b:41:06:13:6d:f5:aa: c8:38:76:58:ac:57:57:cd:92:12:13:71:6b:d9:e9:5a:26:7d: 4f:7d:18:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfD0z/VDLLDf+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MjMzYWM3OWYtMmVjOS00NjNjLWJkYzEtNDhiOTI2NTcyNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPFUq5zMxEXz3q4md6UH5djP46rWfpe9vlhN xRucUQvhpCUZ93N0RXMsyIP28aTW7X6hRX8f68yRUb4/OqzaiM5M0VPeMjLMK+ex hdirLm1oS4Hj1JhSVN8+F2u3+/or7anesBjBhzqL3AF05W3qhiTIfZCS6iMnaAhy pfrEONoCK1hFB/Ioyg7ONVACIADNZr/2NrTbUvknDIF0RnNOhXAa8nFmSPN7dv7I mluWYuKW4ggi1OD2x6ykgtdgAfZQ2h/9mlaJVdqTEFpqEsrzXSeA+whorMLNMuQg J4jDqHHC6Bl8uWHS14FZW+Kdg9Uy5fbWR0Mtbrbg/V9HLArOjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNd7KMQjv5h1o0vlcOBjtfOLYVAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIyM2M0NDItYWQ4Yi0z ZGNmLWJiZjAtMmUwODhmZDk3YmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApKCCFYCJXrsH65/IkVS9qTNajHmTc8QHkMssiFiycQQA+MA3xNM4T lQClD9HZhJ3ZyMs86nFgzPNcHXhUAqPlUlQL/i93STwWX1vMJM4wnX2kl648fHi0 A7Iu24x2Rg3ou1TfqmnH2SLYetrrkyv7JIdJWa/zaHKQiqfuxbQcJyj7HlW3OlJA JsDvVypNScYgCEUZpc4LME3hTBCuWTF8ST91l4i3E2LqfFBdGbGv8E/d5p9Yy2Em M1UCIwLhj1agxlb1Cp+f5tjJTfwaxMpwPTVs9qmuw1V0zEWOUcxIxrtAVgtBBhNt 9arIOHZYrFdXzZISE3Fr2elaJn1PfRgR -----END CERTIFICATE-----Generated at Sat Jun 13 14:24:37 2026 by rpki-client