$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa File: a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa (raw, json) Hash identifier: zXE7/d7cbicRSa9sT8ha3t9Zwt2OhXSiiiIyGyP7WM4= Subject key identifier: 78:D0:EE:98:2D:C4:85:61:E7:52:EA:F9:E4:CD:81:39:9A:7F:30:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5D8D5B6E49C5180E296C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397200 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d8:d5:b6:e4:9c:51:80:e2:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=eaea3fe9-784f-44d4-81d9-aed4f24fa696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:d2:42:b2:81:6f:ab:06:e0:66:12:03:ff: de:c2:7a:95:7c:55:50:94:46:bc:a6:26:c6:80:db: b3:8d:a3:7a:21:23:09:a0:17:30:05:67:79:7e:a1: 04:81:c6:4f:fc:9a:6b:4b:23:69:73:4a:dc:7b:b7: 6f:02:58:bd:2e:3c:fd:36:47:15:1f:5d:a4:8e:0a: fe:16:a7:ac:65:1b:02:ff:ee:f8:71:5c:5c:06:bf: 5a:f8:33:8d:84:99:c9:11:82:dc:2f:01:d5:d3:da: c0:e5:e1:fd:a3:b5:d6:79:9a:d7:1b:a6:1a:fc:70: 0a:3c:72:15:10:ae:36:64:1a:16:0c:42:8c:33:6c: f2:d5:ce:e6:3c:e5:81:3d:c0:6d:6f:8e:30:87:85: a4:3c:48:86:05:b3:06:dc:0c:40:33:99:0d:02:f4: 0a:4c:f3:a5:ca:a2:fe:27:bd:31:bf:b5:bd:48:c2: 76:eb:22:7c:20:69:f8:06:8a:a2:43:af:e2:38:1c: 9a:08:0a:5f:60:f7:e0:e5:f9:1b:f1:ef:5b:38:16: 94:4c:ab:50:61:85:61:d7:0d:1f:6a:23:a6:d1:f3: b3:f6:45:db:27:83:7f:c8:88:da:26:d5:08:03:e0: 94:ed:d2:1a:03:b5:39:ad:8c:03:e1:2d:bf:c5:88: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D0:EE:98:2D:C4:85:61:E7:52:EA:F9:E4:CD:81:39:9A:7F:30:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2bb4a27-002f-3df1-92d5-fe0049680f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3a:c2:c8:67:ad:15:ad:2e:f8:2f:c7:a8:0f:fd:c8:6b:46: f1:15:d6:d1:bf:f1:56:19:87:ff:2a:75:00:a9:63:22:b0:d1: 66:41:91:97:c8:54:34:16:48:d6:73:e6:37:04:d4:00:cc:5c: 93:f2:2b:8a:7e:62:76:85:07:c0:b3:a7:7a:84:b7:e7:1c:8d: d6:3b:95:a1:16:74:b7:53:5b:2f:ba:19:1c:88:7f:f0:c4:86: f3:92:f1:c5:df:f9:a7:7c:3e:6d:91:f5:92:1f:76:87:07:b3: 8a:63:7e:9b:8a:89:25:f8:77:2d:ec:bd:0f:e0:af:ec:cb:b3: 17:8e:31:a3:5f:f7:0e:a0:98:19:da:dd:53:3a:66:bb:f0:03: 4c:59:be:17:fa:ec:d9:4f:5b:39:99:85:2f:17:1d:2f:af:f5: c0:bf:01:5e:a8:1e:aa:08:67:61:89:bf:be:77:44:1f:6a:10: 12:87:eb:53:5d:16:47:6a:33:e4:a1:ce:66:09:f1:94:15:85: 08:bc:e7:6a:2e:46:df:5a:e9:56:08:3e:90:d8:e4:fa:90:8b: 1b:79:ce:02:d1:65:36:56:82:a1:2f:e2:70:5f:8f:60:77:3c: 00:cb:49:1a:44:f2:66:a9:69:03:53:28:45:3b:69:e7:04:4c: 6d:bc:08:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itdjVtuScUYDilsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk ZWFlYTNmZTktNzg0Zi00NGQ0LTgxZDktYWVkNGYyNGZhNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAXSQrKBb6sG4GYSA//ewnqVfFVQlEa8pibG gNuzjaN6ISMJoBcwBWd5fqEEgcZP/JprSyNpc0rce7dvAli9Ljz9NkcVH12kjgr+ FqesZRsC/+74cVxcBr9a+DONhJnJEYLcLwHV09rA5eH9o7XWeZrXG6Ya/HAKPHIV EK42ZBoWDEKMM2zy1c7mPOWBPcBtb44wh4WkPEiGBbMG3AxAM5kNAvQKTPOlyqL+ J70xv7W9SMJ26yJ8IGn4BoqiQ6/iOByaCApfYPfg5fkb8e9bOBaUTKtQYYVh1w0f aiOm0fOz9kXbJ4N/yIjaJtUIA+CU7dIaA7U5rYwD4S2/xYhddwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHjQ7pgtxIVh51Lq+eTNgTmafzCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJiYjRhMjctMDAyZi0z ZGYxLTkyZDUtZmUwMDQ5NjgwZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHOsLIZ60VrS74L8eoD/3Ia0bxFdbRv/FWGYf/KnUAqWMisNFmQZGX yFQ0FkjWc+Y3BNQAzFyT8iuKfmJ2hQfAs6d6hLfnHI3WO5WhFnS3U1svuhkciH/w xIbzkvHF3/mnfD5tkfWSH3aHB7OKY36biokl+Hct7L0P4K/sy7MXjjGjX/cOoJgZ 2t1TOma78ANMWb4X+uzZT1s5mYUvFx0vr/XAvwFeqB6qCGdhib++d0QfahASh+tT XRZHajPkoc5mCfGUFYUIvOdqLkbfWulWCD6Q2OT6kIsbec4C0WU2VoKhL+JwX49g dzwAy0kaRPJmqWkDUyhFO2nnBExtvAgY -----END CERTIFICATE-----Generated at Sat Jun 13 15:50:19 2026 by rpki-client