$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa File: a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa (raw, json) Hash identifier: /2nLz/hjSJ2DZvlz9aBgw626rYyb9WWfwER72jYzhd0= Subject key identifier: 23:EE:4F:E7:AC:2F:8E:69:7C:9E:02:FE:FF:BF:A4:77:24:1C:CB:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FEBFF880101144836DA20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396587 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:eb:ff:88:01:01:14:48:36:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=71eabce3-c0c5-4114-ac1c-0feb8ab97dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:a1:ac:18:e0:91:a6:57:95:61:df:0d:84: d3:c6:94:58:d1:29:a8:90:3b:ea:2f:74:44:89:26: 9e:28:57:ae:a7:4e:80:fa:20:2d:1e:db:45:2d:d2: aa:be:92:c3:48:4a:73:5f:1e:fc:00:5b:bd:a0:b2: bd:9d:d5:07:1b:50:59:36:df:2b:4d:cc:7a:7d:ff: 31:52:83:84:8e:19:36:2e:5b:6d:94:ff:9b:de:3d: 32:9f:5b:4a:d5:00:ab:75:7c:82:d7:31:6e:f5:1d: 3d:8a:b2:82:0b:59:ff:3d:d9:cb:33:61:f1:53:e7: 05:c3:69:e5:73:e0:88:92:46:a2:72:b8:d9:c9:54: 85:af:10:6b:20:76:9d:34:be:04:3a:fe:23:72:11: bf:1d:a4:fc:a6:e0:92:60:5d:11:36:70:9d:fd:4e: 1c:6f:11:99:a4:21:7c:76:d7:4d:a8:70:b3:02:43: c4:92:db:45:64:93:b7:f8:76:39:8d:09:fc:db:28: 94:bc:f5:0b:05:eb:b8:62:48:7e:27:f3:74:ab:a8: c0:4b:45:80:8b:48:83:95:2a:06:dc:80:d2:78:65: 11:cd:a9:1c:de:a6:41:41:ba:bc:e9:37:64:73:cf: 26:04:e6:b7:af:d1:f0:87:65:d4:64:42:ac:b9:99: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EE:4F:E7:AC:2F:8E:69:7C:9E:02:FE:FF:BF:A4:77:24:1C:CB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3d113fc-9cd4-357c-8e02-e3532a9d5552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:44:9c:45:12:b6:9a:78:6d:76:ff:19:14:d2:04:90:fc: 2a:cb:a1:12:8a:f1:40:6b:7a:83:d1:11:dd:46:66:47:45:d3: 62:18:79:0c:b3:e9:fd:70:08:b3:8d:32:f3:05:a5:49:e4:4b: b0:f8:23:f3:36:4f:23:63:bf:6c:1d:24:43:26:8d:ed:7b:82: a2:00:20:3d:ab:22:5d:53:0b:e6:c8:a2:41:dd:cb:1e:89:26: 9a:02:1f:b5:ad:ae:8d:c0:e7:49:f2:d7:a0:5f:b8:51:d4:9b: b6:f3:e9:f4:d9:e2:2a:a5:de:15:83:03:ea:5c:84:86:a4:55: 06:6b:cb:8d:71:0f:06:f0:04:34:a2:1d:4f:40:6e:6f:bf:0f: 56:cc:d4:0c:5a:14:4e:39:1a:1b:77:0c:4e:f2:fd:f7:7f:88: 74:5b:51:2f:8a:f1:01:bd:30:d5:8e:8c:c9:c4:bd:ac:19:aa: 61:ac:ba:ab:36:44:a7:3e:28:9e:7a:22:5c:79:6e:a1:1b:aa: 5a:5d:6a:28:36:d6:ed:16:82:d2:e1:55:6b:88:cb:ee:e0:89: a5:ae:c5:6f:77:d3:7c:fe:52:31:7a:23:9e:c9:a5:9e:9d:82: 71:b7:14:19:d1:93:b9:e4:bd:d4:30:10:05:77:30:7a:01:6a: 66:cf:d8:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+v/iAEBFEg22iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzFlYWJjZTMtYzBjNS00MTE0LWFjMWMtMGZlYjhhYjk3ZGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDahrBjgkaZXlWHfDYTTxpRY0SmokDvqL3RE iSaeKFeup06A+iAtHttFLdKqvpLDSEpzXx78AFu9oLK9ndUHG1BZNt8rTcx6ff8x UoOEjhk2LlttlP+b3j0yn1tK1QCrdXyC1zFu9R09irKCC1n/PdnLM2HxU+cFw2nl c+CIkkaicrjZyVSFrxBrIHadNL4EOv4jchG/HaT8puCSYF0RNnCd/U4cbxGZpCF8 dtdNqHCzAkPEkttFZJO3+HY5jQn82yiUvPULBeu4Ykh+J/N0q6jAS0WAi0iDlSoG 3IDSeGURzakc3qZBQbq86Tdkc88mBOa3r9Hwh2XUZEKsuZm/PQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCPuT+esL45pfJ4C/v+/pHckHMsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNkMTEzZmMtOWNkNC0z NTdjLThlMDItZTM1MzJhOWQ1NTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuC0ScRRK2mnhtdv8ZFNIEkPwqy6ESivFAa3qD0RHdRmZHRdNiGHkM s+n9cAizjTLzBaVJ5Euw+CPzNk8jY79sHSRDJo3te4KiACA9qyJdUwvmyKJB3cse iSaaAh+1ra6NwOdJ8tegX7hR1Ju28+n02eIqpd4VgwPqXISGpFUGa8uNcQ8G8AQ0 oh1PQG5vvw9WzNQMWhROORobdwxO8v33f4h0W1EvivEBvTDVjozJxL2sGaphrLqr NkSnPiieeiJceW6hG6paXWooNtbtFoLS4VVriMvu4ImlrsVvd9N8/lIxeiOeyaWe nYJxtxQZ0ZO55L3UMBAFdzB6AWpmz9hg -----END CERTIFICATE-----Generated at Wed Jul 29 05:26:01 2026 by rpki-client