$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa File: a51333c0-b920-37c3-ac71-0834c73fd5c3.roa (raw, json) Hash identifier: 4TnIIjTufZPV+1oKzuqfoQGz+U1wJGHZNbouFmySFIc= Subject key identifier: 9B:8B:EA:6C:34:D4:84:89:A2:37:76:F4:23:B4:DA:D7:77:8A:E5:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5D07984F2BBA234120980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396590 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d0:79:84:f2:bb:a2:34:12:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=78a4ecd1-7f22-4270-b2c1-d74884614331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:3c:ac:0d:c5:f4:b6:99:38:02:a8:64:59: 0a:ab:15:af:e9:13:4d:a0:d5:59:a8:c9:be:41:e8: 25:35:0e:c1:9a:b7:b0:d1:84:8c:39:ea:b5:cb:78: 77:c0:ee:f9:be:fd:a8:07:5a:69:20:57:59:17:52: 16:60:80:ad:79:5c:e7:01:b6:d9:33:79:b2:d9:8a: 1a:4b:7d:a3:1f:31:5a:b6:2e:85:d8:4b:25:4d:e6: 92:73:59:f3:e6:ff:be:34:31:2e:a6:10:ad:9d:52: cb:3b:fa:91:2f:d5:5c:18:c6:21:80:e7:3f:08:67: bc:e5:9a:bb:33:25:36:bf:d7:87:f7:46:ac:d3:d2: 8f:8a:ab:5a:cd:c5:67:55:d7:b1:95:23:f3:6d:8a: 6c:0e:08:d7:f9:32:e9:c6:33:6f:15:7d:b9:14:e9: f8:72:b9:c2:c0:51:86:35:de:bd:bc:8b:e6:3a:fe: 74:97:d8:df:06:04:1d:f7:01:ed:0a:ad:9a:9f:60: d5:aa:bb:a8:70:dd:b5:2c:79:d6:5e:d6:9c:f6:ea: 3d:76:38:36:77:d4:01:c3:8c:b9:3f:0f:91:84:5e: 44:ff:12:da:d8:10:59:d2:85:77:d2:25:83:b6:89: 6d:5e:e5:a0:bc:41:dd:36:fc:8b:6b:04:40:d0:85: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:EA:6C:34:D4:84:89:A2:37:76:F4:23:B4:DA:D7:77:8A:E5:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e6:5d:03:3e:66:2d:5a:65:fa:6a:56:ec:9e:e3:eb:9f:55: 29:10:a4:2f:e7:03:f4:21:24:df:a6:40:2b:80:a1:8a:f2:1b: a2:43:f2:2f:1f:69:af:e5:42:96:af:a1:fe:a9:85:aa:a1:d5: 45:f3:04:c7:cc:79:df:29:be:7d:62:4d:7c:ce:7b:3a:7c:2c: 67:1c:80:fa:ae:e8:9e:e2:6d:2d:32:38:38:bd:eb:1a:a2:50: 3c:3c:04:d4:32:04:e2:68:22:5d:32:c6:2b:bf:db:83:40:4c: 57:0e:a3:68:6e:08:e5:b1:85:da:75:ed:80:5a:58:ac:cd:56: 7a:81:34:a3:a5:2b:27:4f:c7:4a:6f:11:29:cc:1c:89:40:71: ba:b8:a6:3c:01:7e:4f:62:cd:3c:ba:85:4c:e1:be:59:18:e4: 62:53:35:d2:c3:c4:9e:3f:8d:e7:8f:a8:d2:8d:4c:ba:fe:eb: ac:32:76:4d:4f:4a:28:e2:12:32:8e:ba:48:9c:2e:40:10:7c: 56:6f:71:f3:27:2c:5a:d0:0b:99:58:5a:65:69:44:66:af:a9: fb:6a:ee:58:f8:0a:c8:f3:35:ed:1a:ee:f5:cd:d8:4c:c8:5b: 61:56:04:6f:b9:16:a6:a1:6d:0a:0f:33:12:39:d4:fe:18:87: 48:69:97:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itdB5hPK7ojQSCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NzhhNGVjZDEtN2YyMi00MjcwLWIyYzEtZDc0ODg0NjE0MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHE8rA3F9LaZOAKoZFkKqxWv6RNNoNVZqMm+ QeglNQ7Bmrew0YSMOeq1y3h3wO75vv2oB1ppIFdZF1IWYICteVznAbbZM3my2Yoa S32jHzFati6F2EslTeaSc1nz5v++NDEuphCtnVLLO/qRL9VcGMYhgOc/CGe85Zq7 MyU2v9eH90as09KPiqtazcVnVdexlSPzbYpsDgjX+TLpxjNvFX25FOn4crnCwFGG Nd69vIvmOv50l9jfBgQd9wHtCq2an2DVqruocN21LHnWXtac9uo9djg2d9QBw4y5 Pw+RhF5E/xLa2BBZ0oV30iWDtoltXuWgvEHdNvyLawRA0IVMpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJuL6mw01ISJojd29CO02td3iuV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUxMzMzYzAtYjkyMC0z N2MzLWFjNzEtMDgzNGM3M2ZkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAp5l0DPmYtWmX6albsnuPrn1UpEKQv5wP0ISTfpkArgKGK8huiQ/Iv H2mv5UKWr6H+qYWqodVF8wTHzHnfKb59Yk18zns6fCxnHID6ruie4m0tMjg4vesa olA8PATUMgTiaCJdMsYrv9uDQExXDqNobgjlsYXade2AWliszVZ6gTSjpSsnT8dK bxEpzByJQHG6uKY8AX5PYs08uoVM4b5ZGORiUzXSw8SeP43nj6jSjUy6/uusMnZN T0oo4hIyjrpInC5AEHxWb3HzJyxa0AuZWFplaURmr6n7au5Y+ArI8zXtGu71zdhM yFthVgRvuRamoW0KDzMSOdT+GIdIaZeb -----END CERTIFICATE-----Generated at Sat Jun 13 15:11:03 2026 by rpki-client