$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa File: a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa (raw, json) Hash identifier: jajGy20ZzgjiUlY04grHoQRmkRh3J2jhHFRVsaNnJcM= Subject key identifier: 38:C6:DD:66:FB:09:17:1A:F5:BC:66:55:08:FD:6D:96:BD:54:A0:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5EE7F70E1767174C9F300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396580 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ee:7f:70:e1:76:71:74:c9:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=43e7712b-6da5-42d8-b38e-bf481ee8d9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:13:5c:d9:80:b1:44:3e:64:98:a2:35:f6:ed: ee:5b:e4:68:52:ca:79:97:7c:2b:30:33:35:8b:5e: 19:5c:0d:44:13:26:5b:bb:2f:47:3d:27:ac:7a:4f: 12:72:ec:92:4a:d6:e6:49:2b:88:b2:b3:6b:82:b9: d0:fa:7b:44:01:3e:b2:f3:64:ce:f3:49:65:4d:ae: e1:4b:d7:34:f1:f4:df:e1:19:59:0c:f6:2d:25:ba: 39:33:47:6f:28:aa:3d:67:b6:b5:01:a3:91:f9:ff: ea:f6:e6:ab:bb:2b:a6:6a:c1:ea:6b:e3:b1:ad:38: 1e:72:da:14:df:f2:02:79:c2:db:97:61:c9:13:3a: 52:27:13:38:24:92:33:a5:05:a7:a5:2b:da:ec:03: 4e:24:a9:7c:ba:bb:3d:10:f8:7d:95:f9:a0:b2:5f: 83:ae:33:44:5e:8c:6c:b9:ba:59:31:59:95:54:8a: 5c:68:12:3d:f3:08:5b:4f:ac:b5:24:32:f7:a6:1a: 78:76:9c:ee:34:7e:f8:1e:0c:e2:53:a0:1b:e9:5b: b7:1d:46:01:2a:b2:b3:fc:99:bc:a1:23:c9:b7:34: a4:fe:c3:0d:61:74:bc:05:a0:d6:cb:e1:6a:c4:ce: 93:dc:d4:e0:f9:fb:84:2c:0e:2e:27:07:7e:7c:d0: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C6:DD:66:FB:09:17:1A:F5:BC:66:55:08:FD:6D:96:BD:54:A0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a68c45f7-4962-3d2b-aec7-4b281dbd5e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:20:a7:ba:3a:8d:03:e4:5d:39:cb:d3:3e:2d:ba:97:03:b1: bb:54:f6:02:f2:10:cf:7c:25:12:1e:1c:ab:30:7b:c5:88:bb: 01:58:db:b3:d2:2b:20:eb:a5:20:9f:f3:7a:11:61:24:96:0c: 8a:0f:8d:f0:7d:b5:61:fe:62:26:22:cc:72:c7:d9:ad:fc:eb: e8:bd:93:5a:8d:0c:02:df:73:ca:ec:7f:d7:c1:4b:e3:ef:d4: 8f:97:cb:ba:3c:e9:42:35:e1:60:5a:50:9f:4a:da:e9:3f:b2: 0b:8f:4f:23:5f:a5:7e:07:9b:bf:00:50:f8:8b:bb:77:52:0a: 59:06:fa:28:02:09:a0:a2:8f:16:20:fd:94:bc:e2:3d:d6:d5: 44:ff:8e:aa:23:89:84:45:63:f7:f7:40:ce:3a:b0:54:2e:52: 84:a5:52:e8:40:d5:36:1c:31:6c:c4:01:6e:e4:a7:b5:aa:ba: d2:02:7c:4b:2c:41:b4:eb:09:ef:9d:dd:06:13:d4:22:71:5b: 01:60:9c:56:ae:ce:8e:3d:f5:2f:1e:7c:d2:e9:6b:f9:b9:20: 1c:36:6c:6c:5c:b7:93:92:58:55:22:eb:6b:80:9c:a6:9d:ca: 89:57:35:8c:fc:ed:bc:59:30:6a:86:24:11:14:7e:8b:e2:60: b3:c5:d6:c3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3ite5/cOF2cXTJ8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk NDNlNzcxMmItNmRhNS00MmQ4LWIzOGUtYmY0ODFlZThkOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhNc2YCxRD5kmKI19u3uW+RoUsp5l3wrMDM1 i14ZXA1EEyZbuy9HPSesek8ScuySStbmSSuIsrNrgrnQ+ntEAT6y82TO80llTa7h S9c08fTf4RlZDPYtJbo5M0dvKKo9Z7a1AaOR+f/q9uaruyumasHqa+OxrTgectoU 3/ICecLbl2HJEzpSJxM4JJIzpQWnpSva7ANOJKl8urs9EPh9lfmgsl+DrjNEXoxs ubpZMVmVVIpcaBI98whbT6y1JDL3php4dpzuNH74HgziU6Ab6Vu3HUYBKrKz/Jm8 oSPJtzSk/sMNYXS8BaDWy+FqxM6T3NTg+fuELA4uJwd+fNA8BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDjG3Wb7CRca9bxmVQj9bZa9VKAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTY4YzQ1ZjctNDk2Mi0z ZDJiLWFlYzctNGIyODFkYmQ1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCEIKe6Oo0D5F05y9M+LbqXA7G7VPYC8hDPfCUSHhyrMHvFiLsBWNuz 0isg66Ugn/N6EWEklgyKD43wfbVh/mImIsxyx9mt/OvovZNajQwC33PK7H/XwUvj 79SPl8u6POlCNeFgWlCfStrpP7ILj08jX6V+B5u/AFD4i7t3UgpZBvooAgmgoo8W IP2UvOI91tVE/46qI4mERWP390DOOrBULlKEpVLoQNU2HDFsxAFu5Ke1qrrSAnxL LEG06wnvnd0GE9QicVsBYJxWrs6OPfUvHnzS6Wv5uSAcNmxsXLeTklhVIutrgJym ncqJVzWM/O28WTBqhiQRFH6L4mCzxdbD -----END CERTIFICATE-----Generated at Sat Jun 13 15:47:26 2026 by rpki-client