$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: arzXmf14qOWGLIOWenswqxJnHrHIiYH4kmqoy362E/U= Subject key identifier: 15:D4:AB:B2:49:9F:49:D8:A0:49:D3:2A:37:85:43:DE:25:74:63:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5F3044564525864101240 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:f3:04:45:64:52:58:64:10:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=3bce360f-6d9f-42cb-84cb-75d054f5cb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:70:b0:d0:23:7a:ae:e9:1a:a3:90:f0:a8: 35:b4:ed:71:86:18:54:4b:d1:fd:c1:a4:f8:d9:b6: 8e:4c:7a:ae:3a:54:cf:bc:84:24:66:1d:bd:1a:25: 2d:f1:e1:fd:0c:d7:cc:d7:76:8c:e6:dc:4a:60:82: 08:ae:7b:26:97:7d:7f:c7:27:92:0d:89:4e:05:c6: d4:1e:dc:f7:e9:8a:20:d2:74:48:96:64:54:71:49: 9f:77:3d:c5:8f:f3:1d:18:78:79:88:93:ac:f4:e1: a0:4a:6e:8b:29:0c:ab:5d:7d:d6:cd:59:98:23:0f: 2f:60:e2:cf:ab:c4:52:a0:c7:6e:e7:85:d7:66:23: e5:2a:99:6b:54:22:d1:ac:67:e1:5d:4d:55:68:24: e6:85:b3:af:ae:07:57:e3:fb:40:f4:2d:24:39:50: 83:1f:04:a6:10:12:b8:7a:08:c6:f3:93:ed:0c:e0: 27:73:e0:19:2e:78:06:02:16:53:4c:73:76:b7:6b: 52:1b:b6:c6:6f:53:b6:80:8f:39:7b:15:a1:b1:46: ca:68:9d:aa:5d:7b:1e:c8:9a:7f:0f:7f:5a:dc:b3: 7a:61:41:e6:9c:e2:7c:f0:57:0d:7b:a5:82:36:8f: 15:b7:b5:a4:e0:c0:35:d2:0e:b8:cb:f8:aa:fa:aa: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D4:AB:B2:49:9F:49:D8:A0:49:D3:2A:37:85:43:DE:25:74:63:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bf:6f:d5:ef:73:eb:4c:14:1b:a1:ae:b2:cb:65:ef:9c:f4: 50:7a:01:3b:4a:a7:d6:82:de:2a:2f:3d:e0:36:e6:85:20:52: f3:cd:9f:d5:e2:a1:7a:07:4f:7b:b2:aa:a2:a4:2c:4d:c2:e6: 5b:53:33:6c:1d:67:fa:8b:57:70:73:4b:1c:e0:48:17:ca:36: a9:48:55:97:17:07:10:bc:eb:07:70:4c:ed:24:3d:1a:d3:a4: ac:96:9c:2d:36:b4:8e:15:db:76:d5:3f:57:ac:ee:ea:f2:1b: 93:c8:8d:fd:96:97:a7:87:fd:a4:dc:88:ae:2f:bd:bf:a5:60: 99:c4:40:68:54:c1:eb:c3:3b:ee:ed:9f:c2:7e:b8:d2:5c:f1: ef:91:29:0d:ac:8d:86:87:6e:df:5e:e3:5c:51:71:2c:04:a8: 04:22:5c:04:7d:21:2b:86:59:10:56:ab:37:cd:36:f3:fc:9e: 8d:04:16:a7:a9:69:95:2c:2e:07:d4:c2:95:4c:fc:3c:eb:be: 48:24:25:76:67:63:c8:93:43:e7:f8:9f:f2:66:16:9b:d5:56: cc:da:6b:01:1f:aa:90:4e:08:0c:62:a2:de:6b:99:0e:94:15: 27:90:1b:88:7e:95:85:47:4c:4c:3d:e1:b5:25:50:1b:97:4f: 95:a7:c2:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfMERWRSWGQQEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk M2JjZTM2MGYtNmQ5Zi00MmNiLTg0Y2ItNzVkMDU0ZjVjYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQRwsNAjeq7pGqOQ8Kg1tO1xhhhUS9H9waT4 2baOTHquOlTPvIQkZh29GiUt8eH9DNfM13aM5txKYIIIrnsml31/xyeSDYlOBcbU Htz36Yog0nRIlmRUcUmfdz3Fj/MdGHh5iJOs9OGgSm6LKQyrXX3WzVmYIw8vYOLP q8RSoMdu54XXZiPlKplrVCLRrGfhXU1VaCTmhbOvrgdX4/tA9C0kOVCDHwSmEBK4 egjG85PtDOAnc+AZLngGAhZTTHN2t2tSG7bGb1O2gI85exWhsUbKaJ2qXXseyJp/ D39a3LN6YUHmnOJ88FcNe6WCNo8Vt7Wk4MA10g64y/iq+qpHaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBXUq7JJn0nYoEnTKjeFQ94ldGM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfv2/V73PrTBQboa6yy2XvnPRQegE7SqfWgt4qLz3gNuaFIFLzzZ/V 4qF6B097sqqipCxNwuZbUzNsHWf6i1dwc0sc4EgXyjapSFWXFwcQvOsHcEztJD0a 06SslpwtNrSOFdt21T9XrO7q8huTyI39lpenh/2k3IiuL72/pWCZxEBoVMHrwzvu 7Z/CfrjSXPHvkSkNrI2Gh27fXuNcUXEsBKgEIlwEfSErhlkQVqs3zTbz/J6NBBan qWmVLC4H1MKVTPw8675IJCV2Z2PIk0Pn+J/yZhab1VbM2msBH6qQTggMYqLea5kO lBUnkBuIfpWFR0xMPeG1JVAbl0+Vp8Jw -----END CERTIFICATE-----Generated at Sat Jun 13 13:52:40 2026 by rpki-client