$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa File: aa04401b-7f82-3596-a508-6860fdc939c3.roa (raw, json) Hash identifier: XQ4Q9204cAlrc3KUvXXh6AGIj/Tb+mvFQg1Uut5SnVU= Subject key identifier: 9E:E5:00:04:AB:5E:8D:DA:1F:B1:F5:ED:83:B8:77:BD:9D:C6:72:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7902FAAF276366198EA6B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397196 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:2f:aa:f2:76:36:61:98:ea:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fc4a5208-625d-4f08-807c-c8872fe9a189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:90:07:69:2c:94:28:ea:81:f2:09:9b:25: 11:b4:d1:90:bb:79:13:38:4e:2f:4b:f4:94:25:e4: 89:fc:06:fa:02:59:bc:71:74:52:a5:8b:83:20:a4: 15:bf:4e:9c:69:e4:1b:20:49:80:11:0d:fb:fa:48: c4:da:90:1e:d9:32:db:4a:d2:bb:34:18:c6:87:77: 2b:f9:8b:4b:33:e0:14:05:ba:d8:2c:e2:55:2a:9e: 77:3a:26:44:60:db:0a:54:01:dd:05:8f:c5:8d:27: c1:3b:58:7a:ce:12:98:35:4c:85:32:99:5e:ab:2a: f6:eb:16:83:d2:fc:3f:2c:78:e0:9d:7a:63:fa:54: e6:68:e2:84:33:31:56:d6:04:a9:23:83:43:2d:be: 2b:90:20:78:b1:70:bf:59:11:8a:2e:fb:27:00:e1: 6e:f9:5d:52:16:a9:39:0e:35:78:1c:58:f6:5d:59: c0:d8:46:fa:00:9d:c0:da:0c:5f:e0:59:47:01:f8: 2a:a2:b6:39:11:1a:c1:32:d8:55:a7:f4:dd:9e:e0: 79:54:5f:9e:ec:6b:a3:14:fb:63:5f:dc:ff:0f:eb: 49:3a:05:02:6e:01:9c:e6:06:42:3d:50:10:6a:12: eb:25:5d:67:be:99:1b:00:74:f5:b1:b7:f5:d5:55: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E5:00:04:AB:5E:8D:DA:1F:B1:F5:ED:83:B8:77:BD:9D:C6:72:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa04401b-7f82-3596-a508-6860fdc939c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:81:78:57:86:c9:b2:ad:2f:41:17:f6:40:4a:23:4f:1d:0c: 9d:dd:cc:dc:8d:7e:89:b3:9b:23:e2:f6:2b:dd:a9:1b:a1:8b: 7e:cd:70:21:21:51:c3:31:9c:d7:09:3a:ba:40:25:6d:86:24: bb:43:46:16:bf:f4:90:d5:42:b4:0f:de:72:40:9f:83:70:6c: 18:b8:6e:f2:d7:66:1f:5d:2a:f6:d9:81:17:4f:ba:d9:a7:5d: 44:32:8f:91:97:63:ee:2f:2e:4b:ae:ac:00:b2:57:4b:35:c3: e1:71:70:df:be:c0:7a:a0:cb:8e:27:6d:9a:75:57:a5:04:fa: 05:58:ca:ae:bc:78:d3:f6:6b:d3:be:f6:d7:43:97:60:36:9f: fd:cb:72:2b:fa:f2:6c:3a:04:ab:7f:42:be:33:8d:d6:2e:51: 50:d9:14:54:3b:cd:8e:93:b2:f8:64:d3:14:1d:74:93:81:cc: 72:09:06:2a:2b:cc:df:47:57:d9:64:1b:a0:ed:58:90:36:91: 14:e6:18:b7:b4:20:38:0b:d6:81:3d:bb:93:29:20:4d:88:63: 05:17:b7:b9:ee:65:e0:fc:c8:99:87:25:5c:77:56:e9:fa:52: de:7c:ed:60:68:d6:cc:13:a6:f6:8a:0b:5a:ee:0f:c8:64:ae: 65:02:f3:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkC+q8nY2YZjqawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmM0YTUyMDgtNjI1ZC00ZjA4LTgwN2MtYzg4NzJmZTlhMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOeQB2kslCjqgfIJmyURtNGQu3kTOE4vS/SU JeSJ/Ab6Alm8cXRSpYuDIKQVv06caeQbIEmAEQ37+kjE2pAe2TLbStK7NBjGh3cr +YtLM+AUBbrYLOJVKp53OiZEYNsKVAHdBY/FjSfBO1h6zhKYNUyFMpleqyr26xaD 0vw/LHjgnXpj+lTmaOKEMzFW1gSpI4NDLb4rkCB4sXC/WRGKLvsnAOFu+V1SFqk5 DjV4HFj2XVnA2Eb6AJ3A2gxf4FlHAfgqorY5ERrBMthVp/TdnuB5VF+e7GujFPtj X9z/D+tJOgUCbgGc5gZCPVAQahLrJV1nvpkbAHT1sbf11VVZiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ7lAASrXo3aH7H17YO4d72dxnLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWEwNDQwMWItN2Y4Mi0z NTk2LWE1MDgtNjg2MGZkYzkzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAsgXhXhsmyrS9BF/ZASiNPHQyd3czcjX6Js5sj4vYr3akboYt+zXAh IVHDMZzXCTq6QCVthiS7Q0YWv/SQ1UK0D95yQJ+DcGwYuG7y12YfXSr22YEXT7rZ p11EMo+Rl2PuLy5LrqwAsldLNcPhcXDfvsB6oMuOJ22adVelBPoFWMquvHjT9mvT vvbXQ5dgNp/9y3Ir+vJsOgSrf0K+M43WLlFQ2RRUO82Ok7L4ZNMUHXSTgcxyCQYq K8zfR1fZZBug7ViQNpEU5hi3tCA4C9aBPbuTKSBNiGMFF7e57mXg/MiZhyVcd1bp +lLefO1gaNbME6b2igta7g/IZK5lAvMs -----END CERTIFICATE-----Generated at Wed Jul 29 10:10:12 2026 by rpki-client