$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa File: af85614e-7c92-3643-b55c-470e5ec31d97.roa (raw, json) Hash identifier: vjTYqtVxQ9x4AStqv7xmjRYq4Y3AYyH2eXcl+xw2MO8= Subject key identifier: A0:A9:3A:BB:09:72:67:CB:80:58:D8:BA:EA:B3:23:04:D7:13:E6:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5D5233DB79A0A8C655D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 36630 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:d5:23:3d:b7:9a:0a:8c:65:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=cfb9270e-6c2d-46a7-a75e-6050d11b5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d7:e2:94:0c:df:d8:72:7d:e8:b7:ba:ab:0d: d8:96:4c:4c:9c:ae:d6:1f:07:6e:38:83:36:0e:e6: f8:13:65:15:24:17:ae:9c:99:50:30:51:e5:8a:6f: be:a6:00:8f:27:dc:ed:ee:2a:09:3b:e5:c8:b3:e7: 16:66:14:39:1f:c7:5d:92:1e:d8:b9:bc:ed:8e:9b: 22:6c:70:e9:96:fc:02:aa:f8:93:c6:15:af:c6:ea: e1:fe:5d:dc:68:91:63:c5:f9:90:4e:f8:93:e4:32: 50:bd:d5:08:78:f4:22:60:e4:81:03:ec:d5:b0:a0: ec:07:81:21:9e:84:5b:93:b3:8c:7c:28:6e:4b:55: 5c:ff:fd:b6:8b:11:13:d7:68:07:49:3e:24:45:31: 3a:61:3d:b9:1b:4a:7d:3f:1d:01:c9:58:84:09:9c: f2:2f:cc:24:5d:81:4b:48:72:13:6c:00:15:f4:2c: d7:7a:cb:13:ea:bc:c7:12:66:7a:63:15:93:4b:ae: 90:ea:da:bd:e7:93:2e:5a:6e:d4:0b:2d:c9:28:fa: ab:fc:3d:fd:0e:07:bb:77:d9:07:c3:f2:ab:7c:38: a1:a9:d0:04:4c:dd:cb:81:10:ff:31:5e:af:1e:53: 91:f2:aa:ad:6a:ba:71:1e:e2:17:93:5c:e3:59:1a: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:3A:BB:09:72:67:CB:80:58:D8:BA:EA:B3:23:04:D7:13:E6:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af85614e-7c92-3643-b55c-470e5ec31d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:01:4d:71:46:66:79:58:99:33:a5:cf:0f:64:f5:ea:73:c7: ec:4a:a5:0e:e2:25:98:10:d7:b0:68:d1:0b:51:7b:32:49:96: e8:fa:b3:e4:9d:a3:5d:f9:88:b6:7d:a3:c0:ba:d4:aa:bb:fa: 99:19:14:45:e8:3c:60:af:89:1c:02:22:a4:6f:48:bc:d9:b3: d0:3e:06:77:76:a8:21:6d:20:d9:a2:66:6d:2a:7a:09:32:07: 69:86:fb:ab:95:a1:58:ea:2c:eb:4a:99:82:1d:df:83:f5:c1: e4:24:7d:df:74:a1:f9:8b:2f:d6:c5:57:08:4a:35:c5:ef:13: e6:f9:8b:48:74:65:dc:cb:f9:b2:5b:80:6e:22:31:dd:2e:c7: c5:cf:e8:42:e1:0e:3d:5b:b0:5e:67:2b:d7:5d:41:32:2f:d6: 56:af:24:ad:9a:4b:41:5a:c8:b1:08:06:61:2e:63:66:72:fc: 18:de:a6:7a:ff:ff:70:ba:ba:e7:92:dd:af:61:a2:aa:dc:ad: 33:fb:86:e9:30:1a:72:d4:df:37:5b:bd:ac:d2:18:bc:12:76: 29:9a:52:a1:60:fe:c5:d1:34:86:3c:90:72:e1:87:3a:0a:47: 82:fe:76:ce:6d:a5:22:c8:36:72:59:d9:f3:71:c5:57:0c:f9: 24:18:96:8a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itdUjPbeaCoxlXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk Y2ZiOTI3MGUtNmMyZC00NmE3LWE3NWUtNjA1MGQxMWI1ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtfilAzf2HJ96Le6qw3YlkxMnK7WHwduOIM2 Dub4E2UVJBeunJlQMFHlim++pgCPJ9zt7ioJO+XIs+cWZhQ5H8ddkh7Yubztjpsi bHDplvwCqviTxhWvxurh/l3caJFjxfmQTviT5DJQvdUIePQiYOSBA+zVsKDsB4Eh noRbk7OMfChuS1Vc//22ixET12gHST4kRTE6YT25G0p9Px0ByViECZzyL8wkXYFL SHITbAAV9CzXessT6rzHEmZ6YxWTS66Q6tq955MuWm7UCy3JKPqr/D39Dge7d9kH w/KrfDihqdAETN3LgRD/MV6vHlOR8qqtarpxHuIXk1zjWRp1cwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKCpOrsJcmfLgFjYuuqzIwTXE+aRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4NTYxNGUtN2M5Mi0z NjQzLWI1NWMtNDcwZTVlYzMxZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2AU1xRmZ5WJkzpc8PZPXqc8fsSqUO4iWYENewaNELUXsySZbo+rPk naNd+Yi2faPAutSqu/qZGRRF6Dxgr4kcAiKkb0i82bPQPgZ3dqghbSDZomZtKnoJ MgdphvurlaFY6izrSpmCHd+D9cHkJH3fdKH5iy/WxVcISjXF7xPm+YtIdGXcy/my W4BuIjHdLsfFz+hC4Q49W7BeZyvXXUEyL9ZWryStmktBWsixCAZhLmNmcvwY3qZ6 //9wurrnkt2vYaKq3K0z+4bpMBpy1N83W72s0hi8EnYpmlKhYP7F0TSGPJBy4Yc6 CkeC/nbObaUiyDZyWdnzccVXDPkkGJaK -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:36 2026 by rpki-client