$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa File: b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa (raw, json) Hash identifier: XuQAxjR6d84H0EEMpboIBOdkRismRllL8gYpR/2bQXE= Subject key identifier: 0E:33:E0:48:CE:62:DE:73:35:B6:AD:C4:5C:58:04:C1:1D:04:83:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FE4D6B3159295E03170C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396561 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e4:d6:b3:15:92:95:e0:31:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6cb1efb7-d6a8-48f7-affa-9ef9bbc4cb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:93:a8:61:c9:d8:35:44:b2:41:e7:99:a3:7c: 19:14:28:16:84:07:0d:20:25:ae:56:9b:96:41:ff: 83:52:28:86:1f:1a:b5:2f:51:b2:21:f3:43:ae:8d: 50:bb:85:d9:1a:09:4e:98:b8:97:c5:a2:88:8c:1b: 79:c9:e3:24:27:25:92:39:bb:d6:75:29:08:c8:57: a4:c1:c1:5d:23:b0:31:13:6f:21:f9:77:69:7a:90: 57:ee:f3:34:61:ec:55:74:b3:5f:15:29:18:8d:7f: fa:f9:fb:5a:31:21:cb:e2:b1:6d:20:49:c7:18:50: 6f:44:ba:ae:0f:ef:e7:d2:1f:db:90:df:22:d2:63: ba:2f:3d:b3:3f:04:e3:22:7d:9f:ee:29:e3:08:46: f8:bb:35:68:8a:57:4c:dd:10:2f:89:d4:bd:e6:11: 29:57:6d:68:4c:fd:87:eb:a5:7d:b7:c8:ab:52:81: ec:8f:bc:9c:a1:39:91:6d:4c:88:ec:aa:23:79:1d: cc:c9:75:88:c5:2e:1b:7a:3b:fa:04:59:83:61:bd: 61:01:28:68:63:62:de:05:e5:c8:fb:38:fd:1a:6a: bb:19:dc:61:66:e4:7b:57:4a:cd:fb:1c:62:b6:6a: e6:4d:2e:64:e7:97:64:99:70:77:87:32:d8:74:81: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:33:E0:48:CE:62:DE:73:35:B6:AD:C4:5C:58:04:C1:1D:04:83:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:29:10:6b:6c:45:23:7f:0f:83:af:04:7f:46:a5:db:b1:49: 31:43:09:74:13:3c:be:1a:47:c3:df:55:72:04:d5:c5:87:a4: 80:66:fb:29:b7:b3:98:41:9c:86:f3:23:5a:de:e0:8c:1c:1a: c8:62:a4:d6:d1:07:5d:2a:fd:4c:f0:2d:84:33:72:49:a8:75: be:2c:18:42:fc:d2:5e:e2:7c:b0:87:b0:db:56:e1:e8:15:e0: 5a:99:25:3d:3c:ea:bc:47:50:24:2a:7c:31:65:7f:bf:94:06: e2:85:32:7b:72:ad:86:20:2a:53:32:ca:02:7f:e1:58:cb:e7: 4c:55:91:91:35:05:e9:f8:cb:2b:78:8c:3d:63:ab:4b:a8:0a: 67:34:92:27:79:90:db:3f:97:b2:14:4e:6c:ed:7d:43:18:89: b4:55:4f:08:7b:1b:0b:b5:66:1d:63:3d:b5:ad:47:e3:0f:ed: ba:e8:96:c2:67:81:9d:6e:3a:42:dd:97:b7:f1:88:b9:9e:a2: 8d:2b:f7:0f:35:d4:02:44:2b:78:09:e0:cb:53:37:0f:c2:44: 15:fb:d7:e8:4b:a7:c2:99:40:a2:b2:7c:61:99:89:2c:73:71: aa:3e:60:1a:24:f1:25:e6:0e:d5:c3:4f:c2:84:b3:80:8b:8a: 86:8c:d8:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+TWsxWSleAxcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmNiMWVmYjctZDZhOC00OGY3LWFmZmEtOWVmOWJiYzRjYjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15OoYcnYNUSyQeeZo3wZFCgWhAcNICWuVpuW Qf+DUiiGHxq1L1GyIfNDro1Qu4XZGglOmLiXxaKIjBt5yeMkJyWSObvWdSkIyFek wcFdI7AxE28h+XdpepBX7vM0YexVdLNfFSkYjX/6+ftaMSHL4rFtIEnHGFBvRLqu D+/n0h/bkN8i0mO6Lz2zPwTjIn2f7injCEb4uzVoildM3RAvidS95hEpV21oTP2H 66V9t8irUoHsj7ycoTmRbUyI7KojeR3MyXWIxS4bejv6BFmDYb1hAShoY2LeBeXI +zj9Gmq7GdxhZuR7V0rN+xxitmrmTS5k55dkmXB3hzLYdIGeXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA4z4EjOYt5zNbatxFxYBMEdBIOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhM2FhNGQtMjVkMS0z ZDcxLWE1OTYtNjA4YWZmMGEwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3KRBrbEUjfw+DrwR/RqXbsUkxQwl0Ezy+GkfD31VyBNXFh6SAZvsp t7OYQZyG8yNa3uCMHBrIYqTW0QddKv1M8C2EM3JJqHW+LBhC/NJe4nywh7DbVuHo FeBamSU9POq8R1AkKnwxZX+/lAbihTJ7cq2GICpTMsoCf+FYy+dMVZGRNQXp+Msr eIw9Y6tLqApnNJIneZDbP5eyFE5s7X1DGIm0VU8IexsLtWYdYz21rUfjD+266JbC Z4GdbjpC3Ze38Yi5nqKNK/cPNdQCRCt4CeDLUzcPwkQV+9foS6fCmUCisnxhmYks c3GqPmAaJPEl5g7Vw0/ChLOAi4qGjNi/ -----END CERTIFICATE-----Generated at Wed Jul 29 06:30:13 2026 by rpki-client