$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa File: bb62787b-90c5-3a32-864c-cba2ee31983a.roa (raw, json) Hash identifier: nmxpVmnWjRu/+mBy5rid6l+M6Qm0TLXg/ljr3TfwrZw= Subject key identifier: F5:E9:06:F3:B9:EE:BC:D8:92:8D:7A:4A:FB:22:6D:01:81:2F:D4:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5E291C985BC20880B2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 397200 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:e2:91:c9:85:bc:20:88:0b:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=cbff9487-f4f9-481f-9412-70d9e76b4224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:38:45:99:bd:aa:72:a5:83:32:c1:18:ce: 34:cb:9c:75:43:21:cc:70:4c:38:75:9a:43:59:5d: 9c:7c:12:53:af:7a:42:f4:02:ca:a6:56:2f:0a:06: f9:9d:df:52:23:39:dd:df:a8:e3:6c:6d:db:b1:c1: 52:d7:e3:3a:ca:16:32:76:df:b0:12:56:2b:29:12: 00:7d:b0:03:f8:56:9a:e6:40:b9:da:6d:0c:b3:8e: e7:29:e5:7d:6d:d4:5c:59:85:3b:a8:bc:d1:d2:9d: 64:4f:8f:9c:cd:a8:14:eb:e5:c7:a2:9f:74:35:c1: a6:cf:b8:a2:78:22:e6:5e:b8:4a:5d:6f:1b:5b:4d: 0d:ce:66:04:c8:d2:f3:5f:e9:18:1d:0c:55:ed:b6: 00:f6:0e:0a:d6:2b:ef:b4:1d:e2:4f:3c:15:e4:41: e7:17:50:52:be:6c:b7:af:54:58:90:f0:f6:45:9f: 7d:89:00:8d:53:c3:4b:40:e7:f8:01:58:ab:4c:d1: 67:d8:87:2f:de:ee:f5:11:78:ab:f8:b5:7a:0e:47: e9:3e:d0:43:32:a4:ad:06:2b:fd:68:14:d1:09:c7: 75:52:a3:2e:a5:f7:59:22:7c:7a:27:11:72:7f:e1: 81:e3:f6:36:90:7f:7d:1b:a0:89:71:fb:d8:f3:b2: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E9:06:F3:B9:EE:BC:D8:92:8D:7A:4A:FB:22:6D:01:81:2F:D4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb62787b-90c5-3a32-864c-cba2ee31983a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0f:3d:cd:3e:aa:aa:e0:29:62:a7:ce:d8:ea:0c:fe:79:41: 14:0f:ca:5f:84:73:f9:5c:d3:e8:de:85:f9:f8:a8:8c:be:c7: 5b:93:8d:b5:64:97:18:61:60:6d:c8:96:4a:e2:21:70:d8:09: 34:db:78:47:4c:88:24:7e:98:e9:a6:ef:0e:b3:d1:fa:f0:16: 05:a7:a9:c3:73:5d:3e:d9:54:55:33:3f:63:f9:b4:06:96:9e: 4f:bb:da:77:e1:dc:4a:1c:35:aa:31:93:76:58:e5:60:89:ac: 90:38:f7:2c:83:3f:44:a5:ac:8e:35:5a:d1:61:e7:51:5e:6d: 77:40:56:c1:a1:ab:45:8e:f5:8b:cc:c4:df:87:75:d9:4b:38: 51:d3:fa:b0:80:f9:88:2f:b8:49:ba:fe:43:ba:2a:e7:e3:3b: e1:a4:31:8b:9a:23:89:06:37:90:50:56:77:b4:24:05:8d:02: 4d:c4:1b:ed:47:9a:a3:66:9c:ad:c5:f1:10:e9:a2:43:3e:e3: 19:f4:b3:ad:a4:b6:68:3d:ec:bc:eb:c0:92:c7:23:95:58:89: 83:37:cf:6e:bc:6c:b6:3b:dd:ea:70:7b:ba:f7:76:0b:ec:11: f1:80:d4:59:b2:ef:61:90:0a:99:f4:16:6e:03:db:e8:0b:f6: 80:98:23:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3iteKRyYW8IIgLLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk Y2JmZjk0ODctZjRmOS00ODFmLTk0MTItNzBkOWU3NmI0MjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbI4RZm9qnKlgzLBGM40y5x1QyHMcEw4dZpD WV2cfBJTr3pC9ALKplYvCgb5nd9SIznd36jjbG3bscFS1+M6yhYydt+wElYrKRIA fbAD+Faa5kC52m0Ms47nKeV9bdRcWYU7qLzR0p1kT4+czagU6+XHop90NcGmz7ii eCLmXrhKXW8bW00NzmYEyNLzX+kYHQxV7bYA9g4K1ivvtB3iTzwV5EHnF1BSvmy3 r1RYkPD2RZ99iQCNU8NLQOf4AVirTNFn2Icv3u71EXir+LV6DkfpPtBDMqStBiv9 aBTRCcd1UqMupfdZInx6JxFyf+GB4/Y2kH99G6CJcfvY87K1dwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPXpBvO57rzYko16SvsibQGBL9RbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI2Mjc4N2ItOTBjNS0z YTMyLTg2NGMtY2JhMmVlMzE5ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBDz3NPqqq4Clip87Y6gz+eUEUD8pfhHP5XNPo3oX5+KiMvsdbk421 ZJcYYWBtyJZK4iFw2Ak023hHTIgkfpjppu8Os9H68BYFp6nDc10+2VRVMz9j+bQG lp5Pu9p34dxKHDWqMZN2WOVgiayQOPcsgz9EpayONVrRYedRXm13QFbBoatFjvWL zMTfh3XZSzhR0/qwgPmIL7hJuv5Duirn4zvhpDGLmiOJBjeQUFZ3tCQFjQJNxBvt R5qjZpytxfEQ6aJDPuMZ9LOtpLZoPey868CSxyOVWImDN89uvGy2O93qcHu693YL 7BHxgNRZsu9hkAqZ9BZuA9voC/aAmCOn -----END CERTIFICATE-----Generated at Sat Jun 13 14:31:47 2026 by rpki-client