$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa File: cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa (raw, json) Hash identifier: kN1lVXNmiQYNeB5NRCUyhLEN/SIjyE1cOu+aKqYVH2A= Subject key identifier: 76:53:45:81:EF:E8:66:7D:CC:A4:7B:C7:6F:B0:0C:0C:55:D2:15:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79873156F13D62A34CE9D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396608 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:73:15:6f:13:d6:2a:34:ce:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=77665ee2-c0c0-40b5-8f48-656d7b6959f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:73:0e:dd:3f:ff:10:de:db:3f:20:20:a3: d4:84:94:bf:88:ed:88:1e:17:a9:0a:e1:12:e7:c8: 7a:8e:f9:4a:c4:da:f3:06:28:87:f6:e7:42:15:45: 73:27:a5:3f:07:91:c6:85:bb:b2:59:84:f1:b7:35: 3a:55:01:96:2a:dc:6c:99:9d:b9:d9:a8:f3:a5:fe: 95:17:41:1e:5e:c6:28:d0:57:6e:27:04:8d:c3:c8: 73:87:00:d6:92:c6:84:04:d3:36:bd:fe:38:63:b8: db:d0:43:7d:e7:cd:9b:29:0c:b3:74:c6:4f:24:f2: 06:e4:72:3e:65:3d:a5:ee:dd:c8:52:d0:6e:32:21: d9:fe:9f:dc:ac:c5:81:0e:0f:fe:4c:87:92:b8:74: 1b:2a:38:d5:b8:a6:08:49:e3:b0:40:3c:46:e3:59: 52:c3:16:e7:7b:d2:95:48:ac:81:31:39:16:34:db: e8:5f:f5:84:01:be:65:80:b5:03:24:26:36:cf:dd: e8:fe:ec:87:10:49:91:cf:b5:f2:b6:f9:7e:17:51: b8:3e:b1:98:4d:0c:90:49:ad:70:58:3c:5d:3c:a8: d1:e9:fc:ee:dc:00:ae:c6:e9:8c:4a:79:81:75:fd: 10:29:6d:c4:d6:ed:f5:c3:0a:f8:51:4d:8d:5f:7f: bd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:53:45:81:EF:E8:66:7D:CC:A4:7B:C7:6F:B0:0C:0C:55:D2:15:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:83:0c:8a:6c:5c:7a:e1:42:f6:fa:57:b4:31:c0:00:90:d4: de:10:88:e1:1b:4f:0e:22:d6:e6:e8:0f:36:cf:30:e9:18:0f: 8b:d8:65:95:50:5d:f7:5b:94:3a:c2:8d:73:b6:d4:57:5e:5f: 93:aa:aa:b8:04:bf:f4:28:49:ec:ae:fa:2e:d8:05:96:3f:eb: b9:0f:fe:f9:93:03:05:7e:60:b9:3f:e7:40:a8:9c:e5:20:6d: f2:cf:71:62:c0:a6:16:89:cd:ec:53:e1:aa:23:80:94:74:12: 8a:83:c9:ec:dd:4e:43:ed:37:1f:1e:20:c8:f1:1f:94:fb:b5: 15:59:72:39:d1:45:a2:b9:49:7c:94:ca:73:05:e3:d8:5d:97: 8d:33:1e:fe:39:39:4e:00:64:d4:4a:c8:62:50:24:e7:7e:0b: a9:fb:4a:cd:a6:b7:28:b8:27:dc:37:55:57:a6:3d:38:47:02: e5:4b:6d:68:f0:c0:59:7c:7d:a5:cf:ac:bb:54:20:54:c2:06: 3e:f7:3f:85:ef:9d:a0:63:d1:33:50:54:60:eb:62:80:77:fe: b8:44:92:89:14:ca:f8:f9:06:6d:41:09:9e:70:44:bb:19:37: 35:a5:51:47:57:72:89:34:40:d9:6e:96:34:da:f7:a9:f7:59: c9:c3:7e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHMVbxPWKjTOnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Nzc2NjVlZTItYzBjMC00MGI1LThmNDgtNjU2ZDdiNjk1OWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC5zDt0//xDe2z8gIKPUhJS/iO2IHhepCuES 58h6jvlKxNrzBiiH9udCFUVzJ6U/B5HGhbuyWYTxtzU6VQGWKtxsmZ252ajzpf6V F0EeXsYo0FduJwSNw8hzhwDWksaEBNM2vf44Y7jb0EN9582bKQyzdMZPJPIG5HI+ ZT2l7t3IUtBuMiHZ/p/crMWBDg/+TIeSuHQbKjjVuKYISeOwQDxG41lSwxbne9KV SKyBMTkWNNvoX/WEAb5lgLUDJCY2z93o/uyHEEmRz7Xytvl+F1G4PrGYTQyQSa1w WDxdPKjR6fzu3ACuxumMSnmBdf0QKW3E1u31wwr4UU2NX3+9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZTRYHv6GZ9zKR7x2+wDAxV0hX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4YTkwNGMtNWJmYy0z ZmFmLWJjMTQtZjg4OTUyZmM3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCDDIpsXHrhQvb6V7QxwACQ1N4QiOEbTw4i1uboDzbPMOkYD4vYZZVQ XfdblDrCjXO21FdeX5OqqrgEv/QoSeyu+i7YBZY/67kP/vmTAwV+YLk/50ConOUg bfLPcWLAphaJzexT4aojgJR0EoqDyezdTkPtNx8eIMjxH5T7tRVZcjnRRaK5SXyU ynMF49hdl40zHv45OU4AZNRKyGJQJOd+C6n7Ss2mtyi4J9w3VVemPThHAuVLbWjw wFl8faXPrLtUIFTCBj73P4XvnaBj0TNQVGDrYoB3/rhEkokUyvj5Bm1BCZ5wRLsZ NzWlUUdXcok0QNluljTa96n3WcnDfpc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:39 2026 by rpki-client