$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa File: cd506063-bc38-3ca7-adcf-ef0907ec2013.roa (raw, json) Hash identifier: LFLUonuhg3bwFITdNHpd1fP/xjlv1lJ3HsyGSSveaRk= Subject key identifier: 06:98:5A:CD:7C:B6:FC:9D:36:F5:FD:CE:85:33:48:B0:1E:DE:1F:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5EE8ACA62FDFA3B516860 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396586 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ee:8a:ca:62:fd:fa:3b:51:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=0b837c6b-61b1-4d20-ab2b-3dfc42eac0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:60:61:20:f9:05:27:aa:9e:4b:6b:db:14:81: 8b:39:d2:32:e8:14:d1:2f:52:28:a5:a4:5b:86:0f: fc:1b:0e:7b:4e:57:ca:43:8b:9c:33:dc:0a:fc:51: ee:bb:73:58:61:b6:eb:8b:9d:10:e5:b4:3a:a6:1e: 65:a3:5f:f1:06:75:90:72:c3:8e:98:89:f1:ac:3f: dd:1e:b7:fb:24:da:60:fe:81:c0:2b:72:e5:3f:40: 68:fa:0b:d1:06:d6:26:f4:b0:32:b7:b2:1d:ad:b7: 89:e8:5c:1c:02:04:7b:ba:06:e6:12:5f:7e:15:6e: 02:13:5c:f7:63:59:b6:d2:b7:2c:0e:66:ad:78:58: 43:e1:48:53:17:2b:76:96:9c:5f:55:3b:d2:07:01: f0:f6:b4:56:83:bd:15:df:2d:45:06:93:31:52:31: 65:fa:2f:1e:a8:59:8c:1d:74:b0:4b:41:b9:94:04: 34:7f:82:fa:bc:b9:ee:52:19:70:5a:38:51:62:9c: 06:ba:f2:c0:0d:d4:22:ee:fa:ef:d1:4f:0c:1e:36: 31:37:a7:b7:98:f1:35:9a:eb:84:a9:fd:32:3a:72: d4:49:13:62:03:c4:87:d1:0c:06:45:c1:6c:72:51: 6c:27:34:cb:b1:ed:10:ba:a4:8e:f1:cd:c6:2f:fe: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:5A:CD:7C:B6:FC:9D:36:F5:FD:CE:85:33:48:B0:1E:DE:1F:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e9:8f:e9:49:b5:83:87:0b:b2:6f:49:09:00:a5:4d:d6:12: 29:04:92:c1:d8:6d:c3:7b:45:41:7e:2f:89:0b:50:c2:a6:1d: 67:b1:c1:8c:10:2f:51:df:bd:ad:4d:dc:c8:2f:c4:c3:9a:c5: 74:7c:a7:6f:b8:b8:9e:01:0a:99:8a:29:0a:73:2f:db:76:02: 7f:e0:ad:61:a6:f8:2f:6b:fd:2c:80:ad:2d:fe:f6:fd:c4:2b: 16:4b:53:d8:74:02:e2:3f:fd:a5:1a:ec:b2:45:c2:4e:be:c7: ba:4b:66:c4:3a:59:be:54:fb:24:f7:67:a5:5c:9f:3d:a4:c7: 7f:23:5e:06:9e:bf:1c:04:7f:c4:3a:80:2a:af:47:13:d5:b5: 66:a9:31:04:b2:e8:26:5a:3b:28:dc:74:79:71:5a:9a:86:46: 73:12:67:2e:1c:e3:db:65:28:36:14:45:69:3f:8d:b7:1d:98: a8:de:0b:33:e2:c4:59:49:68:dd:5e:25:74:58:27:40:b6:82: 1a:d3:3b:04:8e:36:e1:6e:65:d2:dc:dc:78:bf:e8:32:ff:74: 52:51:c7:ce:09:8a:ab:8f:a8:af:58:ef:be:6d:b4:95:8e:a2: 56:9a:8d:6c:e6:b7:18:b3:7e:42:fc:0e:da:67:cb:c3:a4:52: 9d:67:ef:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3ite6KymL9+jtRaGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MGI4MzdjNmItNjFiMS00ZDIwLWFiMmItM2RmYzQyZWFjMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGBhIPkFJ6qeS2vbFIGLOdIy6BTRL1IopaRb hg/8Gw57TlfKQ4ucM9wK/FHuu3NYYbbri50Q5bQ6ph5lo1/xBnWQcsOOmInxrD/d Hrf7JNpg/oHAK3LlP0Bo+gvRBtYm9LAyt7IdrbeJ6FwcAgR7ugbmEl9+FW4CE1z3 Y1m20rcsDmateFhD4UhTFyt2lpxfVTvSBwHw9rRWg70V3y1FBpMxUjFl+i8eqFmM HXSwS0G5lAQ0f4L6vLnuUhlwWjhRYpwGuvLADdQi7vrv0U8MHjYxN6e3mPE1muuE qf0yOnLUSRNiA8SH0QwGRcFsclFsJzTLse0QuqSO8c3GL/4w4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAaYWs18tvydNvX9zoUzSLAe3h9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1MDYwNjMtYmMzOC0z Y2E3LWFkY2YtZWYwOTA3ZWMyMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP6Y/pSbWDhwuyb0kJAKVN1hIpBJLB2G3De0VBfi+JC1DCph1nscGM EC9R372tTdzIL8TDmsV0fKdvuLieAQqZiikKcy/bdgJ/4K1hpvgva/0sgK0t/vb9 xCsWS1PYdALiP/2lGuyyRcJOvse6S2bEOlm+VPsk92elXJ89pMd/I14Gnr8cBH/E OoAqr0cT1bVmqTEEsugmWjso3HR5cVqahkZzEmcuHOPbZSg2FEVpP423HZio3gsz 4sRZSWjdXiV0WCdAtoIa0zsEjjbhbmXS3Nx4v+gy/3RSUcfOCYqrj6ivWO++bbSV jqJWmo1s5rcYs35C/A7aZ8vDpFKdZ+87 -----END CERTIFICATE-----Generated at Sat Jun 13 14:25:38 2026 by rpki-client