$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa File: cf57e6de-89da-30d1-aea8-b79080996615.roa (raw, json) Hash identifier: 4CsfLsEsQN7ya+zmV3F+oE4FdkoHnbbhtKkTl7zfzyw= Subject key identifier: 0A:F7:12:2E:44:4A:5D:8D:F6:4D:9A:59:1D:26:F3:27:B0:30:7A:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5EEBB0FFE222A2A7D4880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396610 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ee:bb:0f:fe:22:2a:2a:7d:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=21da66e0-db02-4343-8c62-f03f848c6c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:70:b6:66:4f:85:17:dd:f3:4c:f9:34:27: 83:e7:a5:de:66:9d:c0:b8:8d:fc:c0:eb:38:ef:ae: 47:bd:2d:44:3b:6c:54:31:3f:6e:7d:7b:ae:fa:16: 15:2a:7f:51:f8:c1:05:f2:d8:b8:54:42:4c:e6:74: e8:42:17:55:2e:d7:65:e0:03:07:80:95:4b:c5:ce: 0a:64:68:13:54:98:93:01:41:1b:48:ad:99:4c:c6: cb:31:6b:5e:ba:bd:fd:5c:0d:e9:0a:ac:78:32:6a: f5:f3:04:3c:90:73:6e:19:bd:60:ca:fb:db:23:34: ff:ac:b8:cb:88:19:31:46:18:40:92:16:25:7c:37: 75:7e:28:48:7f:78:35:4c:c1:2e:38:43:bd:b4:79: 0b:f1:8d:ea:c6:5b:84:99:49:ba:b0:c7:69:24:5e: df:4f:ff:cf:75:20:72:b0:63:84:79:d4:ae:ec:b2: ee:8a:6e:66:35:07:d2:4c:0c:cf:83:1b:ac:4d:bd: 7f:f5:f1:9a:77:f1:aa:db:3e:47:9c:e5:1b:9b:25: 31:5c:0d:d1:14:36:6b:88:8e:3a:8d:eb:2a:53:b5: 84:d9:7a:4a:f1:56:3d:dc:de:9a:25:3a:05:6f:94: f6:9f:11:63:0d:ec:02:40:69:de:aa:85:f2:e8:ab: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:12:2E:44:4A:5D:8D:F6:4D:9A:59:1D:26:F3:27:B0:30:7A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf57e6de-89da-30d1-aea8-b79080996615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:dc:19:60:bb:9e:bf:3e:4e:ae:7f:be:0e:24:80:54:07:63: 46:ed:3c:99:0c:2c:b9:af:c0:49:59:b3:4c:d7:2f:a9:88:06: d4:8d:31:56:26:06:3d:f0:9a:30:f9:19:1d:39:a2:6d:75:a3: ed:2c:ae:f5:43:03:f3:73:a8:f3:0f:96:80:65:0b:d5:c0:01: 2d:d2:87:2a:b1:38:43:6c:88:69:4a:74:44:12:34:a9:2c:9b: 41:52:bd:0f:aa:ba:1b:73:b8:6f:30:eb:79:66:10:cc:82:bb: e1:e1:b7:3b:2a:ca:a1:53:54:ef:32:4c:ce:a9:66:a5:fa:71: 78:1c:8e:41:e0:e4:67:37:63:39:01:f7:d9:7b:a1:0a:c2:2d: 12:ec:b3:1a:93:42:cd:de:18:1c:41:f4:ce:8a:0c:0a:8d:bc: f9:eb:c5:d3:95:4f:8f:5e:95:86:f5:3b:59:f7:c0:af:dc:ec: 7d:f1:50:a3:72:34:7d:9e:2e:b7:ad:e8:a8:7b:f3:00:16:de: 4f:07:22:3b:93:54:1f:95:c7:71:6c:4a:88:76:c1:a3:1e:42: 83:89:00:ac:89:c0:f2:7c:7a:90:5c:aa:23:d3:b5:f5:b4:c3: 9b:e6:a7:ef:35:15:14:eb:ae:84:2f:a4:86:3d:d3:94:4a:5e: 3d:a1:00:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3ite67D/4iKip9SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MjFkYTY2ZTAtZGIwMi00MzQzLThjNjItZjAzZjg0OGM2YzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuhwtmZPhRfd80z5NCeD56XeZp3AuI38wOs4 765HvS1EO2xUMT9ufXuu+hYVKn9R+MEF8ti4VEJM5nToQhdVLtdl4AMHgJVLxc4K ZGgTVJiTAUEbSK2ZTMbLMWteur39XA3pCqx4Mmr18wQ8kHNuGb1gyvvbIzT/rLjL iBkxRhhAkhYlfDd1fihIf3g1TMEuOEO9tHkL8Y3qxluEmUm6sMdpJF7fT//PdSBy sGOEedSu7LLuim5mNQfSTAzPgxusTb1/9fGad/Gq2z5HnOUbmyUxXA3RFDZriI46 jesqU7WE2XpK8VY93N6aJToFb5T2nxFjDewCQGneqoXy6KuVQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAr3Ei5ESl2N9k2aWR0m8yewMHq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y1N2U2ZGUtODlkYS0z MGQxLWFlYTgtYjc5MDgwOTk2NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBk3Blgu56/Pk6uf74OJIBUB2NG7TyZDCy5r8BJWbNM1y+piAbUjTFW JgY98Jow+RkdOaJtdaPtLK71QwPzc6jzD5aAZQvVwAEt0ocqsThDbIhpSnREEjSp LJtBUr0Pqrobc7hvMOt5ZhDMgrvh4bc7KsqhU1TvMkzOqWal+nF4HI5B4ORnN2M5 AffZe6EKwi0S7LMak0LN3hgcQfTOigwKjbz568XTlU+PXpWG9TtZ98Cv3Ox98VCj cjR9ni63reioe/MAFt5PByI7k1QflcdxbEqIdsGjHkKDiQCsicDyfHqQXKoj07X1 tMOb5qfvNRUU666EL6SGPdOUSl49oQCH -----END CERTIFICATE-----Generated at Sat Jun 13 14:29:31 2026 by rpki-client