$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa File: cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa (raw, json) Hash identifier: zHzJYSOm4OUnGhNAk5JhNgzuKhtfuQ8UyYuQd0505XM= Subject key identifier: 9A:F1:6B:9C:67:FA:13:43:3C:BC:00:9E:67:FB:75:66:09:9A:A9:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FECD267BC69523A9BCA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396604 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:ec:d2:67:bc:69:52:3a:9b:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=14f11b6a-49d2-4e3f-beba-150f0f683141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:be:99:7c:0e:45:26:ab:f0:d5:25:52:97:e1: 90:e5:13:da:27:93:7f:4d:65:52:db:ab:02:a4:c4: 93:81:01:4e:ac:91:27:2a:e5:9c:9a:78:72:78:e8: e3:07:72:fb:bf:f7:36:87:dd:3c:a1:8f:fa:9c:c7: 27:c4:62:ed:8d:13:3b:0b:14:16:a4:be:d5:c9:5d: 4a:9a:85:97:7e:e2:29:e1:85:a4:b8:08:c2:06:59: a3:8f:f3:2d:cf:6c:6d:be:2a:92:4c:7c:d2:a4:ec: 1e:e5:eb:fb:ca:f2:da:70:c7:68:8e:37:84:fd:f8: 2c:0c:9e:02:2d:88:d3:60:de:d3:6a:67:53:f3:f2: 90:22:bf:12:a9:a5:3c:f1:25:24:b5:1e:ab:26:72: 6b:b8:e8:7b:b8:59:90:0b:ad:55:1b:a9:d7:87:02: 8c:43:76:1b:ba:bf:67:b3:24:4a:15:2e:1b:8e:3e: 82:b6:24:73:6e:1a:eb:1c:39:16:d3:f4:a0:a2:7a: 4c:52:26:4d:92:5b:43:7f:1e:24:a3:b2:a8:58:95: 6a:dd:e5:9e:97:06:1d:35:3d:07:6f:89:db:11:bf: 59:43:39:af:76:59:4e:84:26:d7:61:23:09:e6:13: e8:13:e5:48:13:3c:4d:e2:4a:80:b2:00:f3:78:73: f2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:6B:9C:67:FA:13:43:3C:BC:00:9E:67:FB:75:66:09:9A:A9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf656eb9-5d19-33b2-9221-5afaf8762a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:75:f9:aa:fd:ce:25:9d:c7:77:0b:13:55:52:e9:f2:b7:b7: ce:53:4b:8f:81:cb:5e:02:f2:9a:d2:84:1b:26:21:64:3b:6c: 55:38:b9:34:ea:54:f1:fa:41:95:53:80:ad:9c:d6:ad:53:a8: 7a:c6:3c:d6:65:1b:2f:29:bd:26:6b:61:4a:19:70:22:58:e1: a5:af:ec:bf:57:da:59:b9:e5:ca:63:2e:ee:ad:28:11:b4:33: f6:e0:ff:23:e7:9d:35:65:2f:da:5b:f2:b8:57:5a:c9:4f:67: dc:ec:98:30:0f:d5:04:89:c8:03:9e:7f:e6:91:2d:8c:4c:d8: ce:e3:79:b1:a8:f9:c1:47:31:00:b3:93:ac:06:26:76:69:e9: e1:5b:bd:38:ba:f1:95:7e:d1:52:a9:ca:c6:64:6a:23:f1:4c: fc:bf:a9:87:65:a9:36:ae:3c:24:e3:c6:87:00:b4:ff:ab:7a: 02:e4:2b:b0:6d:fb:79:8b:91:2d:52:78:ed:ab:d4:96:53:96: 4c:54:18:7b:a3:48:ef:fa:2b:05:e8:a3:0f:28:54:e8:e3:2b: 2f:a9:6f:91:c8:38:59:fc:3d:52:29:d2:9d:52:1b:af:38:13: cc:3e:98:89:9d:70:39:12:a7:6c:09:82:a4:76:70:29:59:57: 26:30:94:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+zSZ7xpUjqbyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTRmMTFiNmEtNDlkMi00ZTNmLWJlYmEtMTUwZjBmNjgzMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr6ZfA5FJqvw1SVSl+GQ5RPaJ5N/TWVS26sC pMSTgQFOrJEnKuWcmnhyeOjjB3L7v/c2h908oY/6nMcnxGLtjRM7CxQWpL7VyV1K moWXfuIp4YWkuAjCBlmjj/Mtz2xtviqSTHzSpOwe5ev7yvLacMdojjeE/fgsDJ4C LYjTYN7TamdT8/KQIr8SqaU88SUktR6rJnJruOh7uFmQC61VG6nXhwKMQ3Ybur9n syRKFS4bjj6CtiRzbhrrHDkW0/SgonpMUiZNkltDfx4ko7KoWJVq3eWelwYdNT0H b4nbEb9ZQzmvdllOhCbXYSMJ5hPoE+VIEzxN4kqAsgDzeHPyBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJrxa5xn+hNDPLwAnmf7dWYJmqn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Y2NTZlYjktNWQxOS0z M2IyLTkyMjEtNWFmYWY4NzYyYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUdfmq/c4lncd3CxNVUunyt7fOU0uPgcteAvKa0oQbJiFkO2xVOLk0 6lTx+kGVU4CtnNatU6h6xjzWZRsvKb0ma2FKGXAiWOGlr+y/V9pZueXKYy7urSgR tDP24P8j5501ZS/aW/K4V1rJT2fc7JgwD9UEicgDnn/mkS2MTNjO43mxqPnBRzEA s5OsBiZ2aenhW704uvGVftFSqcrGZGoj8Uz8v6mHZak2rjwk48aHALT/q3oC5Cuw bft5i5EtUnjtq9SWU5ZMVBh7o0jv+isF6KMPKFTo4ysvqW+RyDhZ/D1SKdKdUhuv OBPMPpiJnXA5EqdsCYKkdnApWVcmMJRm -----END CERTIFICATE-----Generated at Wed Jul 29 04:30:35 2026 by rpki-client