$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa File: d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa (raw, json) Hash identifier: 7ZlHl9pUjonuqCo0KJHsTwG4f8icN9rwee0C+MB0EDU= Subject key identifier: 79:C8:99:90:A6:F9:4D:9B:F6:5F:BD:98:96:F2:FD:FE:86:1F:A1:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7903F94425D0586FEF9F6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396566 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:3f:94:42:5d:05:86:fe:f9:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=95b417c4-1d8a-46b9-a072-0877f6965e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:a8:4a:fb:2b:75:1c:6d:b2:4e:44:0d:27: 9b:01:b0:8e:d5:cb:b5:a8:ff:6f:95:ac:cd:6e:87: 9c:07:86:27:7f:ea:ff:4d:67:e9:e7:72:3e:08:f5: af:f2:14:07:28:60:41:4f:d8:13:93:86:24:be:a2: d9:a0:54:cb:16:ba:7a:d6:81:6a:dd:73:35:3d:84: ab:b0:01:c0:bc:56:c2:78:0c:54:c4:d8:a8:58:50: 05:94:fa:9b:fa:bb:72:c4:8b:b6:fe:9e:54:db:2a: cc:f2:f6:95:12:0d:c1:0e:79:52:e3:f3:5a:75:bf: 1c:20:4c:ab:94:dd:a5:d7:94:40:1d:60:a8:2e:c2: 99:68:99:53:8c:ab:14:30:40:d0:11:93:f8:07:bf: db:76:a9:9b:63:6c:19:11:61:6a:36:ca:fe:e6:75: 76:7d:a9:7d:f4:6f:65:93:f9:95:0e:16:d0:c6:4b: 16:82:a3:ed:e5:d8:6c:72:f1:fa:ef:9e:da:6f:8d: 7e:79:dc:48:44:c5:74:35:da:6b:07:c6:1c:d4:73: 5c:ba:60:85:5e:54:45:33:eb:df:fd:10:ae:e2:22: a9:5f:93:7b:1a:e3:8a:71:af:2f:db:b8:24:d8:4f: cf:e0:62:7d:a1:e5:0e:2f:85:f1:3e:38:a4:13:1d: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C8:99:90:A6:F9:4D:9B:F6:5F:BD:98:96:F2:FD:FE:86:1F:A1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d423e5ad-5646-3c93-b96a-e91d49c0a2dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d9:d0:5a:0a:0f:18:b4:51:e4:aa:da:16:72:46:a2:70:46: f8:3f:f3:bd:dc:16:82:e5:f4:2f:5d:0c:36:0d:fc:20:19:d7: ca:05:70:c5:50:27:22:0a:e0:39:a0:00:e7:4c:5c:39:a7:0d: 16:29:52:60:0c:6e:7f:c4:3c:fb:0c:56:75:a9:7e:73:29:ef: a2:67:bd:24:50:8d:d0:cb:24:5a:eb:74:dc:56:5b:3f:d0:09: e2:a7:ef:95:1c:72:d8:c9:4f:72:2b:ac:27:e6:ea:40:81:0d: f9:9b:56:cf:87:b7:86:e3:45:79:3f:c1:83:ad:12:f7:ef:3d: b8:da:29:d3:6e:a0:55:eb:2c:76:84:21:9d:9a:66:83:77:c6: 38:18:9f:9d:dc:83:13:81:e8:22:e2:08:57:ad:e7:8d:a2:d1: c5:6a:aa:71:ed:b9:66:e5:b4:2c:ef:22:f3:61:91:c0:ff:16: 98:60:9a:12:24:f3:6f:96:e6:43:4e:0c:51:22:bd:02:42:42: c6:85:e0:46:bb:d7:cb:e0:8e:f2:32:3d:38:9f:94:13:36:67: b9:88:60:27:02:35:c5:77:24:ae:9b:ce:5d:79:4f:3e:47:9e: 96:22:f6:4d:74:38:9d:3c:59:4c:f9:97:ec:ee:cd:e6:d4:a1: 22:03:24:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkD+UQl0Fhv759sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTViNDE3YzQtMWQ4YS00NmI5LWEwNzItMDg3N2Y2OTY1ZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLOoSvsrdRxtsk5EDSebAbCO1cu1qP9vlazN boecB4Ynf+r/TWfp53I+CPWv8hQHKGBBT9gTk4YkvqLZoFTLFrp61oFq3XM1PYSr sAHAvFbCeAxUxNioWFAFlPqb+rtyxIu2/p5U2yrM8vaVEg3BDnlS4/Nadb8cIEyr lN2l15RAHWCoLsKZaJlTjKsUMEDQEZP4B7/bdqmbY2wZEWFqNsr+5nV2fal99G9l k/mVDhbQxksWgqPt5dhscvH6757ab41+edxIRMV0NdprB8Yc1HNcumCFXlRFM+vf /RCu4iKpX5N7GuOKca8v27gk2E/P4GJ9oeUOL4XxPjikEx2fbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHnImZCm+U2b9l+9mJby/f6GH6H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDQyM2U1YWQtNTY0Ni0z YzkzLWI5NmEtZTkxZDQ5YzBhMmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBG2dBaCg8YtFHkqtoWckaicEb4P/O93BaC5fQvXQw2DfwgGdfKBXDF UCciCuA5oADnTFw5pw0WKVJgDG5/xDz7DFZ1qX5zKe+iZ70kUI3QyyRa63TcVls/ 0Anip++VHHLYyU9yK6wn5upAgQ35m1bPh7eG40V5P8GDrRL37z242inTbqBV6yx2 hCGdmmaDd8Y4GJ+d3IMTgegi4ghXreeNotHFaqpx7blm5bQs7yLzYZHA/xaYYJoS JPNvluZDTgxRIr0CQkLGheBGu9fL4I7yMj04n5QTNme5iGAnAjXFdySum85deU8+ R56WIvZNdDidPFlM+Zfs7s3m1KEiAyQR -----END CERTIFICATE-----Generated at Wed Jul 29 04:26:51 2026 by rpki-client