$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa File: d67b0840-5b69-323a-8043-56445d6c580b.roa (raw, json) Hash identifier: HtgIPID9fW6g57kc4xEyVvzSIYUJoQJE9mCyuKTSnF8= Subject key identifier: 21:00:61:FB:06:7A:57:20:A2:8D:67:73:88:CA:69:20:A9:73:13:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FE0D4858EAD777258C180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396542 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:e0:d4:85:8e:ad:77:72:58:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f166aebf-70b3-488e-8496-e107b0047b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:34:41:19:10:7b:ce:3d:7b:33:7e:46:f9:b6: 70:6e:e0:73:5c:b4:61:60:e2:26:e2:88:4e:69:ac: 02:3f:88:9c:54:6c:24:ae:76:9e:72:f8:c1:c2:1d: 1c:3e:b4:c1:f1:04:a1:37:93:9d:d8:99:c6:70:86: 2e:81:36:4e:13:5f:9c:d7:bc:75:cb:c4:63:de:50: d6:b1:3e:aa:9e:15:a9:87:5e:83:87:6b:40:69:26: 36:05:7c:95:00:4d:b1:2e:e2:76:35:ab:3e:89:07: 8c:38:3c:39:3e:77:b4:a8:5e:04:0c:f2:a9:c2:52: 8e:c7:27:7e:91:86:82:69:e2:6a:fb:b6:a7:a8:f5: ba:02:1a:e6:4e:ac:c2:95:d2:da:43:ed:8a:43:34: 6e:21:68:67:2c:4a:d4:7f:e0:c7:c8:e0:94:59:7c: b7:d0:02:eb:0e:58:32:ac:42:9c:46:f4:9e:e4:3e: 97:96:17:45:32:75:90:41:38:d2:33:c3:fc:93:85: 99:6a:59:2b:7d:8e:9b:92:fa:46:02:ab:1f:49:85: da:31:ea:36:28:14:18:84:77:dc:dd:a1:ce:38:60: cd:0a:7e:cd:db:03:9e:81:f0:7f:70:94:13:6d:f0: c1:16:1b:9a:57:e8:dc:7d:b4:25:2c:ec:48:88:38: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:00:61:FB:06:7A:57:20:A2:8D:67:73:88:CA:69:20:A9:73:13:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:6e:6d:91:ce:41:93:ed:4b:ef:be:8c:ea:9f:e0:9e:ec: be:05:7c:e9:b6:67:88:b9:e2:0c:a2:d0:df:3b:d3:b9:09:f6: 93:5a:0f:d1:cc:22:8a:37:5b:14:54:b4:57:34:78:6f:ef:5d: fb:11:47:8c:73:61:39:32:87:01:eb:39:24:7e:92:0a:aa:84: 32:1d:86:e5:4d:ea:c6:5c:52:26:3c:10:f8:75:6b:a1:d8:92: 7a:a9:5f:c6:c2:89:fb:3d:8b:c4:b0:ff:8d:56:d5:b3:37:ad: 17:2c:de:ec:d8:19:23:5e:fb:0f:6f:83:75:5a:0c:7a:d5:45: 30:d0:f5:3a:7e:18:89:1b:7a:63:9d:a9:f9:cb:bd:ba:02:c9: a8:7d:0f:40:75:d9:70:c7:cb:0b:df:eb:de:0a:51:af:b2:1e: 44:b8:8b:0a:6d:00:29:1f:c0:be:2e:97:e9:77:24:c7:e3:31: 20:c3:45:0b:d8:bd:92:d5:c1:fe:ca:6a:9f:b0:2c:f7:66:06: d2:ba:a1:f7:cd:ce:8c:b8:0c:76:b5:d6:7e:b0:2e:58:0a:4c: e0:32:8e:72:c5:ff:cf:c2:73:2f:ac:27:94:3e:0c:1d:e8:80: 7a:cd:11:7b:88:8e:6a:c5:b9:85:10:fe:b5:06:92:ee:bd:9a: ae:20:05:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj+DUhY6td3JYwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE2NmFlYmYtNzBiMy00ODhlLTg0OTYtZTEwN2IwMDQ3Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjRBGRB7zj17M35G+bZwbuBzXLRhYOIm4ohO aawCP4icVGwkrnaecvjBwh0cPrTB8QShN5Od2JnGcIYugTZOE1+c17x1y8Rj3lDW sT6qnhWph16Dh2tAaSY2BXyVAE2xLuJ2Nas+iQeMODw5Pne0qF4EDPKpwlKOxyd+ kYaCaeJq+7anqPW6AhrmTqzCldLaQ+2KQzRuIWhnLErUf+DHyOCUWXy30ALrDlgy rEKcRvSe5D6XlhdFMnWQQTjSM8P8k4WZalkrfY6bkvpGAqsfSYXaMeo2KBQYhHfc 3aHOOGDNCn7N2wOegfB/cJQTbfDBFhuaV+jcfbQlLOxIiDgV9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCEAYfsGelcgoo1nc4jKaSCpcxNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY3YjA4NDAtNWI2OS0z MjNhLTgwNDMtNTY0NDVkNmM1ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBp+25tkc5Bk+1L776M6p/gnuy+BXzptmeIueIMotDfO9O5CfaTWg/R zCKKN1sUVLRXNHhv7137EUeMc2E5MocB6zkkfpIKqoQyHYblTerGXFImPBD4dWuh 2JJ6qV/Gwon7PYvEsP+NVtWzN60XLN7s2BkjXvsPb4N1Wgx61UUw0PU6fhiJG3pj nan5y726AsmofQ9Addlwx8sL3+veClGvsh5EuIsKbQApH8C+LpfpdyTH4zEgw0UL 2L2S1cH+ymqfsCz3ZgbSuqH3zc6MuAx2tdZ+sC5YCkzgMo5yxf/PwnMvrCeUPgwd 6IB6zRF7iI5qxbmFEP61BpLuvZquIAXd -----END CERTIFICATE-----Generated at Wed Jul 29 04:43:55 2026 by rpki-client