$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa File: d67b0840-5b69-323a-8043-56445d6c580b.roa (raw, json) Hash identifier: EAyD40azZ+JQwtgj3lRnmjVMcomL0HImAggDodlxN8E= Subject key identifier: 87:B9:BB:01:DD:05:E9:D9:CA:9F:9A:B9:CC:86:D6:B9:9B:A1:0F:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5CEAC30BF96BE5BA67F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396542 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ce:ac:30:bf:96:be:5b:a6:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=acfaafe6-e654-4472-ba02-95c85fccecb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:6e:f5:da:41:cf:33:45:39:e1:48:37:ff: 35:5e:1a:db:90:53:78:e3:4d:1d:69:fc:92:97:65: 8f:fc:86:15:df:34:0c:81:e3:9b:76:b5:f3:9e:3f: dc:cf:54:eb:39:fb:23:7f:67:bd:a3:0d:5d:6e:0c: 3a:98:d7:18:57:9e:5c:1d:8c:95:4d:c6:76:ef:d2: 00:3d:92:4a:2b:57:ae:ed:96:e1:1b:ea:08:aa:dd: cc:ae:44:e5:f8:4f:43:7c:5b:b1:5d:1f:5c:24:b5: af:47:86:13:1c:67:92:3f:c2:0c:12:fe:d4:33:58: 76:b1:e0:91:9d:4b:01:ff:37:1a:ee:a3:6d:0a:d3: f9:ca:38:4d:14:58:8c:33:2a:aa:b2:6b:66:a4:ae: a9:51:4b:2e:20:3d:15:b1:29:3d:c9:8e:1d:6b:17: 18:e8:c4:ff:b5:cf:29:76:af:04:cc:57:1b:a9:6c: 3c:9d:40:b3:64:bc:12:c0:5a:88:1b:f7:a8:28:83: 02:c2:98:0e:59:9d:e5:05:ee:88:4e:c1:5c:b2:a6: 07:ad:62:6a:19:61:52:e8:9e:f4:f7:3d:f9:a1:8c: 5a:c8:74:ad:7e:9e:13:9d:43:7f:0c:0c:60:60:8d: 75:b9:6c:a3:4f:58:e9:9d:8a:bc:7a:dc:37:17:67: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:BB:01:DD:05:E9:D9:CA:9F:9A:B9:CC:86:D6:B9:9B:A1:0F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d67b0840-5b69-323a-8043-56445d6c580b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d5:d5:9f:5f:91:b9:32:6d:05:7d:eb:3d:ea:3f:3c:4d:da: f5:e0:bd:38:f7:7f:ed:f8:cd:6f:1a:d2:86:61:89:66:64:29: 9a:4c:37:4c:c9:63:82:40:a9:40:5e:47:11:c2:c7:29:50:d7: 7d:ff:24:89:c9:c7:b1:19:86:d4:e1:cf:c2:6c:d1:fd:68:93: f7:10:bc:2d:8d:3e:04:1c:8c:3c:8d:6b:f2:f9:18:8a:35:b4: dd:5c:a0:bf:b6:5f:a5:9d:4d:51:08:bd:19:69:3a:0b:29:20: 9a:54:14:9d:7f:b4:c1:f3:9d:97:07:5b:a2:d1:bf:17:17:c0: ec:03:7e:b6:4b:42:c2:16:a9:23:1b:3d:34:b4:db:8a:7d:35: 9f:d5:63:c5:05:ab:93:e1:92:ba:7e:05:32:f6:f0:88:de:7d: 5c:77:9f:c6:a8:f9:63:a8:cc:b2:0f:9f:25:56:e3:92:64:b5: d4:2f:ee:af:1e:17:d0:43:f6:c3:7d:96:c6:85:2a:15:e8:5a: f5:55:0c:28:6c:58:52:a1:9f:17:32:3a:2e:c8:69:d3:aa:9c: 33:b8:9e:c0:ee:64:3d:f4:3b:a5:e6:49:ce:8d:06:4e:07:70: e0:9c:7d:4d:13:db:00:23:64:84:0f:19:bf:7b:11:c9:ca:41: bf:25:cd:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itc6sML+WvlumfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YWNmYWFmZTYtZTY1NC00NDcyLWJhMDItOTVjODVmY2NlY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiNu9dpBzzNFOeFIN/81XhrbkFN4400dafyS l2WP/IYV3zQMgeObdrXznj/cz1TrOfsjf2e9ow1dbgw6mNcYV55cHYyVTcZ279IA PZJKK1eu7ZbhG+oIqt3MrkTl+E9DfFuxXR9cJLWvR4YTHGeSP8IMEv7UM1h2seCR nUsB/zca7qNtCtP5yjhNFFiMMyqqsmtmpK6pUUsuID0VsSk9yY4daxcY6MT/tc8p dq8EzFcbqWw8nUCzZLwSwFqIG/eoKIMCwpgOWZ3lBe6ITsFcsqYHrWJqGWFS6J70 9z35oYxayHStfp4TnUN/DAxgYI11uWyjT1jpnYq8etw3F2fzhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIe5uwHdBenZyp+aucyG1rmboQ/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY3YjA4NDAtNWI2OS0z MjNhLTgwNDMtNTY0NDVkNmM1ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAs1dWfX5G5Mm0Ffes96j88Tdr14L0493/t+M1vGtKGYYlmZCmaTDdM yWOCQKlAXkcRwscpUNd9/ySJycexGYbU4c/CbNH9aJP3ELwtjT4EHIw8jWvy+RiK NbTdXKC/tl+lnU1RCL0ZaToLKSCaVBSdf7TB852XB1ui0b8XF8DsA362S0LCFqkj Gz00tNuKfTWf1WPFBauT4ZK6fgUy9vCI3n1cd5/GqPljqMyyD58lVuOSZLXUL+6v HhfQQ/bDfZbGhSoV6Fr1VQwobFhSoZ8XMjouyGnTqpwzuJ7A7mQ99Dul5knOjQZO B3DgnH1NE9sAI2SEDxm/exHJykG/Jc01 -----END CERTIFICATE-----Generated at Sat Jun 13 14:04:08 2026 by rpki-client