$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa File: daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa (raw, json) Hash identifier: sfctzavBp4k4KqE3vJhW+GaspFzt6zgqWj3bgqlkN+E= Subject key identifier: E6:AA:5F:09:27:A1:8C:8B:0B:DE:BB:8B:96:50:CF:A4:53:BA:16:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5FA2C0D0963C3C338C680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396546 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:fa:2c:0d:09:63:c3:c3:38:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=c033295d-ffad-4e66-9c7d-52be16af3b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:71:7e:15:a3:02:0b:76:54:2e:be:fd:44: f0:0b:fe:86:8e:89:c1:c8:c8:0a:05:78:a3:bc:46: de:c9:02:f1:58:b7:28:ef:5f:c6:24:a5:34:5a:09: 45:44:b3:af:f5:e0:00:23:e2:15:ad:69:5c:4f:a5: 38:85:0e:06:af:1c:4d:61:54:66:a8:e2:a0:56:73: 7a:47:85:de:b6:69:c7:c5:ee:71:33:13:3d:9f:d1: 87:43:8e:25:58:ac:88:ae:cd:dd:b0:83:9a:3c:de: 6a:78:ef:ae:0f:36:36:95:0d:5e:aa:03:a2:57:14: c2:c0:73:e1:26:35:ff:17:f1:3e:7e:35:38:5d:3b: ee:56:df:54:34:60:49:31:bc:d1:24:68:2d:8e:3a: ce:7c:38:2f:47:d1:45:ef:74:73:0e:21:98:8f:ac: e5:b1:1a:09:66:8c:17:97:68:85:9d:88:9f:39:37: 3e:cb:58:ce:8b:13:d7:3c:e6:3d:48:ec:fb:fa:9b: 0e:a1:77:34:2e:dc:74:a3:fe:c9:4f:0f:3b:fa:8c: 11:fe:0a:41:05:a2:4b:7a:47:53:a7:ef:1f:08:c1: 80:c4:79:54:10:82:18:43:28:4f:da:6f:4a:7d:c0: 42:5d:76:c1:50:75:3d:85:4a:58:de:4c:0a:de:b2: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AA:5F:09:27:A1:8C:8B:0B:DE:BB:8B:96:50:CF:A4:53:BA:16:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/daec2653-8ccb-3ccb-90dc-23d8ad91d920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8f:7c:3c:9c:ff:ce:2f:b0:65:41:4b:ca:8c:de:c7:d2:59: 42:b6:12:90:7f:43:42:e3:24:4f:b5:de:91:51:68:e2:01:27: e9:40:37:35:57:80:f1:22:2b:9d:f2:99:03:12:5e:f7:fb:fd: 44:81:30:ab:8d:ea:14:04:a1:ee:44:4c:5d:7d:1b:c5:c6:41: b5:9e:21:38:71:c9:b7:6a:ad:59:1c:97:be:92:dd:d5:b8:8a: 51:af:35:02:53:53:90:42:26:59:57:ec:40:11:85:cb:2c:52: 6b:73:ab:a1:d5:ae:c2:06:97:f8:0a:03:f6:10:f2:0a:fd:1d: 3d:d9:46:8d:d9:9d:2c:ed:05:bd:28:94:5f:a7:20:3c:e4:63: fe:b0:5b:81:93:8a:28:66:90:32:83:2d:a5:fe:ee:89:dc:fd: 1a:ca:5a:cb:3a:42:d2:46:ca:8e:0f:cc:3e:bd:18:79:27:c2: ae:2f:29:c4:2d:3d:cf:1e:16:1d:0c:17:e7:f8:6a:fa:e5:e5: c0:9a:99:da:8e:d9:e2:54:6e:f5:90:73:9f:6c:19:18:92:55: 14:2b:1f:27:cf:9e:de:27:a6:6a:71:fd:cd:9a:94:66:6d:95: 90:0e:b7:09:be:62:72:44:db:6c:12:57:20:06:06:2d:cf:54: cf:b6:73:c2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfosDQljw8M4xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk YzAzMzI5NWQtZmZhZC00ZTY2LTljN2QtNTJiZTE2YWYzYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuRxfhWjAgt2VC6+/UTwC/6GjonByMgKBXij vEbeyQLxWLco71/GJKU0WglFRLOv9eAAI+IVrWlcT6U4hQ4GrxxNYVRmqOKgVnN6 R4XetmnHxe5xMxM9n9GHQ44lWKyIrs3dsIOaPN5qeO+uDzY2lQ1eqgOiVxTCwHPh JjX/F/E+fjU4XTvuVt9UNGBJMbzRJGgtjjrOfDgvR9FF73RzDiGYj6zlsRoJZowX l2iFnYifOTc+y1jOixPXPOY9SOz7+psOoXc0Ltx0o/7JTw87+owR/gpBBaJLekdT p+8fCMGAxHlUEIIYQyhP2m9KfcBCXXbBUHU9hUpY3kwK3rKvjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOaqXwknoYyLC967i5ZQz6RTuhb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFlYzI2NTMtOGNjYi0z Y2NiLTkwZGMtMjNkOGFkOTFkOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQj3w8nP/OL7BlQUvKjN7H0llCthKQf0NC4yRPtd6RUWjiASfpQDc1 V4DxIiud8pkDEl73+/1EgTCrjeoUBKHuRExdfRvFxkG1niE4ccm3aq1ZHJe+kt3V uIpRrzUCU1OQQiZZV+xAEYXLLFJrc6uh1a7CBpf4CgP2EPIK/R092UaN2Z0s7QW9 KJRfpyA85GP+sFuBk4ooZpAygy2l/u6J3P0aylrLOkLSRsqOD8w+vRh5J8KuLynE LT3PHhYdDBfn+Gr65eXAmpnajtniVG71kHOfbBkYklUUKx8nz57eJ6Zqcf3NmpRm bZWQDrcJvmJyRNtsElcgBgYtz1TPtnPC -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:58 2026 by rpki-client