$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa File: e4f2dd84-4660-3edd-a01c-c370af904e1d.roa (raw, json) Hash identifier: 5dT328yHcOYXkH82/RvnKXVx0Acdo9rNfS0lsoA97Wo= Subject key identifier: 4B:A6:4C:F8:0D:F5:7C:73:33:74:A2:54:D6:EA:E3:DA:6E:9B:39:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78FDFE2B55E94F9F6FB1B90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396606 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:df:e2:b5:5e:94:f9:f6:fb:1b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=20671120-c636-4c17-a07d-962200ff7d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:7b:98:b3:07:01:43:7f:8d:c6:f1:fc:5f: d2:57:f4:fd:cb:fe:4e:80:98:93:d4:cc:56:6b:55: be:f6:6b:d6:0f:4a:27:85:5a:df:c8:26:58:6f:74: fc:95:e8:b3:15:a3:dc:98:24:c4:af:74:85:f0:fe: 7a:14:c3:1f:77:2d:c0:01:5a:99:18:de:e7:4a:ee: e2:e9:44:d1:bd:3a:41:9c:89:12:97:b5:d9:df:d2: c8:ee:e3:34:53:ef:44:32:24:92:1f:4f:c3:11:2c: 0c:d5:13:ac:80:a5:f6:43:86:18:d9:8b:98:1f:aa: 85:cb:10:8d:23:50:c6:3a:f6:af:72:4b:09:a0:36: 7a:e0:4c:cc:f5:0e:2b:4e:ac:32:00:f3:5a:0e:48: 86:05:23:39:d2:7f:ae:ff:c6:81:ad:c4:82:f1:dc: 2b:1b:fb:dd:bc:61:a2:54:67:c9:16:e0:70:d5:1a: a4:f7:c8:c1:56:5c:ad:49:fc:c0:0c:3f:d0:13:f8: bb:68:73:6e:69:bf:90:79:55:c3:c4:75:33:d5:cf: 04:f3:66:46:2e:e6:cb:d0:6a:2e:01:89:47:fe:3a: b7:d7:36:a3:33:ae:7d:1f:39:05:43:11:f5:54:6a: a5:3b:ed:1a:b4:ea:a6:81:7e:a7:3a:d5:92:b1:6d: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:4C:F8:0D:F5:7C:73:33:74:A2:54:D6:EA:E3:DA:6E:9B:39:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:89:78:fd:52:77:02:95:43:34:57:e0:11:dc:08:3e:e1:3f: 65:1d:5d:70:67:0a:1e:1c:f3:48:0d:3a:04:56:a3:ca:9d:6d: e2:a0:09:dc:7b:dd:ef:cf:48:1d:72:80:a3:1f:d1:8b:77:93: 94:6b:ac:82:90:74:f1:bf:65:7b:9f:63:20:e2:3a:6c:d0:83: f0:08:68:04:75:92:61:c0:47:8c:fa:55:c6:02:6b:1a:2d:6d: 71:39:96:69:a9:f0:0c:e8:07:0c:72:7b:8d:4d:61:d5:14:bd: de:f1:d7:1f:b6:3d:b2:70:75:4c:96:16:2d:54:87:fb:77:46: 47:a8:b9:7b:6c:23:89:a3:1e:e5:8a:08:eb:40:1d:3a:9e:59: 7b:aa:b2:80:a8:27:e9:03:cf:e5:8d:aa:7d:e5:b5:7a:e2:e7: 65:d2:97:80:c4:7b:57:31:29:7a:35:59:5f:f3:44:8e:db:43: ec:ba:a3:4d:5c:a3:9a:15:2c:bb:39:89:b6:c9:07:9d:b0:4e: c6:44:9a:48:c9:c4:d5:39:8a:88:ac:60:40:fb:47:4e:99:ca: 7a:a4:c5:62:95:4a:75:d1:db:d8:3d:14:7e:84:cd:c7:33:db: 17:bf:66:3d:50:5c:59:35:8b:94:ce:ea:8b:f3:6c:54:c4:2e: 9e:d6:bf:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj9/itV6U+fb7G5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjA2NzExMjAtYzYzNi00YzE3LWEwN2QtOTYyMjAwZmY3ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQl7mLMHAUN/jcbx/F/SV/T9y/5OgJiT1MxW a1W+9mvWD0onhVrfyCZYb3T8leizFaPcmCTEr3SF8P56FMMfdy3AAVqZGN7nSu7i 6UTRvTpBnIkSl7XZ39LI7uM0U+9EMiSSH0/DESwM1ROsgKX2Q4YY2YuYH6qFyxCN I1DGOvavcksJoDZ64EzM9Q4rTqwyAPNaDkiGBSM50n+u/8aBrcSC8dwrG/vdvGGi VGfJFuBw1Rqk98jBVlytSfzADD/QE/i7aHNuab+QeVXDxHUz1c8E82ZGLubL0Gou AYlH/jq31zajM659HzkFQxH1VGqlO+0atOqmgX6nOtWSsW0jxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEumTPgN9XxzM3SiVNbq49pumzkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRmMmRkODQtNDY2MC0z ZWRkLWEwMWMtYzM3MGFmOTA0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaiXj9UncClUM0V+AR3Ag+4T9lHV1wZwoeHPNIDToEVqPKnW3ioAnc e93vz0gdcoCjH9GLd5OUa6yCkHTxv2V7n2Mg4jps0IPwCGgEdZJhwEeM+lXGAmsa LW1xOZZpqfAM6AcMcnuNTWHVFL3e8dcftj2ycHVMlhYtVIf7d0ZHqLl7bCOJox7l igjrQB06nll7qrKAqCfpA8/ljap95bV64udl0peAxHtXMSl6NVlf80SO20PsuqNN XKOaFSy7OYm2yQedsE7GRJpIycTVOYqIrGBA+0dOmcp6pMVilUp10dvYPRR+hM3H M9sXv2Y9UFxZNYuUzuqL82xUxC6e1r/K -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:26 2026 by rpki-client