$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa File: e4f2dd84-4660-3edd-a01c-c370af904e1d.roa (raw, json) Hash identifier: ZOYTrRgiKEhRaRqHEVmRbnjKK02dM2taFdq9n7J9F3w= Subject key identifier: 39:3B:C6:AB:E4:84:16:12:DF:5B:D6:2C:4A:C4:F1:3B:DF:86:1D:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584DE2B5CD72D54328C24FB0B9C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 396606 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:cd:72:d5:43:28:c2:4f:b0:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=1f4d1e24-b1b5-489d-88eb-d6b1062b44f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c0:dd:fd:cc:d5:89:82:1b:70:1c:7d:73:da: 8a:4a:9e:c9:c2:6c:a6:39:99:92:f1:85:cc:43:62: 20:2c:81:87:5f:cc:68:fc:ee:76:ac:e8:5d:49:3f: a6:64:e8:52:4f:76:4e:e4:77:c7:21:c9:00:b2:11: ca:f2:d7:8d:76:fa:0a:fd:3f:2f:0a:14:99:76:7c: dc:9a:81:c2:56:27:43:0b:30:7d:11:99:de:36:5f: 68:27:aa:28:99:95:0b:57:d2:86:9e:5d:99:86:29: 6f:64:c5:d0:2c:f9:01:4b:c7:ce:a9:8c:ce:76:97: b3:eb:4f:54:2b:0e:3d:70:ac:1a:01:68:4c:7c:21: 4c:56:f4:58:5a:57:a6:03:07:86:60:89:a1:12:84: 53:1b:24:3d:3b:67:ba:c7:5a:2e:9e:c5:c2:d3:33: 8e:27:c0:d8:d0:bc:94:80:e6:a8:b2:0f:19:1f:47: 01:14:37:ae:3f:74:14:0d:a0:80:bf:98:1c:38:02: 59:6c:10:e9:2c:0c:aa:8f:e7:3d:18:57:8b:20:92: 8a:41:c3:d2:5e:75:ec:4d:79:60:5d:24:b9:88:72: 04:10:46:eb:23:12:48:2b:82:ec:9e:23:61:d1:16: 7a:fa:a6:f6:15:a2:17:7d:a3:68:2d:e1:9e:ef:76: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:C6:AB:E4:84:16:12:DF:5B:D6:2C:4A:C4:F1:3B:DF:86:1D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4f2dd84-4660-3edd-a01c-c370af904e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:de:b3:82:eb:43:c7:51:e7:2a:da:59:a1:1e:bb:61:eb:a3: 4e:2b:1e:69:fe:65:0f:99:cd:ee:46:f1:3d:f1:9b:21:61:36: 73:44:d4:17:63:60:63:a2:ef:41:bb:34:f9:78:ec:3d:cf:1c: 48:e3:3e:16:c4:44:6c:b9:46:19:9c:11:6c:9b:99:e8:ac:94: 77:87:14:da:23:8d:19:b3:b6:4d:c2:50:43:34:6f:7d:ce:e4: e0:ef:c9:81:56:89:ba:d9:47:df:d1:d8:b3:f2:cb:58:18:60: d9:79:4d:0e:b8:a1:30:b0:c7:f5:09:f4:b8:e7:1a:55:c9:84: 9a:bb:36:63:bb:4b:de:fb:09:67:8f:04:25:f2:22:f0:ec:da: 8a:37:6b:01:23:e7:62:d8:88:f5:cf:00:83:8c:fa:92:17:af: 09:e1:e4:66:3f:12:ec:03:1b:d2:16:91:42:a3:dc:87:c2:7d: a7:85:7c:82:7d:3e:b8:ca:7e:9d:84:72:e6:e7:96:e6:f7:e9: 77:40:3f:96:a8:86:b4:fe:fd:7c:f1:bc:be:88:24:95:f4:dc: a7:99:ab:6f:27:3a:a3:c6:1a:a7:16:2a:e7:b6:ef:43:b1:f6: 7c:22:96:eb:ea:ff:f8:49:1c:85:ca:b7:8f:a0:f9:be:af:53: 46:8c:34:e6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itc1y1UMowk+wucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MWY0ZDFlMjQtYjFiNS00ODlkLTg4ZWItZDZiMTA2MmI0NGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Dd/czViYIbcBx9c9qKSp7JwmymOZmS8YXM Q2IgLIGHX8xo/O52rOhdST+mZOhST3ZO5HfHIckAshHK8teNdvoK/T8vChSZdnzc moHCVidDCzB9EZneNl9oJ6oomZULV9KGnl2ZhilvZMXQLPkBS8fOqYzOdpez609U Kw49cKwaAWhMfCFMVvRYWlemAweGYImhEoRTGyQ9O2e6x1ounsXC0zOOJ8DY0LyU gOaosg8ZH0cBFDeuP3QUDaCAv5gcOAJZbBDpLAyqj+c9GFeLIJKKQcPSXnXsTXlg XSS5iHIEEEbrIxJIK4LsniNh0RZ6+qb2FaIXfaNoLeGe73ZeMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDk7xqvkhBYS31vWLErE8Tvfhh09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRmMmRkODQtNDY2MC0z ZWRkLWEwMWMtYzM3MGFmOTA0ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAX3rOC60PHUecq2lmhHrth66NOKx5p/mUPmc3uRvE98ZshYTZzRNQX Y2Bjou9BuzT5eOw9zxxI4z4WxERsuUYZnBFsm5norJR3hxTaI40Zs7ZNwlBDNG99 zuTg78mBVom62Uff0diz8stYGGDZeU0OuKEwsMf1CfS45xpVyYSauzZju0ve+wln jwQl8iLw7NqKN2sBI+di2Ij1zwCDjPqSF68J4eRmPxLsAxvSFpFCo9yHwn2nhXyC fT64yn6dhHLm55bm9+l3QD+WqIa0/v188by+iCSV9NynmatvJzqjxhqnFirntu9D sfZ8Ipbr6v/4SRyFyrePoPm+r1NGjDTm -----END CERTIFICATE-----Generated at Sat Jun 13 13:23:25 2026 by rpki-client