$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d37318-20c0-37c6-9248-c1f91be2f375.roa File: f2d37318-20c0-37c6-9248-c1f91be2f375.roa (raw, json) Hash identifier: 25prINOkCxcyZTbPT7Prn1ZFrj3OoESiYbKysvJ0M2g= Subject key identifier: 2B:98:72:4F:8A:07:4B:40:EE:8F:B6:33:50:31:D4:7B:59:0B:3B:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79800F343DF6426D62017A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d37318-20c0-37c6-9248-c1f91be2f375.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396586 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:00:f3:43:df:64:26:d6:20:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d2e42042-65f4-45d5-b232-6b96bc2a4754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:19:63:05:4c:29:70:7a:f7:80:db:ea:5b: 0e:b9:cc:bb:94:c9:ea:f3:ab:19:37:4a:2b:22:fa: 88:ef:c0:5d:e6:04:8e:62:f0:25:ad:a4:a4:92:aa: 9d:3f:e1:91:8f:6a:c2:89:ab:b7:7d:bc:d8:a1:c4: 59:d0:df:25:b0:37:28:e2:69:bc:b8:be:48:93:b0: 7c:39:39:cc:62:ed:67:03:82:ca:a8:a0:24:97:a6: 26:ef:1a:a1:07:e4:2b:96:1a:b6:a7:da:fb:54:48: 09:2f:68:ce:a2:db:65:da:f7:7b:73:13:cf:4d:55: 1d:f1:89:f5:dd:38:8f:01:a0:a5:39:1c:e0:2d:9a: e7:08:7d:99:c0:34:75:24:75:b4:b0:48:60:4f:1c: 71:86:b8:6a:f1:30:0c:13:cf:aa:0c:8a:9b:aa:61: b5:57:f0:f7:4c:b0:49:9d:8a:f8:f7:3c:44:e8:2d: ee:89:6f:a6:b6:ba:dc:ec:23:a1:dd:c0:83:03:9a: 3f:c8:6f:d0:cc:1d:ad:16:9b:b6:53:63:b9:bd:da: e5:f2:62:8f:2e:35:b3:3d:f0:9b:90:4d:46:af:04: 20:b3:4a:3a:1b:b9:ab:72:ef:25:de:e4:d5:77:e4: 60:ff:05:ac:80:b7:5d:69:57:ba:f7:4a:31:76:7f: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:72:4F:8A:07:4B:40:EE:8F:B6:33:50:31:D4:7B:59:0B:3B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2d37318-20c0-37c6-9248-c1f91be2f375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9a:dd:2a:45:1b:b7:74:92:9f:ab:a0:f0:7d:2c:90:f3:b2: dc:bc:e3:b0:a1:19:42:34:6c:ba:3a:9d:25:57:78:ce:7a:5f: 1a:33:59:f4:0f:83:07:88:c4:c7:0e:82:5f:08:91:02:da:a8: 4c:9e:9f:06:8c:ea:4f:47:7a:48:97:9e:cc:5c:59:ec:dd:2b: a7:1e:94:d2:97:5e:1d:77:cc:d5:39:8e:4d:b6:e8:fe:96:f5: 8c:e2:ff:0f:4e:fb:e3:9c:00:8d:42:79:5c:b6:0d:a0:ca:03: 31:81:8d:bf:d3:03:0b:7c:01:58:37:94:c3:da:5e:77:4e:98: 5d:14:82:63:ab:db:e0:ce:d0:d5:21:f0:67:2f:0b:12:d8:2e: da:35:42:14:fc:85:bd:c0:4d:27:c9:16:16:53:72:99:b9:90: 5e:a8:cd:c5:cd:a7:9a:10:8f:95:5d:0a:b1:58:19:6b:d8:c9: a1:e6:b8:b3:7a:8b:ac:ac:d2:88:64:4b:e3:c8:7b:45:d5:94: ec:6e:b6:77:61:00:8b:d0:6f:fb:d4:4b:64:67:20:6d:29:4b: e0:45:31:8f:78:72:10:57:4f:82:ce:41:4f:74:c3:46:51:bd: 92:36:3b:e2:e0:a5:e7:25:9b:dd:99:3e:3a:10:2f:d0:33:ab: 7f:34:4f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmADzQ99kJtYgF6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDJlNDIwNDItNjVmNC00NWQ1LWIyMzItNmI5NmJjMmE0NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQcZYwVMKXB694Db6lsOucy7lMnq86sZN0or IvqI78Bd5gSOYvAlraSkkqqdP+GRj2rCiau3fbzYocRZ0N8lsDco4mm8uL5Ik7B8 OTnMYu1nA4LKqKAkl6Ym7xqhB+Qrlhq2p9r7VEgJL2jOottl2vd7cxPPTVUd8Yn1 3TiPAaClORzgLZrnCH2ZwDR1JHW0sEhgTxxxhrhq8TAME8+qDIqbqmG1V/D3TLBJ nYr49zxE6C3uiW+mtrrc7COh3cCDA5o/yG/QzB2tFpu2U2O5vdrl8mKPLjWzPfCb kE1GrwQgs0o6G7mrcu8l3uTVd+Rg/wWsgLddaVe690oxdn8/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuYck+KB0tA7o+2M1Ax1HtZCzufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjJkMzczMTgtMjBjMC0z N2M2LTkyNDgtYzFmOTFiZTJmMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKa3SpFG7d0kp+roPB9LJDzsty847ChGUI0bLo6nSVXeM56XxozWfQP gweIxMcOgl8IkQLaqEyenwaM6k9HekiXnsxcWezdK6celNKXXh13zNU5jk226P6W 9Yzi/w9O++OcAI1CeVy2DaDKAzGBjb/TAwt8AVg3lMPaXndOmF0UgmOr2+DO0NUh 8GcvCxLYLto1QhT8hb3ATSfJFhZTcpm5kF6ozcXNp5oQj5VdCrFYGWvYyaHmuLN6 i6ys0ohkS+PIe0XVlOxutndhAIvQb/vUS2RnIG0pS+BFMY94chBXT4LOQU90w0ZR vZI2O+Lgpeclm92ZPjoQL9Azq380T+0= -----END CERTIFICATE-----Generated at Wed Jul 29 04:46:52 2026 by rpki-client