$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa File: 0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa (raw, json) Hash identifier: GkqBXwrq+m5Gfp8Eh0xTnKXj/1UEZX38BFyB/yE11lc= Subject key identifier: 76:86:E5:08:ED:8F:C6:E5:05:BF:D8:82:01:17:A1:3C:14:9E:41:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B260A6072E2D8C06D500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 36624 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b2:60:a6:07:2e:2d:8c:06:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=09dc9d88-edef-49e4-b7de-33d86426bffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:bb:6f:c0:b8:cf:0e:67:0c:74:1e:36:19: bc:0d:b2:4e:55:bd:c8:1b:e7:08:d0:13:44:22:51: 94:23:ca:f2:1d:dc:5e:c6:93:07:19:fd:dd:64:a2: 55:16:ec:64:72:5c:f3:81:88:dc:88:04:8d:e4:2f: 2b:52:c9:a1:63:b5:a2:6d:5d:18:5f:dd:12:7d:b3: d3:03:64:13:59:8d:66:60:26:3c:61:65:30:37:26: 76:27:5a:43:c8:ce:f9:1d:25:18:95:c6:57:33:11: 52:b0:07:ba:bc:85:b3:56:73:3b:e6:c6:c5:cd:53: 25:cd:9d:b7:16:62:c0:32:cc:df:5d:d2:b5:41:31: 98:05:29:a1:fc:f7:af:cb:20:72:bb:8b:7c:54:28: 82:25:5c:ed:f9:42:fb:8e:fb:4f:81:30:5b:93:80: a4:7f:a1:d8:9d:bd:72:4a:59:b2:bd:13:bc:34:54: 9e:70:e1:c2:e5:cc:2d:92:32:2d:a9:fb:36:a3:eb: 67:88:9e:60:96:ab:96:ba:ad:1a:59:9a:89:76:db: b5:fe:8c:4f:81:f5:0a:1e:5f:9d:b1:a4:ad:52:76: 09:8f:81:1c:42:b2:3c:44:c9:f7:93:c9:d0:74:3b: 5d:35:6b:8b:02:98:23:f2:e6:3f:d7:e2:63:67:82: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:86:E5:08:ED:8F:C6:E5:05:BF:D8:82:01:17:A1:3C:14:9E:41:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0456dcde-86c0-3ef0-a72f-59ffcc452dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:bb:b8:ee:68:a0:31:81:34:2c:6d:37:a4:bc:ac:09:4b:14: 18:5f:96:89:44:2e:c2:10:8b:2f:80:70:75:37:16:17:14:ce: 00:a9:92:27:6d:88:0a:e0:dd:34:39:32:27:11:42:84:b7:15: c5:e9:c7:85:79:3c:c6:e7:0a:b6:4c:fc:ce:91:50:a7:e7:a3: 2d:e0:fe:e9:20:26:ce:5e:b7:1a:6b:5e:f2:f5:3a:ba:de:68: 7b:c7:e2:42:73:bf:d4:af:e4:8e:bc:35:07:29:99:6f:5e:4f: 28:0d:6a:f2:77:5c:f8:af:4b:95:e5:04:54:fd:c1:75:ee:8f: 6d:21:4d:27:98:5f:68:72:e3:01:b0:2d:40:a4:bd:e8:11:2a: ad:bf:49:11:18:fd:4c:3b:7e:03:7d:92:ff:0f:46:0f:10:3a: ea:8f:ac:2d:68:3d:c4:3b:f9:bf:e2:5e:ea:a1:7c:9e:a0:52: 2d:34:79:c6:f8:4d:ee:fc:46:b6:e7:3a:1f:ab:d6:1a:53:bf: c7:4a:e7:19:26:c9:d1:56:da:73:3f:70:d0:3c:03:f0:89:1c: 62:83:d7:bd:1a:1d:bc:38:42:5b:ca:cf:ea:ae:4a:44:ff:5d: 85:7d:e9:1a:09:99:76:7a:be:ac:e3:a8:4d:6b:1a:2b:23:fc: 96:3f:e4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLJgpgcuLYwG1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDlkYzlkODgtZWRlZi00OWU0LWI3ZGUtMzNkODY0MjZiZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRq7b8C4zw5nDHQeNhm8DbJOVb3IG+cI0BNE IlGUI8ryHdxexpMHGf3dZKJVFuxkclzzgYjciASN5C8rUsmhY7WibV0YX90SfbPT A2QTWY1mYCY8YWUwNyZ2J1pDyM75HSUYlcZXMxFSsAe6vIWzVnM75sbFzVMlzZ23 FmLAMszfXdK1QTGYBSmh/PevyyByu4t8VCiCJVzt+UL7jvtPgTBbk4Ckf6HYnb1y SlmyvRO8NFSecOHC5cwtkjItqfs2o+tniJ5glquWuq0aWZqJdtu1/oxPgfUKHl+d saStUnYJj4EcQrI8RMn3k8nQdDtdNWuLApgj8uY/1+JjZ4JtjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaG5Qjtj8blBb/YggEXoTwUnkGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQ1NmRjZGUtODZjMC0z ZWYwLWE3MmYtNTlmZmNjNDUyZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa7uO5ooDGBNCxtN6S8rAlLFBhflolELsIQiy+AcHU3FhcUzgCpkidt iArg3TQ5MicRQoS3FcXpx4V5PMbnCrZM/M6RUKfnoy3g/ukgJs5etxprXvL1Orre aHvH4kJzv9Sv5I68NQcpmW9eTygNavJ3XPivS5XlBFT9wXXuj20hTSeYX2hy4wGw LUCkvegRKq2/SREY/Uw7fgN9kv8PRg8QOuqPrC1oPcQ7+b/iXuqhfJ6gUi00ecb4 Te78RrbnOh+r1hpTv8dK5xkmydFW2nM/cNA8A/CJHGKD170aHbw4QlvKz+quSkT/ XYV96RoJmXZ6vqzjqE1rGisj/JY/5MI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:56 2026 by rpki-client