$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05e5d5af-334f-3f89-b91e-509d0af52b38.roa File: 05e5d5af-334f-3f89-b91e-509d0af52b38.roa (raw, json) Hash identifier: gvChQyXcbL1vCt6D2hkxPFQZGF5sTdhYoZg5FHa6iqs= Subject key identifier: 15:0A:91:A0:D5:EF:37:3C:F3:FE:92:D7:FC:65:01:D4:28:68:5E:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D2E8EA56230C830F3D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05e5d5af-334f-3f89-b91e-509d0af52b38.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397207 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d2:e8:ea:56:23:0c:83:0f:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=fe3c629f-2cc4-4d7f-807b-c5764ed898d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6e:c8:9f:2e:6a:58:80:53:d6:95:d6:17:99: df:c0:eb:82:52:fe:a6:69:06:58:61:59:96:32:12: 0f:6d:ec:61:56:20:7c:a7:c2:b4:a8:de:b6:ad:64: 7e:be:7c:15:99:ec:dc:2d:e8:87:70:a7:d3:17:22: 24:cd:38:35:9d:e5:4f:32:03:40:21:ee:e1:be:8d: 56:fb:5f:61:02:c0:95:70:1f:14:06:23:b6:9d:75: ef:77:13:01:11:b3:09:d4:ac:57:b8:c7:38:a3:f9: 80:f4:9d:0d:41:25:aa:a6:51:9e:c1:4f:2e:70:37: 0e:ae:fc:75:d1:6d:83:4e:c9:4d:73:e0:11:1e:a7: 58:1f:84:f7:3c:67:77:79:92:94:b5:42:84:aa:63: b8:4d:cb:5a:a2:62:d5:13:3c:26:61:eb:9f:f9:77: e4:c6:58:57:f8:5e:18:f5:a9:33:22:d3:41:69:ea: c4:f3:ae:e5:6a:35:88:56:65:62:a4:2a:bb:cc:be: 0d:cd:cf:48:39:6d:7e:22:58:45:fa:d7:66:47:31: 57:55:19:16:a2:73:44:36:01:ab:f2:67:48:a1:45: c5:7c:a0:55:da:58:a0:e1:67:e8:ed:15:a7:36:82: 43:a4:a7:a6:45:9f:8a:9c:6b:ec:b8:21:d2:09:c6: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:91:A0:D5:EF:37:3C:F3:FE:92:D7:FC:65:01:D4:28:68:5E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05e5d5af-334f-3f89-b91e-509d0af52b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d0:e0:45:6e:02:15:f8:70:7a:ac:af:fb:4f:04:1d:80:5f: 07:5a:45:f8:93:86:ec:bd:bd:42:96:30:cb:a4:c6:92:ed:50: e0:a9:ef:38:2d:5f:41:03:48:d2:19:c6:1a:5f:03:f9:d6:d8: 5f:c0:fd:a9:3a:4a:72:a1:ca:58:07:df:0c:c9:c8:d6:af:f7: a1:3f:0c:db:dd:1d:79:f8:89:97:47:f7:72:70:66:64:13:64: 8a:9d:58:a9:02:8c:f2:93:39:13:92:c4:cc:8b:b6:9e:24:e9: a1:fe:79:95:3a:e4:4b:98:c7:23:b3:8f:73:21:bd:65:f3:89: 3a:a2:f6:34:62:1c:02:12:1e:64:a2:9c:53:6c:ec:74:b9:d0: 6d:42:93:f3:df:bb:51:23:b6:3c:de:9c:cd:de:ad:1c:dd:a4: fd:76:26:b3:f8:bc:c5:17:14:83:ec:57:86:10:45:15:09:1d: 84:fd:98:f1:68:29:a0:5e:99:e5:99:54:80:27:c9:ab:86:00: 80:a6:f4:f4:d9:d0:87:c7:18:69:80:ae:c1:d5:66:74:c3:01: 32:b4:e1:ee:18:4f:4a:a8:6c:49:e9:bd:4a:79:26:e6:c4:98: c1:60:31:0a:92:45:71:e5:71:af:d1:4f:d2:5c:79:67:5d:3c: 41:2c:fc:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNLo6lYjDIMPPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZmUzYzYyOWYtMmNjNC00ZDdmLTgwN2ItYzU3NjRlZDg5OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG7Iny5qWIBT1pXWF5nfwOuCUv6maQZYYVmW MhIPbexhViB8p8K0qN62rWR+vnwVmezcLeiHcKfTFyIkzTg1neVPMgNAIe7hvo1W +19hAsCVcB8UBiO2nXXvdxMBEbMJ1KxXuMc4o/mA9J0NQSWqplGewU8ucDcOrvx1 0W2DTslNc+ARHqdYH4T3PGd3eZKUtUKEqmO4TctaomLVEzwmYeuf+XfkxlhX+F4Y 9akzItNBaerE867lajWIVmVipCq7zL4Nzc9IOW1+IlhF+tdmRzFXVRkWonNENgGr 8mdIoUXFfKBV2lig4Wfo7RWnNoJDpKemRZ+KnGvsuCHSCcZm/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUKkaDV7zc88/6S1/xlAdQoaF58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDVlNWQ1YWYtMzM0Zi0z Zjg5LWI5MWUtNTA5ZDBhZjUyYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrQ4EVuAhX4cHqsr/tPBB2AXwdaRfiThuy9vUKWMMukxpLtUOCp7zgt X0EDSNIZxhpfA/nW2F/A/ak6SnKhylgH3wzJyNav96E/DNvdHXn4iZdH93JwZmQT ZIqdWKkCjPKTOROSxMyLtp4k6aH+eZU65EuYxyOzj3MhvWXziTqi9jRiHAISHmSi nFNs7HS50G1Ck/Pfu1EjtjzenM3erRzdpP12JrP4vMUXFIPsV4YQRRUJHYT9mPFo KaBemeWZVIAnyauGAICm9PTZ0IfHGGmArsHVZnTDATK04e4YT0qobEnpvUp5JubE mMFgMQqSRXHlca/RT9JceWddPEEs/Ks= -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:28 2026 by rpki-client