$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa File: 09447d8b-5279-3ff9-bc90-e46a1f94d759.roa (raw, json) Hash identifier: YRylwgBgY6eL+D4K1WCHLzxtjqyqZjPc5HwEZpo7ZmE= Subject key identifier: D7:B8:EC:63:28:84:75:C8:8E:A9:87:BC:71:A5:8D:AB:B3:2F:65:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D831FFD0B708B1C8DA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396611 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d8:31:ff:d0:b7:08:b1:c8:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=10630d91-cffe-4d63-a6a5-75461dadcef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:67:fd:7a:3d:db:29:41:63:34:9e:a1:1f: 34:d0:35:aa:fa:5e:d3:ac:a6:1a:b6:41:e5:c7:47: 3e:be:a9:50:3b:ea:5e:29:5e:b7:f7:ae:47:0c:11: 34:b3:7d:ed:e3:0e:7d:82:5a:b0:eb:f7:cb:41:cb: f5:d7:52:70:7c:02:51:d8:2e:8f:7c:9d:6b:41:3d: f4:3b:2d:b3:c0:de:c2:94:b2:97:9a:44:8c:57:93: 26:bf:64:67:40:83:86:df:ed:5a:4a:5b:95:07:7a: 6e:ad:e5:f3:3f:0b:f2:e3:2f:b1:92:8e:c2:71:ab: 92:71:b7:df:b9:1d:65:16:6d:3a:fb:94:18:5a:45: 2b:f2:ff:4e:d7:49:36:74:b7:73:b0:74:8c:11:ad: 91:60:2b:5c:d9:b5:ea:96:bb:67:1b:b7:b1:08:bb: 1e:cb:3b:79:4d:12:31:76:a9:16:06:7e:83:c0:59: 75:23:b9:7c:9e:ba:3d:ec:f4:c8:1b:df:92:0e:7c: 21:c4:ce:75:42:ed:96:d1:c5:b1:88:8a:7e:cd:67: 39:e8:7a:26:19:a1:d4:cf:8f:9e:e1:07:4c:cb:c9: 98:0e:21:35:37:eb:87:fb:8b:21:26:de:d2:98:97: 50:ae:19:cd:ea:65:2a:e2:70:65:c0:19:d7:f4:df: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B8:EC:63:28:84:75:C8:8E:A9:87:BC:71:A5:8D:AB:B3:2F:65:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/09447d8b-5279-3ff9-bc90-e46a1f94d759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:57:11:75:35:fe:aa:f1:fb:5e:92:0e:25:27:c2:a2:14:12: 04:51:53:3b:82:8c:20:28:5b:2d:cd:50:2b:27:f7:4f:e9:db: 22:1c:fe:a6:06:2c:7c:49:cc:3a:ed:9e:8b:2d:18:49:32:72: f4:29:c2:88:41:e2:e8:c2:65:d0:0c:04:91:a3:05:24:ce:3d: 81:bf:f5:7c:e9:31:02:ce:4a:a3:9e:b9:24:e0:f1:01:c2:5f: e5:82:2c:98:0f:e5:32:df:95:00:d8:3a:a7:aa:1f:f9:8a:1e: 5f:96:87:83:f0:94:e7:9d:f1:78:9a:80:c3:ad:43:c9:52:19: 6e:a1:fe:ae:8a:16:3d:dd:f1:dd:f0:09:89:e6:54:13:6a:51: 49:e5:93:b3:d4:bb:14:22:a0:1a:42:48:90:f4:d3:80:3f:85: e8:ed:90:47:cd:02:a5:b8:49:56:38:af:49:ff:4e:e7:94:67: 5a:18:b0:ed:51:a1:80:69:1f:83:ae:37:9c:73:ff:b8:2c:6c: 50:54:b6:8e:1f:fb:86:d6:7c:ac:5c:73:1a:7f:b5:77:93:3a: 93:08:a7:1d:1a:f2:58:e0:8f:77:26:33:17:e5:31:d4:5f:ca: d1:c1:a2:6e:d7:a3:58:1f:73:c5:0d:24:19:12:e9:a0:d4:f4: 6b:2f:46:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNgx/9C3CLHI2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MTA2MzBkOTEtY2ZmZS00ZDYzLWE2YTUtNzU0NjFkYWRjZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxhn/Xo92ylBYzSeoR800DWq+l7TrKYatkHl x0c+vqlQO+peKV63965HDBE0s33t4w59glqw6/fLQcv111JwfAJR2C6PfJ1rQT30 Oy2zwN7ClLKXmkSMV5Mmv2RnQIOG3+1aSluVB3pureXzPwvy4y+xko7CcauScbff uR1lFm06+5QYWkUr8v9O10k2dLdzsHSMEa2RYCtc2bXqlrtnG7exCLseyzt5TRIx dqkWBn6DwFl1I7l8nro97PTIG9+SDnwhxM51Qu2W0cWxiIp+zWc56HomGaHUz4+e 4QdMy8mYDiE1N+uH+4shJt7SmJdQrhnN6mUq4nBlwBnX9N8CBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe47GMohHXIjqmHvHGljauzL2XBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk0NDdkOGItNTI3OS0z ZmY5LWJjOTAtZTQ2YTFmOTRkNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5XEXU1/qrx+16SDiUnwqIUEgRRUzuCjCAoWy3NUCsn90/p2yIc/qYG LHxJzDrtnostGEkycvQpwohB4ujCZdAMBJGjBSTOPYG/9XzpMQLOSqOeuSTg8QHC X+WCLJgP5TLflQDYOqeqH/mKHl+Wh4PwlOed8XiagMOtQ8lSGW6h/q6KFj3d8d3w CYnmVBNqUUnlk7PUuxQioBpCSJD004A/hejtkEfNAqW4SVY4r0n/TueUZ1oYsO1R oYBpH4OuN5xz/7gsbFBUto4f+4bWfKxccxp/tXeTOpMIpx0a8ljgj3cmMxflMdRf ytHBom7Xo1gfc8UNJBkS6aDU9GsvRrU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:10 2026 by rpki-client