$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa File: 0aaa9039-dcca-3276-9c89-56abd2b01248.roa (raw, json) Hash identifier: Ext+OY3hplPTO3BktOWb0CRIOycmNuhAq5arWS35bZk= Subject key identifier: 5A:7F:E8:ED:44:74:62:F1:54:10:9B:62:CB:6C:34:A5:8B:95:D4:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B27311ED3571915FE800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 27544 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b2:73:11:ed:35:71:91:5f:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=7af78fbd-9efd-45e8-b639-2177a7b51445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:99:fe:05:66:3f:97:71:40:6b:d4:ae:00: 40:54:04:07:5e:ca:c2:e5:f9:b4:11:a0:8b:18:ea: f4:12:47:1e:32:05:78:fc:e0:a3:3e:87:4d:91:e5: 64:c3:f1:78:3e:ab:90:28:f9:32:81:9d:23:16:d9: 3e:cb:e4:7a:73:1d:8b:00:0f:3e:64:b0:5c:c8:1f: 4a:41:31:55:e4:ea:b3:f9:e6:11:5a:6f:77:36:3e: f3:52:44:d7:d1:52:cd:b8:62:c7:ae:86:55:eb:1a: 4c:68:03:66:a6:89:83:a7:a7:05:46:fe:e1:b1:51: 68:eb:15:02:6f:d6:e9:91:ee:a1:d7:2a:b1:61:39: 11:98:74:bf:72:26:c5:3e:8b:27:47:b3:85:29:cd: f0:33:22:8d:61:e0:e6:4f:ab:e8:95:bc:b6:39:52: 5a:b2:1d:db:f9:b3:3d:b8:00:8a:6e:c9:69:02:63: df:1b:2c:40:a8:2a:47:95:61:a6:ce:fa:0f:56:00: bb:7e:10:f7:78:c7:32:94:71:fc:db:06:b5:2e:07: fc:25:d9:56:59:24:43:81:6d:68:28:89:90:fa:66: e5:d0:42:5b:ab:c1:85:04:f3:53:06:9c:3d:3c:8f: 84:39:e5:08:ae:54:ed:23:0d:36:ca:e6:56:0c:34: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7F:E8:ED:44:74:62:F1:54:10:9B:62:CB:6C:34:A5:8B:95:D4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0aaa9039-dcca-3276-9c89-56abd2b01248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b1:07:6a:b4:f5:96:80:4e:65:e6:f4:09:71:2d:c4:b7:e0: 28:f8:5b:d5:b2:83:0e:3b:2c:5f:54:2a:4d:57:ea:4e:2e:b9: ca:a1:4c:b4:9c:1d:d5:40:c6:b2:8d:11:12:f7:a6:5b:f1:16: 9d:b0:14:89:53:0a:3b:67:9b:8e:28:72:dc:3b:c6:75:b1:75: 50:4b:94:84:5b:f7:c1:a7:8e:61:5a:b7:8b:c4:f4:30:6b:47: a6:90:a7:43:ef:86:0c:80:e3:68:cb:a5:17:64:71:48:11:ac: 82:cd:78:f6:ce:96:49:26:1b:d8:17:9d:34:d9:b2:f5:1e:9e: f4:e8:52:64:e7:42:0e:47:00:05:8a:f5:1b:7e:23:99:0e:38: 3e:19:c9:db:2c:b2:5f:65:ea:00:72:06:33:8f:1c:3e:55:95: 93:e4:68:93:33:c1:de:7e:40:f7:00:43:60:22:d2:af:53:8f: 4a:39:74:65:ca:1e:e3:ab:4c:87:9c:29:81:c4:62:d1:60:82: 69:1a:59:eb:bf:36:62:1d:fe:db:3c:13:f5:4c:fa:08:65:c8: 43:ee:e9:51:f2:ee:07:18:39:07:b4:ce:01:6b:37:9d:6f:6a: 7d:e7:45:65:2f:a1:05:b9:13:7e:10:15:a1:1c:ec:13:87:02: 73:0f:9a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLJzEe01cZFf6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk N2FmNzhmYmQtOWVmZC00NWU4LWI2MzktMjE3N2E3YjUxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDmZ/gVmP5dxQGvUrgBAVAQHXsrC5fm0EaCL GOr0EkceMgV4/OCjPodNkeVkw/F4PquQKPkygZ0jFtk+y+R6cx2LAA8+ZLBcyB9K QTFV5Oqz+eYRWm93Nj7zUkTX0VLNuGLHroZV6xpMaANmpomDp6cFRv7hsVFo6xUC b9bpke6h1yqxYTkRmHS/cibFPosnR7OFKc3wMyKNYeDmT6volby2OVJash3b+bM9 uACKbslpAmPfGyxAqCpHlWGmzvoPVgC7fhD3eMcylHH82wa1Lgf8JdlWWSRDgW1o KImQ+mbl0EJbq8GFBPNTBpw9PI+EOeUIrlTtIw02yuZWDDQs2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp/6O1EdGLxVBCbYstsNKWLldT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFhYTkwMzktZGNjYS0z Mjc2LTljODktNTZhYmQyYjAxMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEixB2q09ZaATmXm9AlxLcS34Cj4W9Wygw47LF9UKk1X6k4uucqhTLSc HdVAxrKNERL3plvxFp2wFIlTCjtnm44octw7xnWxdVBLlIRb98GnjmFat4vE9DBr R6aQp0PvhgyA42jLpRdkcUgRrILNePbOlkkmG9gXnTTZsvUenvToUmTnQg5HAAWK 9Rt+I5kOOD4Zydsssl9l6gByBjOPHD5VlZPkaJMzwd5+QPcAQ2Ai0q9Tj0o5dGXK HuOrTIecKYHEYtFggmkaWeu/NmId/ts8E/VM+ghlyEPu6VHy7gcYOQe0zgFrN51v an3nRWUvoQW5E34QFaEc7BOHAnMPmu4= -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:02 2026 by rpki-client