$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16f8fccd-8b71-3321-8b1c-9fe82bce66f4.roa File: 16f8fccd-8b71-3321-8b1c-9fe82bce66f4.roa (raw, json) Hash identifier: amF76kNnsGO6b2wb9fIsyVmE7lY0cYEOA/vL20RLeWI= Subject key identifier: C6:8A:FC:9A:20:7C:4D:07:51:97:8E:22:21:D4:17:99:F6:CB:62:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A2CCE7CBBE6F90B00EC4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16f8fccd-8b71-3321-8b1c-9fe82bce66f4.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396551 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a2:cc:e7:cb:be:6f:90:b0:0e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=41e5306a-8f01-45b5-b366-e27df7ee5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:13:52:81:59:0c:66:6a:9d:a1:42:69:82: 1c:af:9b:fc:15:9b:27:81:93:2b:78:ee:b6:78:be: 83:73:7f:5a:6f:e5:e0:c9:3a:f0:43:02:7e:06:4d: 28:c7:6c:af:8a:c4:f1:93:d9:b8:29:43:d2:0a:41: d3:cb:07:9b:75:1e:32:2a:21:6c:db:f0:21:3f:a6: 97:88:63:71:d4:c1:37:46:d8:09:df:92:56:e3:1d: 23:a5:cf:a7:47:3f:5a:75:d9:d0:92:8f:76:32:b8: c0:49:a5:19:d9:cf:57:82:bc:0b:e6:43:12:ff:a7: 08:ff:cf:c3:46:ed:92:0a:96:3a:02:9d:fe:75:d6: cf:61:e1:d4:37:3f:88:c3:95:83:6d:c4:aa:0d:8a: 4a:9d:49:fc:d5:02:b3:cc:a0:28:8e:26:31:fd:4b: 5e:e4:b9:c0:e3:3c:7e:f8:51:08:ca:67:d6:76:76: 93:7b:80:15:b7:bf:26:4f:82:f8:87:2a:80:f5:34: 3e:3b:cb:64:43:31:03:34:23:c3:b3:82:60:74:70: 44:a9:9e:d4:15:20:77:74:cb:65:84:ab:09:93:75: 98:1d:b7:03:47:8f:ac:e8:24:16:a8:30:a2:85:4a: cf:ec:e6:d1:00:fe:81:fd:cb:9e:eb:ca:33:73:b1: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:FC:9A:20:7C:4D:07:51:97:8E:22:21:D4:17:99:F6:CB:62:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/16f8fccd-8b71-3321-8b1c-9fe82bce66f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:cb:64:d4:2e:23:ba:9e:68:5c:43:00:e7:9e:b8:ed:16:68: 29:30:2a:1f:0d:5e:a5:12:a8:ee:fa:e0:d5:84:56:75:c5:c0: 26:61:a4:03:f9:ed:a2:ed:f3:28:0d:64:19:42:ae:c9:74:ff: 38:b3:0b:02:96:f3:f2:50:96:c7:9b:29:c2:64:2d:05:7f:51: c2:57:fd:71:0a:95:76:ef:91:74:d3:73:57:b0:9d:23:20:6f: 4a:db:82:6f:4a:87:05:e2:86:9a:6f:cf:91:df:ed:46:1e:9c: 66:29:48:20:9f:78:84:3e:aa:53:e6:86:86:43:d9:3b:ab:bf: ea:c8:ec:b4:6c:d2:a2:0d:60:a8:7c:27:7c:48:08:5c:2e:36: 4e:d1:bc:97:e3:94:a8:a9:e9:76:4a:28:ac:26:35:68:8b:97: 92:3d:f6:88:8e:7c:be:ed:fa:eb:9c:8d:99:e7:3d:33:49:fe: 5d:89:f1:6d:8f:ef:37:66:4e:f6:e3:9e:a8:17:43:97:d8:94: cd:32:e4:ff:d6:6c:96:d6:2c:f2:19:fa:09:38:0e:dc:63:64: a0:b4:11:8d:70:eb:95:d6:ac:94:7e:44:e7:4a:34:55:d6:80: 34:c0:1f:cf:c6:b9:0a:4e:87:ba:5c:92:50:40:b1:f4:1d:f7: 5d:55:d0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKLM58u+b5CwDsQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NDFlNTMwNmEtOGYwMS00NWI1LWIzNjYtZTI3ZGY3ZWU1MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcQTUoFZDGZqnaFCaYIcr5v8FZsngZMreO62 eL6Dc39ab+XgyTrwQwJ+Bk0ox2yvisTxk9m4KUPSCkHTywebdR4yKiFs2/AhP6aX iGNx1ME3RtgJ35JW4x0jpc+nRz9addnQko92MrjASaUZ2c9XgrwL5kMS/6cI/8/D Ru2SCpY6Ap3+ddbPYeHUNz+Iw5WDbcSqDYpKnUn81QKzzKAojiYx/Ute5LnA4zx+ +FEIymfWdnaTe4AVt78mT4L4hyqA9TQ+O8tkQzEDNCPDs4JgdHBEqZ7UFSB3dMtl hKsJk3WYHbcDR4+s6CQWqDCihUrP7ObRAP6B/cue68ozc7HvgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaK/JogfE0HUZeOIiHUF5n2y2JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTZmOGZjY2QtOGI3MS0z MzIxLThiMWMtOWZlODJiY2U2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfLZNQuI7qeaFxDAOeeuO0WaCkwKh8NXqUSqO764NWEVnXFwCZhpAP5 7aLt8ygNZBlCrsl0/zizCwKW8/JQlsebKcJkLQV/UcJX/XEKlXbvkXTTc1ewnSMg b0rbgm9KhwXihppvz5Hf7UYenGYpSCCfeIQ+qlPmhoZD2Turv+rI7LRs0qINYKh8 J3xICFwuNk7RvJfjlKip6XZKKKwmNWiLl5I99oiOfL7t+uucjZnnPTNJ/l2J8W2P 7zdmTvbjnqgXQ5fYlM0y5P/WbJbWLPIZ+gk4DtxjZKC0EY1w65XWrJR+ROdKNFXW gDTAH8/GuQpOh7pcklBAsfQd911V0Cw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:52 2026 by rpki-client