$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa File: 192d22d0-af30-3acb-b853-5e328fdab43a.roa (raw, json) Hash identifier: L1RoxcFAX5olMRZWdp4MAtVnEEeuSnwYs9bZYuvg4is= Subject key identifier: 48:E7:CC:E5:7B:4F:D8:33:32:73:78:C1:A3:78:74:65:93:2D:DD:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A295A112BE6FF551F380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396615 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a2:95:a1:12:be:6f:f5:51:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=2ae53cf5-aa00-4d86-80d7-40888b84557f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:96:9e:c0:eb:4f:e4:0d:23:8d:44:d1:91: 7d:57:24:3e:a5:dc:d3:50:e6:8f:a7:91:be:85:b0: ee:e8:d6:95:8b:26:da:06:47:ef:27:b4:0a:18:ad: df:8a:aa:24:18:41:4c:a2:e1:a6:b5:77:07:6f:66: 63:71:e0:69:8b:75:9a:3b:e6:c7:8d:35:63:9f:8d: d6:5b:aa:4c:b8:b7:43:d2:e9:aa:f5:79:69:16:3f: c4:a0:d2:5e:9a:47:53:72:19:1e:d6:8b:dd:97:58: 5f:0c:b2:bd:48:31:cd:d2:62:85:87:c1:c0:7c:7a: b3:6c:26:ee:ba:bf:e9:52:3e:68:d6:b8:32:f1:78: cb:f2:96:3e:d4:53:34:35:1b:c5:d6:b0:bd:56:59: 8c:38:c7:01:7c:6c:5a:2e:e8:fe:81:1f:66:56:93: bc:e2:8d:c4:98:a7:b4:bc:9f:92:c0:85:ae:af:0a: c6:da:91:ce:6f:c3:94:cf:fc:03:c0:56:fb:f7:fd: f1:9c:65:8e:c0:23:a1:91:20:6f:ea:17:0b:ea:f5: 98:53:54:65:9f:8d:9c:92:5d:d0:50:df:bd:df:9f: 6d:53:48:b6:48:f9:87:83:01:40:34:22:be:ae:a3: 7c:0d:c6:c5:3e:cf:d8:6e:46:6d:71:80:da:69:1a: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:CC:E5:7B:4F:D8:33:32:73:78:C1:A3:78:74:65:93:2D:DD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192d22d0-af30-3acb-b853-5e328fdab43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:01:83:98:84:64:f0:8c:30:d9:36:2f:d7:8e:97:c0:df:68: cc:aa:64:bc:d1:8a:d0:4e:7d:78:6b:60:23:36:8c:eb:da:06: f7:ce:e2:3d:a1:ad:02:5c:36:8e:41:78:57:69:02:bc:30:6d: cf:1b:5b:66:ad:73:b3:a2:ba:31:9a:79:d2:43:ab:74:d7:d2: 85:5f:58:c2:88:6b:c1:31:6c:8c:7d:6f:74:f6:20:07:42:d0: 2f:0f:e0:6d:fb:1d:d4:39:72:17:46:bc:80:78:5d:99:6b:7f: b8:ae:78:e4:61:6a:3f:fd:f4:9b:9a:33:84:57:c4:8d:3e:b3: ad:bc:d8:79:4f:0c:3d:b1:72:e8:30:4b:0a:bb:67:09:84:0a: d5:40:59:42:8b:21:81:33:1b:95:b8:0c:53:8a:d4:ae:5c:1f: 1a:a3:25:b5:53:7f:fa:11:15:47:a3:b8:69:5c:ec:36:70:6b: 38:3d:18:7f:af:45:73:1b:77:72:a4:d9:76:5a:3a:7b:b3:9c: a7:30:bb:78:0d:91:ed:5d:33:4b:07:58:c0:6f:d0:af:6e:15: 6f:ae:34:05:fb:ae:12:d3:ba:bb:b9:3b:d1:bd:ce:97:f2:cb: 7d:57:d7:0c:3e:ce:7f:79:98:a7:da:ee:3d:d6:70:2f:dc:4f: ce:ef:f6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKKVoRK+b/VR84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MmFlNTNjZjUtYWEwMC00ZDg2LTgwZDctNDA4ODhiODQ1NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/qWnsDrT+QNI41E0ZF9VyQ+pdzTUOaPp5G+ hbDu6NaViybaBkfvJ7QKGK3fiqokGEFMouGmtXcHb2ZjceBpi3WaO+bHjTVjn43W W6pMuLdD0umq9XlpFj/EoNJemkdTchke1ovdl1hfDLK9SDHN0mKFh8HAfHqzbCbu ur/pUj5o1rgy8XjL8pY+1FM0NRvF1rC9VlmMOMcBfGxaLuj+gR9mVpO84o3EmKe0 vJ+SwIWurwrG2pHOb8OUz/wDwFb79/3xnGWOwCOhkSBv6hcL6vWYU1Rln42ckl3Q UN+9359tU0i2SPmHgwFANCK+rqN8DcbFPs/YbkZtcYDaaRoAfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjnzOV7T9gzMnN4waN4dGWTLd3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZDIyZDAtYWYzMC0z YWNiLWI4NTMtNWUzMjhmZGFiNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkBg5iEZPCMMNk2L9eOl8DfaMyqZLzRitBOfXhrYCM2jOvaBvfO4j2h rQJcNo5BeFdpArwwbc8bW2atc7OiujGaedJDq3TX0oVfWMKIa8ExbIx9b3T2IAdC 0C8P4G37HdQ5chdGvIB4XZlrf7iueORhaj/99JuaM4RXxI0+s6282HlPDD2xcugw Swq7ZwmECtVAWUKLIYEzG5W4DFOK1K5cHxqjJbVTf/oRFUejuGlc7DZwazg9GH+v RXMbd3Kk2XZaOnuznKcwu3gNke1dM0sHWMBv0K9uFW+uNAX7rhLTuru5O9G9zpfy y31X1ww+zn95mKfa7j3WcC/cT87v9nI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:34:52 2026 by rpki-client