$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa File: 2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa (raw, json) Hash identifier: EnlvzH/ANolAYn2GaB+RmwB5S5tP+NqbWjdExxtTWM8= Subject key identifier: D3:97:A6:46:72:F6:72:15:79:F8:92:A8:63:4E:FA:D1:EF:C5:DA:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D38B8DA72913A426EB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397198 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d3:8b:8d:a7:29:13:a4:26:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=eb06432b-9e61-432d-a0fc-c107b17b0a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:8a:bb:13:fc:32:1a:4c:74:e4:bb:0f:65: ef:b1:aa:1a:cf:13:49:9e:ed:ac:e3:0a:e0:f6:d2: ae:a2:d1:7a:8b:e6:8a:23:8f:09:e8:e0:e6:4b:d5: fe:31:7c:72:aa:25:72:0a:0e:03:bb:62:78:07:09: 37:1f:16:db:82:68:49:41:fc:14:a1:3f:d7:c4:ac: ad:c4:d8:bc:b8:12:9f:d7:71:d8:6c:b7:0a:6c:77: 9a:d0:f3:42:59:24:81:89:55:7a:31:cb:46:e1:f4: a5:35:75:0b:7e:0f:50:a7:2a:93:f5:bc:40:88:69: 5c:d7:a5:9b:d3:51:52:c4:ce:72:aa:dd:06:28:91: 0c:58:dd:f4:b2:0b:d2:ef:ce:4e:c4:c5:06:0c:d5: 6e:28:cd:6b:e4:b4:e0:15:8d:a3:0b:bd:54:c4:bd: cd:b0:41:66:4c:d6:26:24:97:ed:f5:c2:07:8a:0f: 29:13:59:91:4b:a5:4e:a6:30:9c:7f:89:4c:89:a5: ce:45:78:1a:ec:cf:a2:e9:80:a1:92:9c:34:7d:53: a9:8d:3e:15:c5:45:62:df:b5:49:a4:6e:0c:47:ce: 04:1d:a2:bd:7e:c2:f7:d5:bc:93:59:c1:42:67:89: 86:3b:59:ee:0c:1d:8a:7c:1f:48:20:c6:cb:ca:57: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:A6:46:72:F6:72:15:79:F8:92:A8:63:4E:FA:D1:EF:C5:DA:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2427aa7c-9cc5-3b05-a3f1-3c466a7fe80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ea:2f:f2:03:cc:01:46:d3:89:63:6a:c2:ca:45:a3:3b:c1: d4:5f:15:cb:c8:33:b6:e2:4e:38:3f:a9:97:f5:3a:a6:e8:22: c9:15:40:41:a5:fa:4c:20:c1:90:2b:a3:8a:7f:99:e1:44:7d: af:c9:63:59:43:e5:dd:2c:0a:54:26:40:22:3a:35:70:99:9a: ff:c0:81:5b:19:87:61:6e:36:66:49:2a:04:57:f1:8e:8d:c3: a1:c5:5b:c5:ba:9f:31:e5:75:51:c5:6e:21:da:2f:fc:f9:30: 6b:3d:42:e8:d8:be:46:51:fc:29:42:32:9f:5c:16:63:fc:bc: 88:4c:09:4a:40:bf:e1:b9:54:15:12:4e:2d:8c:a4:0e:bf:65: 10:ba:aa:20:04:41:ca:4d:6e:6a:7e:ee:ea:5b:1f:7c:d5:8f: 1f:8e:3e:a6:e7:73:e4:b8:79:44:0c:d1:0a:3b:bc:a6:f7:6e: 33:1c:2b:7c:d5:76:91:e3:15:56:47:52:7f:b3:5b:83:38:99: 13:c0:5b:00:bd:0a:f4:a1:02:4d:a5:6a:42:03:ba:2b:e2:a6: c5:33:c7:8e:e3:66:e0:39:90:e8:77:2c:a9:5b:03:11:5f:da: 6d:d7:34:88:01:dc:26:83:01:6d:b2:a8:2f:a0:7a:24:15:f5: 17:8f:cc:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNOLjacpE6Qm64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWIwNjQzMmItOWU2MS00MzJkLWEwZmMtYzEwN2IxN2IwYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf2KuxP8MhpMdOS7D2XvsaoazxNJnu2s4wrg 9tKuotF6i+aKI48J6ODmS9X+MXxyqiVyCg4Du2J4Bwk3HxbbgmhJQfwUoT/XxKyt xNi8uBKf13HYbLcKbHea0PNCWSSBiVV6MctG4fSlNXULfg9QpyqT9bxAiGlc16Wb 01FSxM5yqt0GKJEMWN30sgvS785OxMUGDNVuKM1r5LTgFY2jC71UxL3NsEFmTNYm JJft9cIHig8pE1mRS6VOpjCcf4lMiaXORXga7M+i6YChkpw0fVOpjT4VxUVi37VJ pG4MR84EHaK9fsL31byTWcFCZ4mGO1nuDB2KfB9IIMbLylfUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOXpkZy9nIVefiSqGNO+tHvxdrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjQyN2FhN2MtOWNjNS0z YjA1LWEzZjEtM2M0NjZhN2ZlODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTqL/IDzAFG04ljasLKRaM7wdRfFcvIM7biTjg/qZf1OqboIskVQEGl +kwgwZAro4p/meFEfa/JY1lD5d0sClQmQCI6NXCZmv/AgVsZh2FuNmZJKgRX8Y6N w6HFW8W6nzHldVHFbiHaL/z5MGs9QujYvkZR/ClCMp9cFmP8vIhMCUpAv+G5VBUS Ti2MpA6/ZRC6qiAEQcpNbmp+7upbH3zVjx+OPqbnc+S4eUQM0Qo7vKb3bjMcK3zV dpHjFVZHUn+zW4M4mRPAWwC9CvShAk2lakIDuivipsUzx47jZuA5kOh3LKlbAxFf 2m3XNIgB3CaDAW2yqC+geiQV9RePzLo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:10:33 2026 by rpki-client