$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa File: 3b069af5-8b25-354c-8d61-259a5210c9bd.roa (raw, json) Hash identifier: CTdj89j3lkd8hJiYdoXV1gdByxqOc83s+7HQALMQwlk= Subject key identifier: F8:31:3E:D6:17:9F:E8:FC:51:AD:4E:A2:FD:0C:7C:C1:37:05:A2:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D7E476AB8B135746CA5E Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397199 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d7:e4:76:ab:8b:13:57:46:ca:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=2db53a7e-e197-45e7-a95f-d49d9b4e8243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:67:ef:0b:c2:ac:80:db:90:98:dd:6d:84: 81:71:10:8c:e1:90:91:6b:f3:1d:1c:68:9b:da:a3: 49:37:7c:31:47:d1:82:8f:1d:ce:ff:47:40:38:44: d4:b6:e7:0e:3c:d7:92:3a:17:19:e9:36:d1:eb:92: 1e:38:f0:e8:ea:a0:91:2a:06:86:76:c4:07:89:7a: 5b:d1:7a:5e:7a:31:ec:df:d4:9f:f5:10:a9:67:63: 96:6f:0f:de:95:7d:84:cf:e0:0d:11:f2:3c:56:fd: 6e:68:fe:8e:52:80:26:e0:de:ff:21:38:13:26:ed: b3:db:bb:9c:aa:de:00:b3:60:36:73:10:97:ac:c4: 54:6d:bc:86:cd:87:60:16:05:a5:1f:78:6a:df:68: 0a:c2:f7:e1:ab:84:d7:b5:87:aa:84:13:33:27:f9: ed:91:e2:12:1a:3e:63:bb:c9:3d:9c:c0:0f:e2:da: 0c:1a:7c:26:95:15:b8:15:8a:52:ff:74:d8:82:ef: 07:63:33:ec:a8:b3:5d:91:83:88:ec:ff:4f:d8:84: b2:11:24:dc:8e:0a:9a:cc:ec:2e:1b:65:8f:16:1d: 35:f4:04:8b:44:9d:dc:bc:29:48:20:97:00:18:b5: 18:24:b8:70:aa:06:90:d5:5a:33:0f:53:ac:6e:ed: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:31:3E:D6:17:9F:E8:FC:51:AD:4E:A2:FD:0C:7C:C1:37:05:A2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b069af5-8b25-354c-8d61-259a5210c9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ed:54:89:e0:1e:68:11:5e:3b:c5:f9:69:0d:2f:1d:4b:b5: 95:8d:1b:69:44:89:58:40:4e:f7:36:a3:23:a8:ff:9d:13:13: 5d:cf:ce:0a:37:8c:e7:ad:3d:59:3b:9c:49:7c:da:f2:fc:b8: 40:e1:7a:e8:f3:f8:9c:4d:d5:55:f8:d3:d3:0a:97:f4:18:10: 0d:15:f5:b4:63:f8:25:e1:cf:29:ad:91:5a:c8:2f:52:0c:c7: 57:61:66:f6:d3:a8:d8:ae:1e:ae:00:15:71:70:ee:ec:73:66: 32:1b:0a:38:fd:f9:0c:52:be:e4:d5:12:e8:fa:53:67:5a:20: a0:a5:cd:8b:f4:2e:03:9d:b5:47:34:ef:5f:ce:c5:b4:bb:fb: 37:82:fa:bf:fa:c6:35:32:76:f6:91:ed:bf:94:a9:9a:27:d8: 51:6c:9a:a3:35:0a:3c:d6:67:da:db:c5:e4:90:16:9a:a5:fb: ee:89:64:05:e2:27:3b:e5:c6:0a:5c:46:eb:fe:00:56:c3:30: 2f:84:0d:6c:58:40:8c:4e:be:8c:12:6f:41:bd:ab:6e:95:49: c9:72:d5:c2:84:78:37:59:f8:65:d0:21:b8:1a:74:06:0c:52: 6a:dc:dd:4e:f4:7d:fd:26:7a:37:78:23:8a:6f:84:aa:92:97: 37:f3:61:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNfkdquLE1dGyl4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MmRiNTNhN2UtZTE5Ny00NWU3LWE5NWYtZDQ5ZDliNGU4MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkehn7wvCrIDbkJjdbYSBcRCM4ZCRa/MdHGib 2qNJN3wxR9GCjx3O/0dAOETUtucOPNeSOhcZ6TbR65IeOPDo6qCRKgaGdsQHiXpb 0XpeejHs39Sf9RCpZ2OWbw/elX2Ez+ANEfI8Vv1uaP6OUoAm4N7/ITgTJu2z27uc qt4As2A2cxCXrMRUbbyGzYdgFgWlH3hq32gKwvfhq4TXtYeqhBMzJ/ntkeISGj5j u8k9nMAP4toMGnwmlRW4FYpS/3TYgu8HYzPsqLNdkYOI7P9P2ISyESTcjgqazOwu G2WPFh019ASLRJ3cvClIIJcAGLUYJLhwqgaQ1VozD1Osbu2E+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgxPtYXn+j8Ua1Oov0MfME3BaIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2IwNjlhZjUtOGIyNS0z NTRjLThkNjEtMjU5YTUyMTBjOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/tVIngHmgRXjvF+WkNLx1LtZWNG2lEiVhATvc2oyOo/50TE13Pzgo3 jOetPVk7nEl82vL8uEDheujz+JxN1VX409MKl/QYEA0V9bRj+CXhzymtkVrIL1IM x1dhZvbTqNiuHq4AFXFw7uxzZjIbCjj9+QxSvuTVEuj6U2daIKClzYv0LgOdtUc0 71/OxbS7+zeC+r/6xjUydvaR7b+UqZon2FFsmqM1CjzWZ9rbxeSQFpql++6JZAXi JzvlxgpcRuv+AFbDMC+EDWxYQIxOvowSb0G9q26VScly1cKEeDdZ+GXQIbgadAYM Umrc3U70ff0mejd4I4pvhKqSlzfzYWE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:13 2026 by rpki-client