$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa File: 3b4db415-f68a-3719-bef4-43680aafc957.roa (raw, json) Hash identifier: bjcJzVCPoXzaWIkA9Aox91/sqmIN9wpEKVHxjGnHmBY= Subject key identifier: 51:9F:9C:F9:3B:85:94:41:31:32:E7:DE:86:A8:4A:5E:5D:A0:FC:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A15F07555E4241E21200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396580 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a1:5f:07:55:5e:42:41:e2:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f1641ce0-2c05-4de3-bfe7-f42917492d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:c9:61:84:be:99:8f:f6:54:dc:a2:91:81: 5f:fa:03:19:f6:cc:c5:5f:dd:b9:5b:fe:01:29:ea: 3f:fc:01:6f:b8:3a:24:17:87:75:b2:f9:e0:80:53: fa:59:47:d5:e5:75:62:72:26:d0:c7:c1:a3:56:4f: 8a:66:7b:55:68:f0:9a:2b:4c:97:4f:c1:6b:e0:1b: e9:f5:26:0d:2f:de:7b:78:8e:97:c6:d5:68:44:68: 4d:0b:7b:b8:7d:8b:7c:79:2f:22:b7:61:1f:52:26: 5e:c8:1a:96:50:bc:fd:2d:31:97:cd:27:7e:e9:1d: fa:b8:1b:e7:09:80:09:41:45:c1:f9:c9:9d:08:1c: 9a:11:83:e1:b2:d1:be:dc:e4:52:d1:34:ac:33:76: dd:5c:2d:a6:17:64:d9:0f:e2:be:ac:9c:8c:b1:84: e5:e9:53:5c:92:84:92:9f:6a:89:91:2e:61:9c:9e: 58:5e:66:39:2c:0c:33:2e:34:65:34:c4:7b:68:3b: d6:fe:20:e2:e2:94:f8:c2:64:76:86:b5:32:1c:a1: f8:88:b0:05:ba:9c:7a:5a:3b:be:ce:d4:75:e0:20: 5c:5a:67:6f:03:6b:fe:96:4b:6f:d4:b3:4a:9f:7c: 03:86:c6:b5:79:5f:01:b0:cb:72:cb:18:76:7e:25: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9F:9C:F9:3B:85:94:41:31:32:E7:DE:86:A8:4A:5E:5D:A0:FC:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3b4db415-f68a-3719-bef4-43680aafc957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:fe:0e:d3:34:df:1b:ba:ef:93:7e:a1:34:32:bc:32:4e:32: 0d:cd:23:19:84:56:49:ad:f7:8b:66:cb:2c:f5:78:c5:35:a7: 0a:2a:6f:c8:20:18:0d:4f:2c:7d:36:6d:a6:7d:92:d9:57:95: 80:cc:ca:ae:90:0b:8a:d5:77:2d:a8:de:39:7a:19:ff:47:d6: 19:4c:7a:1b:cb:c2:d3:71:a4:0d:25:5e:1e:d7:ce:d5:14:6e: 05:0e:1b:e7:df:8b:07:37:8b:7d:5c:aa:63:ae:47:1a:37:4e: 9f:c5:05:c5:c3:ee:d2:b7:05:58:31:2f:3d:2f:e3:9d:c2:00: 5e:88:f5:bb:07:56:32:c0:99:b7:4f:5e:36:3b:c6:9c:22:ad: bd:07:8f:24:d4:f9:ef:96:c6:93:24:56:0d:7d:40:3e:a5:29: 5f:1f:0c:10:75:fe:02:69:13:e0:dc:c6:10:c8:41:c0:6b:12: 30:d4:b2:30:7f:ad:1d:5c:34:51:05:36:dd:43:f2:4c:60:67: 41:07:7f:65:28:db:b2:b9:52:61:69:c0:26:d4:74:1d:8f:2f: 11:cb:8f:26:c0:36:eb:43:60:49:e2:d5:66:90:37:0b:1f:4b: cf:7f:ed:8f:87:a7:14:27:ef:49:a1:cb:d0:e1:48:84:bf:dc: 25:bf:35:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKFfB1VeQkHiEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjE2NDFjZTAtMmMwNS00ZGUzLWJmZTctZjQyOTE3NDkyZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e/JYYS+mY/2VNyikYFf+gMZ9szFX925W/4B Keo//AFvuDokF4d1svnggFP6WUfV5XVicibQx8GjVk+KZntVaPCaK0yXT8Fr4Bvp 9SYNL957eI6XxtVoRGhNC3u4fYt8eS8it2EfUiZeyBqWULz9LTGXzSd+6R36uBvn CYAJQUXB+cmdCByaEYPhstG+3ORS0TSsM3bdXC2mF2TZD+K+rJyMsYTl6VNckoSS n2qJkS5hnJ5YXmY5LAwzLjRlNMR7aDvW/iDi4pT4wmR2hrUyHKH4iLAFupx6Wju+ ztR14CBcWmdvA2v+lktv1LNKn3wDhsa1eV8BsMtyyxh2fiWjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGfnPk7hZRBMTLn3oaoSl5doPyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2I0ZGI0MTUtZjY4YS0z NzE5LWJlZjQtNDM2ODBhYWZjOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb+DtM03xu675N+oTQyvDJOMg3NIxmEVkmt94tmyyz1eMU1pwoqb8gg GA1PLH02baZ9ktlXlYDMyq6QC4rVdy2o3jl6Gf9H1hlMehvLwtNxpA0lXh7XztUU bgUOG+ffiwc3i31cqmOuRxo3Tp/FBcXD7tK3BVgxLz0v453CAF6I9bsHVjLAmbdP XjY7xpwirb0HjyTU+e+WxpMkVg19QD6lKV8fDBB1/gJpE+DcxhDIQcBrEjDUsjB/ rR1cNFEFNt1D8kxgZ0EHf2Uo27K5UmFpwCbUdB2PLxHLjybANutDYEni1WaQNwsf S89/7Y+HpxQn70mhy9DhSIS/3CW/NVI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:07 2026 by rpki-client