$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa File: 459572fb-ad1b-3597-974f-68e154989cc8.roa (raw, json) Hash identifier: 3Weiyb6mGysPxGS9snjne459sX1njDjG+JKBK+aep1A= Subject key identifier: EB:23:AE:63:BB:0E:2B:1A:56:D1:E1:89:DC:45:E2:EB:E9:BB:A8:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D4213357FBBF4C745880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 211369 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d4:21:33:57:fb:bf:4c:74:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=6ad831c1-843a-4a38-b005-a589bdd40577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cc:0a:d4:46:26:90:6d:65:48:7e:d9:54:88: f9:4b:5e:74:a2:e6:b6:cb:45:47:cc:3e:6d:42:34: 73:b0:12:a8:1e:da:b0:c9:ee:01:0c:d6:b9:65:20: c9:aa:e2:00:3c:af:35:80:a0:fd:75:bc:9c:da:16: ae:47:a8:a7:9b:fc:b7:1f:40:ae:c7:b9:2f:37:ef: b4:33:1b:bf:ac:72:1c:36:4c:aa:97:32:ac:52:cf: c5:c6:7b:de:2d:f2:5c:50:47:35:f0:ab:c5:5b:7f: e2:70:01:d2:0d:2a:6b:fd:ba:ec:46:b7:12:14:47: 71:77:20:01:17:cc:eb:83:fc:59:89:8e:5d:4b:8f: b5:06:41:22:b7:69:16:d5:7f:84:f6:38:0d:23:92: eb:c4:e0:b0:61:fb:5f:aa:d4:0c:e0:25:09:72:9f: e4:7b:19:e9:c2:5b:71:70:7c:4f:50:a9:24:a7:9a: 9e:e6:c5:b1:53:10:7b:f3:fc:46:d8:3a:a3:e1:6d: ee:e1:f9:93:14:a5:e8:6e:16:00:1a:6f:38:80:2b: 61:53:49:29:6c:83:36:b9:45:db:06:83:be:51:7e: a5:21:6a:a8:4d:3b:ed:64:ae:72:27:6a:df:d9:93: 0d:49:c7:f8:19:0b:ae:14:17:a9:ac:4d:95:a6:a0: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:23:AE:63:BB:0E:2B:1A:56:D1:E1:89:DC:45:E2:EB:E9:BB:A8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/459572fb-ad1b-3597-974f-68e154989cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:08:f9:1a:9d:66:9c:86:3f:39:87:7f:81:f8:63:92:63:b0: ae:8a:6b:e1:9f:ea:3c:8d:07:66:81:b6:cc:45:52:ca:f5:1e: 59:7b:c0:50:d6:46:f2:aa:4e:89:02:a1:71:ee:1d:5f:9b:ed: 6e:92:0c:cc:ce:d5:8a:02:3b:64:4a:87:50:cf:29:ba:2c:b0: f5:9f:8b:b0:94:e6:4a:5f:42:26:ab:78:61:1f:20:e4:51:13: ad:f7:01:13:df:ff:29:6a:bd:2c:ef:15:5f:1d:59:59:8a:62: 09:98:ff:98:95:55:b3:2a:79:59:cc:01:bf:6e:b4:96:5f:89: eb:f2:74:0d:b8:4b:a9:a4:e9:eb:3a:c6:cd:43:93:ea:74:75: a6:b5:10:49:f5:66:18:91:7e:70:ec:ac:49:7d:2c:9c:c5:a8: 0a:30:ff:2c:d7:07:6e:ae:56:ee:c3:9c:55:3e:f6:49:d5:64: d4:10:8e:50:53:59:0c:12:c7:4e:53:86:11:1c:b7:98:87:be: bd:3c:ed:ca:df:46:73:47:63:b7:86:64:b9:bb:78:b3:09:3d: 43:c6:62:90:87:87:ca:e8:b0:1c:8f:9f:ac:a1:00:86:f9:80: 2a:2c:42:6b:b8:73:7c:24:48:18:aa:0f:f9:ef:93:11:d8:59: 5a:e3:50:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNQhM1f7v0x0WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NmFkODMxYzEtODQzYS00YTM4LWIwMDUtYTU4OWJkZDQwNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicwK1EYmkG1lSH7ZVIj5S150oua2y0VHzD5t QjRzsBKoHtqwye4BDNa5ZSDJquIAPK81gKD9dbyc2hauR6inm/y3H0Cux7kvN++0 Mxu/rHIcNkyqlzKsUs/FxnveLfJcUEc18KvFW3/icAHSDSpr/brsRrcSFEdxdyAB F8zrg/xZiY5dS4+1BkEit2kW1X+E9jgNI5LrxOCwYftfqtQM4CUJcp/kexnpwltx cHxPUKkkp5qe5sWxUxB78/xG2Dqj4W3u4fmTFKXobhYAGm84gCthU0kpbIM2uUXb BoO+UX6lIWqoTTvtZK5yJ2rf2ZMNScf4GQuuFBeprE2VpqBM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsjrmO7DisaVtHhidxF4uvpu6jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU5NTcyZmItYWQxYi0z NTk3LTk3NGYtNjhlMTU0OTg5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0I+RqdZpyGPzmHf4H4Y5JjsK6Ka+Gf6jyNB2aBtsxFUsr1Hll7wFDW RvKqTokCoXHuHV+b7W6SDMzO1YoCO2RKh1DPKbossPWfi7CU5kpfQiareGEfIORR E633ARPf/ylqvSzvFV8dWVmKYgmY/5iVVbMqeVnMAb9utJZfievydA24S6mk6es6 xs1Dk+p0daa1EEn1ZhiRfnDsrEl9LJzFqAow/yzXB26uVu7DnFU+9knVZNQQjlBT WQwSx05ThhEct5iHvr087crfRnNHY7eGZLm7eLMJPUPGYpCHh8rosByPn6yhAIb5 gCosQmu4c3wkSBiqD/nvkxHYWVrjUBE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:41 2026 by rpki-client