$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa File: 4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa (raw, json) Hash identifier: eXtXeXij5DDPq/Nasm3t/E7wCR1WOO6n1jeHx1UpJ9E= Subject key identifier: 03:A3:A8:CF:DA:FD:68:53:C8:D6:7D:96:7A:9C:FC:1E:8F:E4:4E:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D39AC1B6D342D6C91600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396564 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d3:9a:c1:b6:d3:42:d6:c9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=db879134-d623-42a2-a951-0ec7a1024ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:90:de:c6:99:c1:33:45:de:c3:30:f1:d0: 42:bf:38:b5:6e:60:98:e0:fd:f3:15:1c:7b:4f:57: 6d:10:d3:28:10:95:94:50:12:6a:5d:a2:e3:1e:f2: d9:3b:4e:4b:16:6f:4c:8d:d9:24:cb:85:51:5d:c6: c5:ce:0b:32:40:56:f3:40:cd:10:1b:ff:49:75:1c: d1:fc:64:3b:d0:fb:cc:63:0f:c0:43:2d:9c:0d:e2: 77:74:37:fb:8e:d9:c9:84:a0:58:74:4b:3c:7f:5d: 8b:8b:a2:89:9f:47:2e:a2:57:4b:1d:dc:20:fb:ba: f7:fd:da:06:e6:32:67:3b:2e:22:47:f6:c9:b7:11: 72:23:53:d7:e8:97:3d:d7:b2:81:84:7c:6c:64:bd: 9a:2c:82:18:5a:fd:07:12:0a:2f:44:9e:db:d5:c5: 24:42:14:2f:e9:78:86:02:de:03:06:ef:4b:16:18: 2e:01:82:ce:76:bb:17:94:9c:36:55:3b:67:97:cf: b3:0f:97:29:1f:e7:84:1b:e4:63:bc:a7:9a:4b:98: fb:67:20:45:8a:d4:30:d8:9c:51:e5:06:39:44:b6: be:88:b8:0c:a9:b5:ff:6f:1d:ac:51:a8:23:68:15: 13:81:ec:dc:8e:a0:e0:a2:4b:22:d0:d9:cf:13:85: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:A8:CF:DA:FD:68:53:C8:D6:7D:96:7A:9C:FC:1E:8F:E4:4E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4fe38a99-8eb1-3e82-851c-a58bceba82ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4d:8f:9f:da:ff:97:07:6f:30:a7:22:90:1d:ad:46:72:12: 4b:82:58:1e:bf:ff:e5:56:42:5c:ff:25:7b:d3:d3:71:24:72: 04:b3:32:89:83:15:15:52:ad:3a:5d:d3:01:f7:2a:83:8c:97: 9a:ed:e7:4f:f3:2b:a7:8b:02:94:1f:2a:aa:25:db:3f:7c:33: 75:80:c6:5e:1e:78:29:76:26:6d:a5:6e:40:e2:c6:66:31:d0: cd:46:73:22:f2:d1:86:ad:93:d5:84:e3:58:7b:fc:e8:d8:50: 5e:d6:b6:74:d1:2e:da:d0:ad:fd:93:33:06:7f:7d:b6:c3:f6: 0c:02:37:41:53:b8:1d:d5:48:17:24:c7:57:4a:2e:03:17:10: ee:b1:15:f9:4d:38:d5:4b:86:1d:e5:2a:63:23:c2:98:98:18: f9:ee:c2:1c:f2:40:fe:71:c4:73:85:b7:13:6f:d7:f1:82:6f: 10:fc:b4:42:b1:03:e1:4e:ed:50:6e:50:b9:78:4b:cd:cf:da: ad:0c:33:d4:22:24:85:b2:7a:1e:a5:74:33:6c:b2:e7:a6:a7: 22:57:f2:e9:d0:ac:42:c4:c3:35:48:b1:e2:49:f0:61:4c:87: 9c:fe:e4:f1:6e:60:91:18:a4:db:ee:49:1d:1d:98:ac:6e:29: c6:24:df:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNOawbbTQtbJFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZGI4NzkxMzQtZDYyMy00MmEyLWE5NTEtMGVjN2ExMDI0ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS2Q3saZwTNF3sMw8dBCvzi1bmCY4P3zFRx7 T1dtENMoEJWUUBJqXaLjHvLZO05LFm9Mjdkky4VRXcbFzgsyQFbzQM0QG/9JdRzR /GQ70PvMYw/AQy2cDeJ3dDf7jtnJhKBYdEs8f12Li6KJn0cuoldLHdwg+7r3/doG 5jJnOy4iR/bJtxFyI1PX6Jc917KBhHxsZL2aLIIYWv0HEgovRJ7b1cUkQhQv6XiG At4DBu9LFhguAYLOdrsXlJw2VTtnl8+zD5cpH+eEG+RjvKeaS5j7ZyBFitQw2JxR 5QY5RLa+iLgMqbX/bx2sUagjaBUTgezcjqDgoksi0NnPE4U0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOjqM/a/WhTyNZ9lnqc/B6P5E7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGZlMzhhOTktOGViMS0z ZTgyLTg1MWMtYTU4YmNlYmE4MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNNj5/a/5cHbzCnIpAdrUZyEkuCWB6//+VWQlz/JXvT03EkcgSzMomD FRVSrTpd0wH3KoOMl5rt50/zK6eLApQfKqol2z98M3WAxl4eeCl2Jm2lbkDixmYx 0M1GcyLy0Yatk9WE41h7/OjYUF7WtnTRLtrQrf2TMwZ/fbbD9gwCN0FTuB3VSBck x1dKLgMXEO6xFflNONVLhh3lKmMjwpiYGPnuwhzyQP5xxHOFtxNv1/GCbxD8tEKx A+FO7VBuULl4S83P2q0MM9QiJIWyeh6ldDNssuempyJX8unQrELEwzVIseJJ8GFM h5z+5PFuYJEYpNvuSR0dmKxuKcYk35I= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:06 2026 by rpki-client