$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa File: 5274d554-e4b1-3b34-8cfa-acf399066c9c.roa (raw, json) Hash identifier: 93ZPSa7ueCD+2OTNU3ZA8WHnkDdQu1HXgn61aWY4m80= Subject key identifier: D7:52:FE:07:63:34:8E:FB:97:65:06:9D:C0:6A:2B:DB:04:E1:88:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49A0FB23D8C60E1444180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 19836 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9a:0f:b2:3d:8c:60:e1:44:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=cd9c9ad7-d95e-440a-92e9-428e3295bcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:87:7e:8e:cb:41:4e:59:c0:9f:af:72:59: 4c:37:fb:1c:3c:8e:23:90:eb:ba:ae:76:29:97:db: 72:a8:b6:e3:af:cd:58:87:62:53:56:3c:38:ec:85: c9:f3:c0:89:77:94:e5:49:dd:ca:1e:d9:81:99:67: 3b:36:18:27:3f:35:96:21:b5:2b:44:0f:8b:b3:28: c3:6e:56:74:9e:b2:9c:57:e3:e9:ec:5c:88:4d:0e: 9b:e7:28:9c:53:6c:44:cd:d1:f3:42:57:0a:54:ec: b8:8a:5d:6f:dd:a6:98:a3:49:23:6b:3f:4c:4a:e1: 9f:9a:eb:1d:dd:ba:f9:69:46:0c:84:9e:ed:ae:9d: aa:72:8a:89:ad:18:e7:34:b3:b6:04:8f:06:47:ed: c7:6f:08:10:b9:14:64:9c:82:29:df:37:04:87:d9: e4:c9:ba:b1:e6:95:dc:c2:fa:af:dc:a2:93:67:09: 55:3b:eb:79:97:4a:26:01:78:d4:c0:73:5e:8b:4f: b3:fb:d9:1f:b4:8c:39:2d:6c:53:70:81:3b:da:61: bd:20:a0:34:d8:35:3a:ca:ce:33:9a:1f:4d:42:54: 7a:9a:3e:34:36:d7:a6:b7:4d:f5:a6:d0:49:5d:73: 63:b7:f4:1b:45:d4:2a:d5:b8:43:c7:e8:63:66:d3: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:52:FE:07:63:34:8E:FB:97:65:06:9D:C0:6A:2B:DB:04:E1:88:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5274d554-e4b1-3b34-8cfa-acf399066c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:01:cd:f8:d0:28:17:c8:c0:5e:59:96:bf:c2:7e:cc:8b:7a: 5b:c3:f7:df:be:de:60:28:7d:26:4b:29:9c:50:7e:1e:63:37: 43:bb:ba:14:46:7d:ad:31:c2:2f:71:3d:d5:e4:29:58:4f:e6: b8:7f:c0:18:b6:e3:90:6a:34:5e:5b:48:0b:3c:1e:e1:aa:36: cc:4c:23:15:20:4b:5d:89:fc:90:49:5d:f8:48:c2:bd:52:7f: eb:f3:e1:df:92:59:ee:aa:71:87:94:f3:e2:df:ee:a7:20:00: 8a:1b:7f:93:ee:d3:89:a3:b0:d3:4a:35:5c:78:59:77:8c:1b: bb:23:3c:d6:71:d7:f4:73:ea:d6:4d:72:89:86:2c:68:1e:26: 81:e6:af:bb:ea:cf:b1:bb:1d:da:3e:83:11:55:55:4c:87:ca: d6:8e:e5:ec:09:bc:1e:f4:18:98:04:9b:3f:e6:be:3b:fd:53: 3c:08:6b:f6:7d:af:ee:80:47:e1:09:86:b8:97:1b:04:03:92: 45:6d:8e:1b:13:2c:a9:72:88:45:1b:ef:bc:46:78:ee:11:19: 7b:14:33:80:ed:dc:0b:d8:55:d5:6d:d3:d5:76:ef:2d:6d:fd: e8:9d:1c:ce:77:93:9c:03:5e:80:5c:27:a3:57:d7:51:1f:f7: 37:51:8a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJoPsj2MYOFEQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2Q5YzlhZDctZDk1ZS00NDBhLTkyZTktNDI4ZTMyOTViY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2aHfo7LQU5ZwJ+vcllMN/scPI4jkOu6rnYp l9tyqLbjr81Yh2JTVjw47IXJ88CJd5TlSd3KHtmBmWc7NhgnPzWWIbUrRA+LsyjD blZ0nrKcV+Pp7FyITQ6b5yicU2xEzdHzQlcKVOy4il1v3aaYo0kjaz9MSuGfmusd 3br5aUYMhJ7trp2qcoqJrRjnNLO2BI8GR+3HbwgQuRRknIIp3zcEh9nkybqx5pXc wvqv3KKTZwlVO+t5l0omAXjUwHNei0+z+9kftIw5LWxTcIE72mG9IKA02DU6ys4z mh9NQlR6mj40Ntemt031ptBJXXNjt/QbRdQq1bhDx+hjZtMNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdS/gdjNI77l2UGncBqK9sE4YhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI3NGQ1NTQtZTRiMS0z YjM0LThjZmEtYWNmMzk5MDY2YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQBzfjQKBfIwF5Zlr/CfsyLelvD99++3mAofSZLKZxQfh5jN0O7uhRG fa0xwi9xPdXkKVhP5rh/wBi245BqNF5bSAs8HuGqNsxMIxUgS12J/JBJXfhIwr1S f+vz4d+SWe6qcYeU8+Lf7qcgAIobf5Pu04mjsNNKNVx4WXeMG7sjPNZx1/Rz6tZN comGLGgeJoHmr7vqz7G7Hdo+gxFVVUyHytaO5ewJvB70GJgEmz/mvjv9UzwIa/Z9 r+6AR+EJhriXGwQDkkVtjhsTLKlyiEUb77xGeO4RGXsUM4Dt3AvYVdVt09V27y1t /eidHM53k5wDXoBcJ6NX11Ef9zdRih0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:53 2026 by rpki-client