$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/657c209a-69a2-3c79-a41d-fcb08404e7ba.roa File: 657c209a-69a2-3c79-a41d-fcb08404e7ba.roa (raw, json) Hash identifier: xvi/jhl9dcMaDRdaGq2KeaYGe1+QduxXSmSo0kY9x5Y= Subject key identifier: 33:FB:D0:85:CA:25:82:FD:9E:6C:23:56:0E:9F:32:77:5A:FA:A5:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D4FE5581D04FA9FFA8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/657c209a-69a2-3c79-a41d-fcb08404e7ba.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396606 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d4:fe:55:81:d0:4f:a9:ff:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=2272948c-c238-4325-82cf-67254442b465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:60:28:63:1b:17:6a:1e:eb:cc:79:b3:1c:06: 17:ea:ce:9a:76:05:43:9b:c3:d1:ab:39:fa:2d:79: e8:37:9f:79:ab:d1:a6:5f:15:02:b5:78:5c:58:f3: 8e:97:a0:5a:e6:da:ad:f0:e3:5a:b0:b8:d2:00:1f: 29:23:a5:49:74:ef:28:9c:4c:78:22:00:47:d1:80: aa:6a:a4:84:c2:fc:90:6d:0c:f8:1c:68:6d:87:82: be:d3:f7:5d:e6:8c:97:dd:00:45:7f:ce:82:da:16: 4f:de:7e:3d:9f:51:93:f0:88:ef:ce:7c:14:d4:94: 3d:a7:fc:61:38:af:a5:88:80:c1:03:ee:ec:e5:27: f4:1a:54:20:0e:74:d4:f4:9c:ed:95:1b:21:c6:1b: 47:09:22:70:84:70:78:8a:7f:56:b9:95:43:7b:97: c5:29:1e:77:03:9c:27:b9:33:a4:d7:13:de:ef:03: 74:40:f3:74:de:4b:dc:9a:64:3c:a3:80:b9:a1:d1: 8d:b5:19:a5:0d:31:b5:ae:2f:43:08:54:2e:de:9e: da:30:94:9f:e9:18:67:c5:ce:91:5d:59:e4:49:4d: 8b:0b:ae:f0:78:9a:c7:9e:87:09:91:30:59:98:45: 85:cc:34:ee:17:a3:bb:58:e4:c7:f6:ac:30:9a:b3: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:D0:85:CA:25:82:FD:9E:6C:23:56:0E:9F:32:77:5A:FA:A5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/657c209a-69a2-3c79-a41d-fcb08404e7ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:df:75:75:62:61:5c:c7:74:a5:19:24:ef:ac:53:0e:3b:d0: 5b:a5:cd:d3:7e:86:8c:e1:b3:51:c0:80:08:8d:fd:b5:89:a2: 15:85:3b:e9:58:32:09:48:7c:3b:39:a7:2a:e5:31:db:21:93: 23:1c:cb:5b:b1:9f:33:dc:13:cf:4c:02:d2:65:5a:3a:6f:24: c8:23:15:49:67:96:28:d3:79:05:bc:1c:55:9b:6d:ee:f3:ad: 4e:ab:fb:e4:c2:f4:f6:55:7a:75:a7:f2:78:47:d0:ff:7e:e7: 8c:cc:a2:ba:9d:ae:b3:9f:e4:c3:84:cc:c1:0c:26:65:43:f2: 3b:25:f8:d9:59:0e:2f:1c:b5:8b:1a:cd:e0:80:80:37:c9:19: 4a:9e:d8:15:d9:27:2f:95:42:ae:3a:1b:5d:d0:27:37:ea:ed: f3:16:6f:15:3d:e1:a5:65:18:be:4f:f0:98:aa:4b:5a:58:91: 2d:2c:76:80:62:6a:90:98:29:2f:6c:32:1f:a3:e0:77:97:ee: c7:48:9b:79:25:e3:c1:d6:16:f3:32:25:7a:9c:f4:f9:d0:37: 14:97:f3:b3:cf:c7:31:73:ce:e3:96:ad:26:04:c8:e4:16:98: 86:2f:27:c4:15:e5:f9:77:82:de:63:1b:32:22:f0:90:ff:af: 96:09:42:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNT+VYHQT6n/qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MjI3Mjk0OGMtYzIzOC00MzI1LTgyY2YtNjcyNTQ0NDJiNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWAoYxsXah7rzHmzHAYX6s6adgVDm8PRqzn6 LXnoN595q9GmXxUCtXhcWPOOl6Ba5tqt8ONasLjSAB8pI6VJdO8onEx4IgBH0YCq aqSEwvyQbQz4HGhth4K+0/dd5oyX3QBFf86C2hZP3n49n1GT8IjvznwU1JQ9p/xh OK+liIDBA+7s5Sf0GlQgDnTU9JztlRshxhtHCSJwhHB4in9WuZVDe5fFKR53A5wn uTOk1xPe7wN0QPN03kvcmmQ8o4C5odGNtRmlDTG1ri9DCFQu3p7aMJSf6Rhnxc6R XVnkSU2LC67weJrHnocJkTBZmEWFzDTuF6O7WOTH9qwwmrOn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP70IXKJYL9nmwjVg6fMnda+qU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjU3YzIwOWEtNjlhMi0z Yzc5LWE0MWQtZmNiMDg0MDRlN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADffdXViYVzHdKUZJO+sUw470FulzdN+hozhs1HAgAiN/bWJohWFO+lY MglIfDs5pyrlMdshkyMcy1uxnzPcE89MAtJlWjpvJMgjFUlnlijTeQW8HFWbbe7z rU6r++TC9PZVenWn8nhH0P9+54zMorqdrrOf5MOEzMEMJmVD8jsl+NlZDi8ctYsa zeCAgDfJGUqe2BXZJy+VQq46G13QJzfq7fMWbxU94aVlGL5P8JiqS1pYkS0sdoBi apCYKS9sMh+j4HeX7sdIm3kl48HWFvMyJXqc9PnQNxSX87PPxzFzzuOWrSYEyOQW mIYvJ8QV5fl3gt5jGzIi8JD/r5YJQrE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:33:05 2026 by rpki-client