$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d223572-0a6a-3761-9b53-9515e9b923d3.roa File: 6d223572-0a6a-3761-9b53-9515e9b923d3.roa (raw, json) Hash identifier: msPfACwoXIJKw+ulyioTlOVJvvlQ715wFgB83ylWIK0= Subject key identifier: D1:A5:A5:1D:6E:E9:D3:31:3E:4D:32:A3:63:27:96:12:56:60:09:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49E25F130543B9E87BB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d223572-0a6a-3761-9b53-9515e9b923d3.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396617 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9e:25:f1:30:54:3b:9e:87:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a6610009-6beb-43e5-9bf9-4a22c14fd204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:5e:0b:c8:81:5b:59:77:e5:86:84:6b:49: 39:e1:8e:fb:cd:94:39:39:e7:bf:02:ee:29:ec:69: 80:2e:2b:01:24:1f:b9:d0:93:d5:0d:e8:da:37:d6: 53:62:d5:c2:7a:fc:fe:8f:46:c6:b5:fa:1e:6d:36: dd:d4:37:36:2b:40:93:77:83:ed:e6:ad:e5:f9:eb: 43:ea:59:0d:25:2f:a5:5c:77:da:95:fe:1c:b8:ec: eb:96:a1:b5:2a:20:7a:34:b9:14:cb:31:b1:7d:65: bf:74:49:25:ee:2e:fa:42:95:74:5f:c4:e5:a6:89: 97:de:6d:36:e5:bf:df:37:4d:29:b1:64:42:2f:f3: 4c:8c:1d:d7:ae:c2:a8:55:5d:12:93:60:e9:15:c6: e2:32:ee:bf:3b:d3:b8:86:e0:92:f1:af:e3:d7:f3: 38:a8:c3:7c:a7:4b:29:83:32:79:5b:61:12:67:e8: f9:71:d9:4b:0b:cf:36:8d:7d:ce:de:e9:5f:f9:7d: d8:cb:ad:25:51:32:e7:f4:c5:13:a7:e9:75:47:84: 9f:36:d6:87:ad:6a:a3:9f:2d:16:a0:2e:ca:f4:17: 24:29:ff:f3:2f:b6:9b:37:94:ff:4b:77:ce:a5:d3: fb:cd:a6:f5:c5:bd:40:2c:22:cf:4a:f9:73:be:b1: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A5:A5:1D:6E:E9:D3:31:3E:4D:32:A3:63:27:96:12:56:60:09:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6d223572-0a6a-3761-9b53-9515e9b923d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:53:a4:0f:bc:7d:cd:2f:a0:83:87:a1:aa:02:51:0a:22:1e: 47:de:06:68:68:16:05:4c:2b:b0:c2:50:de:6c:3e:cd:fd:fc: 5c:bf:16:e2:1a:4c:90:f0:70:af:64:bd:23:1c:2c:eb:c3:d2: ab:8b:4d:06:8c:18:44:2f:bb:ce:b4:8f:74:ee:0d:cb:66:cf: de:1f:b0:51:33:2e:9d:da:1f:68:05:7d:e9:d7:df:d7:04:d0: f4:0e:f5:44:ad:fd:18:0f:cb:fb:7c:03:09:b3:8c:13:a1:e2: 60:11:6b:18:12:57:9a:b6:51:4d:60:9e:e4:b4:54:53:06:4b: 7f:4c:49:31:ca:fb:c8:e4:19:e0:a5:b2:fa:8b:cb:a2:ec:16: 7d:c1:c9:2b:8b:bb:b8:b9:ed:39:68:43:ec:c0:53:01:e7:ba: 07:e1:50:2c:f4:b3:6a:35:56:1c:5e:4b:c7:23:be:1b:c5:be: b7:f9:d0:37:79:54:d2:9f:85:66:57:42:d3:52:8b:c8:9d:72: 73:d1:ff:5f:d5:f8:61:b1:3c:ea:7b:18:67:0e:76:10:9b:58: bd:9b:53:1f:69:12:67:a7:57:40:88:a8:d8:1a:f5:6d:ed:59: fa:8e:24:c0:24:31:37:7a:31:c4:91:90:f5:c4:f3:8c:fd:30: b9:a4:2f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ4l8TBUO56HuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTY2MTAwMDktNmJlYi00M2U1LTliZjktNGEyMmMxNGZkMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE9eC8iBW1l35YaEa0k54Y77zZQ5Oee/Au4p 7GmALisBJB+50JPVDejaN9ZTYtXCevz+j0bGtfoebTbd1Dc2K0CTd4Pt5q3l+etD 6lkNJS+lXHfalf4cuOzrlqG1KiB6NLkUyzGxfWW/dEkl7i76QpV0X8TlpomX3m02 5b/fN00psWRCL/NMjB3XrsKoVV0Sk2DpFcbiMu6/O9O4huCS8a/j1/M4qMN8p0sp gzJ5W2ESZ+j5cdlLC882jX3O3ulf+X3Yy60lUTLn9MUTp+l1R4SfNtaHrWqjny0W oC7K9BckKf/zL7abN5T/S3fOpdP7zab1xb1ALCLPSvlzvrFxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGlpR1u6dMxPk0yo2MnlhJWYAnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmQyMjM1NzItMGE2YS0z NzYxLTliNTMtOTUxNWU5YjkyM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtTpA+8fc0voIOHoaoCUQoiHkfeBmhoFgVMK7DCUN5sPs39/Fy/FuIa TJDwcK9kvSMcLOvD0quLTQaMGEQvu860j3TuDctmz94fsFEzLp3aH2gFfenX39cE 0PQO9USt/RgPy/t8AwmzjBOh4mARaxgSV5q2UU1gnuS0VFMGS39MSTHK+8jkGeCl svqLy6LsFn3BySuLu7i57TloQ+zAUwHnugfhUCz0s2o1VhxeS8cjvhvFvrf50Dd5 VNKfhWZXQtNSi8idcnPR/1/V+GGxPOp7GGcOdhCbWL2bUx9pEmenV0CIqNga9W3t WfqOJMAkMTd6McSRkPXE84z9MLmkLyc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:39 2026 by rpki-client