$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa File: 70dcef90-0f98-3238-97eb-8f20ab34ab79.roa (raw, json) Hash identifier: 5CbvEA6PGAA9iu0+Fb+niLquKDfx6zoUtaJsA9GLbYc= Subject key identifier: A7:9D:02:69:15:4D:0D:79:2C:74:07:24:44:09:53:DA:FC:F6:72:7C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D1C068499289B9250400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396593 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d1:c0:68:49:92:89:b9:25:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=4062f07b-45ae-41a9-920a-d89d522eb652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:b4:ef:7f:ae:2a:b4:56:c0:0a:c3:85:59: 3f:74:56:37:72:db:a7:2e:b7:c9:3e:fb:0f:b7:ca: ab:a1:e1:36:6c:48:c8:b7:ef:bf:e6:4c:3d:a2:d5: 86:70:15:b7:4f:4b:00:f3:97:57:fa:b4:7b:6e:3b: 34:09:96:fd:cf:06:57:84:14:9f:5b:d0:95:00:7f: 9c:79:09:c9:04:10:55:9a:a4:e8:e9:03:0f:05:57: c1:9f:31:24:a3:35:92:67:f1:fd:91:69:22:85:99: ff:5d:8a:09:72:44:ec:e0:e4:d9:c9:b1:d0:d6:e8: 38:e4:9f:d5:4c:60:cb:b7:9c:29:b2:41:69:c6:e3: e7:f2:f1:34:90:3e:c0:03:3c:21:a4:03:42:bf:b9: 9a:d0:9a:2f:7e:d3:bc:76:82:a1:53:6e:ef:d5:16: 46:77:eb:ba:ef:10:bb:6b:37:d0:90:56:5f:55:79: d1:27:b7:f1:38:c5:0f:51:a2:64:2d:17:2e:de:a6: 92:42:68:5d:b3:e1:4f:ce:45:1d:c4:57:43:02:7f: ac:38:ac:bc:71:da:a7:7e:49:d8:cf:05:69:39:54: 2c:36:65:e3:99:c1:54:11:04:be:d9:a9:97:80:e3: 3e:2c:28:a7:fb:13:71:bd:f3:68:12:87:90:c2:a7: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9D:02:69:15:4D:0D:79:2C:74:07:24:44:09:53:DA:FC:F6:72:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70dcef90-0f98-3238-97eb-8f20ab34ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a9:1d:20:7c:83:eb:6a:86:89:51:82:ef:e0:71:b0:f0:16: f5:9d:5c:9e:69:08:54:47:46:17:2c:13:44:1b:fd:b5:8b:18: a3:39:66:71:5c:db:76:ab:d7:84:ae:2e:67:4c:4e:ec:97:5d: d4:14:e6:f6:11:ab:de:b4:0f:b5:05:a9:b3:0f:cd:bc:5c:3c: 78:5a:58:19:97:53:91:40:93:79:00:8a:90:15:4c:a0:af:40: bc:97:35:fc:7b:2a:ea:33:8f:74:34:ee:f4:f7:06:c5:0a:59: 9c:92:f3:31:4b:41:8e:67:0e:43:ba:e0:2e:fd:5e:73:be:31: cf:e0:bc:78:d7:cd:7a:25:3d:3d:e3:ea:09:3e:11:e2:9e:22: 77:ec:b9:96:17:7e:f4:bc:c7:14:5c:19:3b:f8:02:a6:1f:1e: f8:48:30:96:86:5c:9f:4d:6f:67:8c:d7:89:cb:e3:c9:96:a9: cc:a8:06:d8:d8:64:c4:08:92:1a:fa:e6:80:f8:19:f7:c3:24: d6:ac:8b:c2:15:9c:11:d9:86:52:77:26:de:1f:d6:b0:97:74: 33:6c:85:3b:0d:03:bc:ab:53:5e:6f:ee:0c:5d:2a:cc:dd:71: 89:cd:5d:75:99:22:a8:6b:d3:52:28:6c:af:98:d5:40:d9:17: 3e:41:96:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNHAaEmSibklBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NDA2MmYwN2ItNDVhZS00MWE5LTkyMGEtZDg5ZDUyMmViNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuba073+uKrRWwArDhVk/dFY3ctunLrfJPvsP t8qroeE2bEjIt++/5kw9otWGcBW3T0sA85dX+rR7bjs0CZb9zwZXhBSfW9CVAH+c eQnJBBBVmqTo6QMPBVfBnzEkozWSZ/H9kWkihZn/XYoJckTs4OTZybHQ1ug45J/V TGDLt5wpskFpxuPn8vE0kD7AAzwhpANCv7ma0JovftO8doKhU27v1RZGd+u67xC7 azfQkFZfVXnRJ7fxOMUPUaJkLRcu3qaSQmhds+FPzkUdxFdDAn+sOKy8cdqnfknY zwVpOVQsNmXjmcFUEQS+2amXgOM+LCin+xNxvfNoEoeQwqfrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKedAmkVTQ15LHQHJEQJU9r89nJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBkY2VmOTAtMGY5OC0z MjM4LTk3ZWItOGYyMGFiMzRhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKpHSB8g+tqholRgu/gcbDwFvWdXJ5pCFRHRhcsE0Qb/bWLGKM5ZnFc 23ar14SuLmdMTuyXXdQU5vYRq960D7UFqbMPzbxcPHhaWBmXU5FAk3kAipAVTKCv QLyXNfx7Kuozj3Q07vT3BsUKWZyS8zFLQY5nDkO64C79XnO+Mc/gvHjXzXolPT3j 6gk+EeKeInfsuZYXfvS8xxRcGTv4AqYfHvhIMJaGXJ9Nb2eM14nL48mWqcyoBtjY ZMQIkhr65oD4GffDJNasi8IVnBHZhlJ3Jt4f1rCXdDNshTsNA7yrU15v7gxdKszd cYnNXXWZIqhr01IobK+Y1UDZFz5Blks= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:42 2026 by rpki-client