$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa File: 890f82b4-9a88-3384-8b10-1f2bab75f976.roa (raw, json) Hash identifier: lgHDLMNinvmWCYdBor5QQrbNO4n52DqRaNDySWprePE= Subject key identifier: B5:06:20:EC:60:1B:83:9F:69:E5:81:13:2A:4D:AF:B6:07:76:14:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49EF84A0CC1C0A5D25780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396571 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9e:f8:4a:0c:c1:c0:a5:d2:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=2a3a60b6-714a-436f-a422-c6b00cc0805e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:5e:01:68:d6:89:a2:15:7e:a8:1e:8c:c9: 55:78:02:5c:3f:55:2d:eb:8b:40:d2:13:11:71:cb: b9:47:ad:43:53:df:86:59:d8:89:a5:b7:20:52:5b: df:00:58:8f:0b:e0:bc:fc:5b:cb:4d:82:e6:37:0a: a8:dc:89:e7:48:47:37:f3:52:e3:93:8f:ae:28:18: 4c:a9:37:e2:8d:f7:cd:e6:d9:e3:56:e6:18:bc:6a: b1:b5:ae:78:71:c7:bb:65:77:4c:68:f0:be:e4:b1: 5e:ec:54:ae:18:17:e6:41:ab:6d:dd:39:7f:f3:32: a8:61:af:d2:c3:dc:91:56:0b:68:f9:16:2a:1d:62: f2:94:77:c2:7f:26:11:93:3b:9e:2c:81:58:06:b0: ae:db:5e:dc:11:48:c3:5a:c2:4f:ce:c0:db:7c:41: 3e:df:ca:13:03:cd:de:31:07:a5:ce:bf:2f:80:fd: 09:17:ad:57:c8:3d:87:b6:76:3f:1a:81:bc:f4:bb: 6c:0a:cd:1d:ac:32:fc:85:68:a4:fb:80:3d:71:a5: 40:38:28:a0:29:e6:4e:55:19:0f:2f:85:50:e9:40: d5:6e:20:8a:ac:bb:93:94:62:89:82:a1:5d:c2:3b: 53:16:16:64:fb:49:dd:2d:3d:c9:99:0e:37:00:7c: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:20:EC:60:1B:83:9F:69:E5:81:13:2A:4D:AF:B6:07:76:14:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:8e:fc:97:42:08:4b:98:13:4f:64:a9:54:28:67:46:eb:71: e2:8e:16:14:d7:ef:da:49:5a:9c:af:e5:9d:4c:07:b4:15:dc: b9:3f:f3:73:22:a6:52:b6:47:9f:c1:29:aa:21:db:88:a9:9f: 85:43:c5:61:0f:90:87:85:bf:6b:60:cd:9b:08:a0:22:17:f0: 4d:d2:61:33:f1:e3:5b:ca:ba:d0:df:4e:9c:27:67:6f:ee:36: 96:3d:0d:6f:5e:d7:27:86:fd:31:aa:ac:ec:70:bb:43:be:42: 8c:9d:21:fc:f6:1b:c2:d7:3b:9a:3b:95:3f:15:22:2e:34:59: 9c:d2:93:82:47:1b:2a:89:f4:22:2d:27:93:21:de:77:36:6e: 7b:e5:85:40:0c:06:e7:f0:3c:46:ef:10:f5:56:b5:2b:6b:89: 29:a6:cb:1d:38:89:25:48:69:3c:9e:22:3d:32:3a:17:5c:d4: 59:89:1e:62:2d:2e:09:07:f2:25:7f:11:7b:31:5b:82:99:b1: e5:fd:a3:80:f8:de:d0:41:71:07:05:0e:aa:5e:ae:0d:22:42: 15:a0:0e:73:d0:25:29:09:9a:3d:75:e7:6e:3e:7a:00:86:ff: 21:05:e2:09:52:97:09:9b:e1:5c:da:aa:3c:95:bb:1d:f1:be: 6d:b5:49:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ74SgzBwKXSV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MmEzYTYwYjYtNzE0YS00MzZmLWE0MjItYzZiMDBjYzA4MDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2teAWjWiaIVfqgejMlVeAJcP1Ut64tA0hMR ccu5R61DU9+GWdiJpbcgUlvfAFiPC+C8/FvLTYLmNwqo3InnSEc381Ljk4+uKBhM qTfijffN5tnjVuYYvGqxta54cce7ZXdMaPC+5LFe7FSuGBfmQatt3Tl/8zKoYa/S w9yRVgto+RYqHWLylHfCfyYRkzueLIFYBrCu217cEUjDWsJPzsDbfEE+38oTA83e MQelzr8vgP0JF61XyD2HtnY/GoG89LtsCs0drDL8hWik+4A9caVAOCigKeZOVRkP L4VQ6UDVbiCKrLuTlGKJgqFdwjtTFhZk+0ndLT3JmQ43AHypfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUGIOxgG4OfaeWBEypNr7YHdhT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwZjgyYjQtOWE4OC0z Mzg0LThiMTAtMWYyYmFiNzVmOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKO/JdCCEuYE09kqVQoZ0brceKOFhTX79pJWpyv5Z1MB7QV3Lk/83Mi plK2R5/BKaoh24ipn4VDxWEPkIeFv2tgzZsIoCIX8E3SYTPx41vKutDfTpwnZ2/u NpY9DW9e1yeG/TGqrOxwu0O+QoydIfz2G8LXO5o7lT8VIi40WZzSk4JHGyqJ9CIt J5Mh3nc2bnvlhUAMBufwPEbvEPVWtStriSmmyx04iSVIaTyeIj0yOhdc1FmJHmIt LgkH8iV/EXsxW4KZseX9o4D43tBBcQcFDqperg0iQhWgDnPQJSkJmj11524+egCG /yEF4glSlwmb4VzaqjyVux3xvm21SZc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:18:40 2026 by rpki-client