$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa File: 89bd953d-ca92-3d30-a75f-08e12d302671.roa (raw, json) Hash identifier: oT11suuK8l0Gwrdw7z4KKsEB2tTe1xoUX9SgeLZLBm8= Subject key identifier: 37:6E:B7:D3:39:F8:6A:CA:80:4C:26:C7:71:BA:CF:22:9F:2A:41:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D18E80519466D69EEC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396542 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d1:8e:80:51:94:66:d6:9e:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=518fd712-9277-492b-98be-ad6480da6356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:09:58:66:c3:e8:99:b0:b7:f0:94:62:34: 85:7e:be:99:5e:bc:bb:c2:4b:c7:09:91:26:c2:f7: 3e:d2:3d:fe:0c:79:f8:be:05:62:ad:e4:d9:70:85: 2b:06:db:33:06:2a:1a:38:f7:dd:90:1b:77:8e:56: b4:5d:73:cd:7a:0a:89:c4:a6:8b:d3:2e:ff:63:e5: 72:41:bc:ea:27:b5:67:5e:06:6d:6e:05:54:72:88: 22:c7:79:55:30:55:c1:cd:ca:3e:eb:a3:ba:3f:c2: f2:b5:48:ee:f1:53:1c:3a:51:d5:c7:5f:4a:62:a3: 31:76:b7:e4:7b:d2:a4:9c:c2:2f:e4:f4:ef:49:5a: 83:fc:c9:e6:92:56:72:9d:a5:ec:90:a4:fe:a6:27: d3:6c:f8:95:4d:e3:cf:ac:c2:f5:87:0d:70:b8:df: 13:af:00:24:de:27:27:bc:a3:47:16:b3:f7:87:a0: 89:53:65:ae:02:ed:9e:cc:ba:a7:a1:53:5b:89:c7: 4b:4e:2a:a5:00:8e:92:52:fb:82:37:e7:ac:c0:73: d3:7d:ed:75:05:a9:ab:90:12:09:38:26:f3:a6:67: 00:31:43:15:66:3e:0d:86:27:83:70:bf:96:04:a4: c1:29:a3:2b:2f:39:33:a2:c7:2e:2f:8a:04:5e:88: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6E:B7:D3:39:F8:6A:CA:80:4C:26:C7:71:BA:CF:22:9F:2A:41:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89bd953d-ca92-3d30-a75f-08e12d302671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:63:71:00:f5:28:0d:ad:e6:45:13:44:53:25:19:3c:54:be: 07:da:c9:f9:2b:09:62:d0:e6:5a:fd:79:72:6a:4d:09:b6:ef: 5d:d6:94:c3:03:e0:46:23:8c:cf:8d:68:1f:4f:ea:d5:e6:06: 62:62:5a:b3:4d:e2:15:06:f2:29:71:71:ec:5b:b7:59:5e:98: 60:1b:e9:47:f6:dd:82:62:1d:4e:69:5f:89:5a:38:45:37:71: ab:fe:89:2b:76:db:c2:56:04:2b:2b:0f:8f:1b:cf:c5:4e:59: 09:75:5a:c9:80:bb:15:56:af:d7:6a:ec:93:bc:28:7d:40:ed: c7:ee:bc:68:3d:02:7a:60:5e:39:47:c0:f1:12:f3:51:b8:43: d6:be:5f:24:3c:25:7d:ad:73:16:c0:e9:d9:6f:f5:06:bb:a4: 4b:05:f5:9a:35:6f:75:d9:d3:51:b4:0a:4a:f8:c8:c4:0f:66: 57:4e:af:46:73:df:f0:ad:13:c3:97:1b:99:fc:40:b4:3b:ed: 0f:ec:f7:2c:9c:fd:bc:1a:29:1a:bb:19:24:6a:f1:1d:b0:5b: 3c:ac:ca:34:5f:4e:15:1a:cc:52:37:76:26:66:4a:ea:e9:e9: e0:fb:78:8f:b0:9c:e4:df:16:5a:e3:4b:8f:82:5f:9c:e9:ba: 4a:bd:c7:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNGOgFGUZtae7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NTE4ZmQ3MTItOTI3Ny00OTJiLTk4YmUtYWQ2NDgwZGE2MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M4JWGbD6Jmwt/CUYjSFfr6ZXry7wkvHCZEm wvc+0j3+DHn4vgVireTZcIUrBtszBioaOPfdkBt3jla0XXPNegqJxKaL0y7/Y+Vy QbzqJ7VnXgZtbgVUcogix3lVMFXBzco+66O6P8LytUju8VMcOlHVx19KYqMxdrfk e9KknMIv5PTvSVqD/MnmklZynaXskKT+pifTbPiVTePPrML1hw1wuN8TrwAk3icn vKNHFrP3h6CJU2WuAu2ezLqnoVNbicdLTiqlAI6SUvuCN+eswHPTfe11BamrkBIJ OCbzpmcAMUMVZj4NhieDcL+WBKTBKaMrLzkzoscuL4oEXohi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdut9M5+GrKgEwmx3G6zyKfKkFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODliZDk1M2QtY2E5Mi0z ZDMwLWE3NWYtMDhlMTJkMzAyNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBjcQD1KA2t5kUTRFMlGTxUvgfayfkrCWLQ5lr9eXJqTQm2713WlMMD 4EYjjM+NaB9P6tXmBmJiWrNN4hUG8ilxcexbt1lemGAb6Uf23YJiHU5pX4laOEU3 cav+iSt228JWBCsrD48bz8VOWQl1WsmAuxVWr9dq7JO8KH1A7cfuvGg9AnpgXjlH wPES81G4Q9a+XyQ8JX2tcxbA6dlv9Qa7pEsF9Zo1b3XZ01G0Ckr4yMQPZldOr0Zz 3/CtE8OXG5n8QLQ77Q/s9yyc/bwaKRq7GSRq8R2wWzysyjRfThUazFI3diZmSurp 6eD7eI+wnOTfFlrjS4+CX5zpukq9x1A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:10 2026 by rpki-client