$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa File: 8d98e4da-a161-3bc6-b14f-34b900f50194.roa (raw, json) Hash identifier: Kpl6XxLLVGIkpD+6CsBgcdoxDNb75zj/9yLXfHq3yuE= Subject key identifier: 09:DB:10:7F:7B:E6:DD:5A:19:0C:69:1F:0F:75:9E:B6:23:53:26:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D46469B603E388EFEF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 36629 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d4:64:69:b6:03:e3:88:ef:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f9ae787c-56a4-48cd-bfbf-8d73746b65b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:8d:fa:3a:aa:20:65:65:2d:1c:86:51:a5: 73:48:45:e7:3d:8b:c5:1e:c5:49:9a:94:ac:13:e6: a9:54:8c:14:44:46:e6:bc:cc:35:72:ae:86:14:dc: 4e:e7:10:0a:f6:d0:dc:dc:2b:ba:d0:df:45:5c:4e: 65:ce:55:7c:0e:52:d9:0a:f6:2b:36:38:e6:f7:b5: b6:0b:67:e5:51:65:9e:01:6b:00:78:9f:6b:47:32: 77:da:f6:f9:ab:19:be:ba:ce:6e:bf:74:f8:66:68: a5:6a:cc:de:9e:e7:d3:b8:80:6c:51:0c:e8:df:18: d8:3a:da:6a:1e:11:b1:9b:47:32:40:94:02:80:0e: f5:8c:a9:0f:2e:8d:1d:c3:84:b1:68:21:76:f6:1c: 58:36:74:6c:8b:ab:ba:e6:ed:ff:cd:22:3a:f4:09: ad:09:15:f4:39:71:cb:22:1c:c9:5a:fd:d7:f2:ca: 3e:17:a9:e7:20:66:31:56:92:db:6e:04:e6:0a:74: e6:21:41:17:39:38:8d:d8:d4:2f:cf:24:d6:3d:b5: 7b:d9:26:04:e9:03:95:ed:54:3e:66:92:7e:ad:5e: 08:3c:d0:73:25:8e:34:7c:29:b7:08:39:02:e5:63: ca:93:a3:f2:71:82:b8:0b:1e:66:4d:b3:fe:93:5c: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:10:7F:7B:E6:DD:5A:19:0C:69:1F:0F:75:9E:B6:23:53:26:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d98e4da-a161-3bc6-b14f-34b900f50194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d6:e2:6c:2b:07:9d:4e:d0:69:a1:29:d0:83:4e:00:72:23: 36:ca:18:8b:78:3e:cc:9b:8b:1a:98:26:73:c5:ba:28:e9:0b: 23:28:a2:18:90:d0:d8:a9:f6:30:37:a5:50:75:7b:01:89:f7: fe:0f:c2:8b:54:1f:d2:45:6d:3a:47:02:12:d9:ef:80:46:99: 82:57:1a:e6:41:d8:1e:8f:37:9f:64:ae:3f:bb:40:17:39:d7: d1:0d:19:20:db:34:2a:81:d0:f0:49:15:78:69:1b:1f:4a:e9: fa:2b:d6:ae:3d:a4:65:06:c4:e7:a7:33:d6:cb:1e:3d:22:95: 12:05:fb:31:bd:7e:49:8f:1e:01:02:c5:62:37:3a:0b:1f:e7: b8:1e:09:b3:08:c2:47:ed:2f:61:d7:13:23:5a:64:69:d6:63: 98:76:54:fb:14:ac:2e:19:cf:1c:de:bd:96:0b:cf:6e:9f:47: 9e:93:e4:74:e6:26:b5:46:82:c1:db:b8:a9:1a:5c:cb:2c:60: 8e:41:f3:1f:7b:c4:8f:00:e5:e7:61:39:75:7d:91:23:c8:43: e4:06:79:58:42:cb:71:6f:39:f7:c3:fb:5d:a9:32:05:2a:52: 24:1c:81:7d:4c:3d:a2:a6:ba:b3:8a:ff:10:63:53:44:fd:49: 8f:eb:04:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNRkabYD44jv7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjlhZTc4N2MtNTZhNC00OGNkLWJmYmYtOGQ3Mzc0NmI2NWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtyN+jqqIGVlLRyGUaVzSEXnPYvFHsVJmpSs E+apVIwUREbmvMw1cq6GFNxO5xAK9tDc3Cu60N9FXE5lzlV8DlLZCvYrNjjm97W2 C2flUWWeAWsAeJ9rRzJ32vb5qxm+us5uv3T4ZmilaszenufTuIBsUQzo3xjYOtpq HhGxm0cyQJQCgA71jKkPLo0dw4SxaCF29hxYNnRsi6u65u3/zSI69AmtCRX0OXHL IhzJWv3X8so+F6nnIGYxVpLbbgTmCnTmIUEXOTiN2NQvzyTWPbV72SYE6QOV7VQ+ ZpJ+rV4IPNBzJY40fCm3CDkC5WPKk6PycYK4Cx5mTbP+k1zDuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnbEH975t1aGQxpHw91nrYjUybCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ5OGU0ZGEtYTE2MS0z YmM2LWIxNGYtMzRiOTAwZjUwMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjW4mwrB51O0GmhKdCDTgByIzbKGIt4PsybixqYJnPFuijpCyMoohiQ 0Nip9jA3pVB1ewGJ9/4PwotUH9JFbTpHAhLZ74BGmYJXGuZB2B6PN59krj+7QBc5 19ENGSDbNCqB0PBJFXhpGx9K6for1q49pGUGxOenM9bLHj0ilRIF+zG9fkmPHgEC xWI3Ogsf57geCbMIwkftL2HXEyNaZGnWY5h2VPsUrC4ZzxzevZYLz26fR56T5HTm JrVGgsHbuKkaXMssYI5B8x97xI8A5edhOXV9kSPIQ+QGeVhCy3FvOffD+12pMgUq UiQcgX1MPaKmurOK/xBjU0T9SY/rBLg= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:14 2026 by rpki-client