$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa File: 966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa (raw, json) Hash identifier: w2eV0RGaGq7A3J69nx/2jIexsefESinmi4ucZZNOrv4= Subject key identifier: C5:8C:CE:D8:CE:B0:66:13:5D:1A:63:43:2B:E8:5E:17:D4:FB:7A:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D47417F3306F3C5857B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396563 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d4:74:17:f3:30:6f:3c:58:57:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=19105d01-d6cc-4c30-a0f4-de97c04f2782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:dc:0e:57:1b:58:02:05:fc:8e:1d:e7:c9: af:39:84:a0:80:ae:8d:cd:13:08:58:3d:4f:62:ec: 04:aa:09:2e:bd:2f:f1:a4:3c:1e:73:79:7b:33:de: ed:19:08:f6:0d:38:62:8d:29:40:e8:30:51:ca:b8: d0:99:78:90:8b:03:52:3a:cc:02:24:f0:10:3e:57: 77:be:f6:89:c7:c3:ed:fb:4c:85:69:45:f2:2c:61: 3f:7b:9f:72:a4:03:7a:36:dc:2f:a9:e2:5d:a4:0c: 54:ac:1c:67:c5:8b:9f:0e:f7:ae:8a:fa:39:20:db: 13:51:c7:01:6b:fb:88:cc:f4:a2:a8:5d:a6:de:5c: 45:8d:6f:97:c7:db:73:5c:18:8f:a5:0b:89:73:ff: df:3e:b5:74:95:07:21:f9:a4:34:c3:ff:18:dc:94: 96:0f:a7:29:d7:1a:34:61:21:73:33:20:a1:91:55: d1:18:07:6a:7f:66:ca:bf:fc:f9:38:04:a8:a4:26: 98:b2:69:62:df:ac:b6:36:aa:89:11:ec:92:e0:ac: a6:27:c6:51:cc:8e:c5:e6:8c:cd:44:2d:85:bd:92: 85:29:e0:f7:e7:b0:f1:0b:09:c6:b1:fd:9f:61:46: 73:ab:ec:07:2d:eb:df:4d:55:5c:2a:83:a5:4f:cb: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8C:CE:D8:CE:B0:66:13:5D:1A:63:43:2B:E8:5E:17:D4:FB:7A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/966ab55c-34a8-3d24-8981-9a8f8f65fe64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:07:8a:7e:bc:14:7a:9a:02:bb:99:2f:62:2e:e6:9f:a7:d0: 44:a7:b0:c9:7c:b8:14:9f:9e:f1:60:c9:23:53:b3:07:e2:e2: 15:6a:2c:05:dd:da:a7:54:4f:b2:c7:29:94:47:97:9d:eb:52: d9:1b:5b:15:39:f3:82:36:51:28:e0:f6:89:4a:33:93:5c:e0: 34:37:5b:46:9c:35:02:d4:27:6d:7f:cc:71:b6:ed:29:4f:3e: 38:79:6a:70:f3:f2:25:b7:be:3a:af:1d:43:e6:22:1d:4d:1e: df:69:dd:ef:bc:e3:34:3a:88:e4:0c:f7:2b:a2:82:fd:4c:54: 4e:52:bc:db:95:ce:bc:a0:4e:ef:c5:b7:7a:f2:78:3f:12:75: 24:26:8b:f5:59:fb:8b:21:cf:02:37:4a:74:50:ac:87:4f:cb: a9:42:41:26:80:0e:7e:2e:f9:73:22:a2:76:da:3f:3e:d1:15: 0c:fa:11:50:9d:9f:8a:8f:48:6c:e1:3a:a3:c9:32:94:eb:db: ef:bf:99:a1:6d:89:a0:5d:96:10:07:01:15:7f:51:2f:26:7d: 7e:11:66:c7:67:1d:9f:fa:33:40:a5:1c:e4:2b:1c:b1:51:80: 05:3b:15:6f:48:25:22:56:e4:30:2f:86:da:a8:5a:2d:1d:55: c8:97:d8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNR0F/MwbzxYV7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MTkxMDVkMDEtZDZjYy00YzMwLWEwZjQtZGU5N2MwNGYyNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTTcDlcbWAIF/I4d58mvOYSggK6NzRMIWD1P YuwEqgkuvS/xpDwec3l7M97tGQj2DThijSlA6DBRyrjQmXiQiwNSOswCJPAQPld3 vvaJx8Pt+0yFaUXyLGE/e59ypAN6NtwvqeJdpAxUrBxnxYufDveuivo5INsTUccB a/uIzPSiqF2m3lxFjW+Xx9tzXBiPpQuJc//fPrV0lQch+aQ0w/8Y3JSWD6cp1xo0 YSFzMyChkVXRGAdqf2bKv/z5OASopCaYsmli36y2NqqJEeyS4KymJ8ZRzI7F5ozN RC2FvZKFKeD357DxCwnGsf2fYUZzq+wHLevfTVVcKoOlT8veZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWMztjOsGYTXRpjQyvoXhfU+3ooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTY2YWI1NWMtMzRhOC0z ZDI0LTg5ODEtOWE4ZjhmNjVmZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsHin68FHqaAruZL2Iu5p+n0ESnsMl8uBSfnvFgySNTswfi4hVqLAXd 2qdUT7LHKZRHl53rUtkbWxU584I2USjg9olKM5Nc4DQ3W0acNQLUJ21/zHG27SlP Pjh5anDz8iW3vjqvHUPmIh1NHt9p3e+84zQ6iOQM9yuigv1MVE5SvNuVzrygTu/F t3ryeD8SdSQmi/VZ+4shzwI3SnRQrIdPy6lCQSaADn4u+XMionbaPz7RFQz6EVCd n4qPSGzhOqPJMpTr2++/maFtiaBdlhAHARV/US8mfX4RZsdnHZ/6M0ClHOQrHLFR gAU7FW9IJSJW5DAvhtqoWi0dVciX2D0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:18 2026 by rpki-client