$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa File: 9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa (raw, json) Hash identifier: khQ/Bkq6tSIjdtvt814IdE3cPwkvrlLabDhL9VPd/II= Subject key identifier: 3E:C2:0C:1E:9D:8A:EA:BF:C9:62:45:3D:70:78:5A:80:6A:CF:07:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B329BB73514F82585D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 22547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b3:29:bb:73:51:4f:82:58:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a359a6a8-7faa-4944-9deb-116f32689546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:fb:8c:01:4a:c2:b5:4e:1d:1d:cc:a4:e8: 7d:7e:1c:d0:47:44:21:cd:63:1e:d3:40:b2:f5:37: eb:da:d4:da:bc:97:38:47:83:c2:99:f4:47:33:00: 79:a3:ea:63:46:bb:89:c4:02:63:00:20:bf:89:ce: bb:c6:fb:af:b9:62:a2:5c:23:cd:c8:8f:f2:d1:93: 08:a6:a7:cb:20:f5:a9:f5:66:79:9d:ae:b0:bf:c4: e3:0f:b5:31:e8:ad:b0:f2:66:f7:b0:bc:20:e3:70: 6c:b9:1f:ec:19:6a:a2:ef:fd:0e:57:83:97:fd:0f: 1d:57:6a:f2:da:b3:62:c6:b8:a4:19:9a:6f:fc:8d: 9c:38:60:fb:1d:68:59:05:0a:95:7d:5b:fc:f7:d0: 25:51:f1:c4:aa:29:64:72:b2:c7:ef:3b:3f:4e:99: 16:6a:d7:6f:a9:36:ce:2b:0d:03:cf:2a:66:73:39: 1e:4c:79:f6:8a:9b:cd:f2:e5:62:de:27:08:75:c9: 69:e9:d6:16:b8:bb:49:55:f3:5b:d4:ad:6f:fa:ac: 66:02:cd:2c:01:b5:19:b0:e6:ba:ed:8a:b8:95:83: 92:12:3b:8b:d9:7c:c2:f5:6b:20:06:bb:fd:6a:2b: 5d:a6:cf:d0:9a:b8:4c:f1:b7:d9:ab:ba:50:c8:8f: 09:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C2:0C:1E:9D:8A:EA:BF:C9:62:45:3D:70:78:5A:80:6A:CF:07:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9994a2c0-72f3-3eac-b36b-85585a06f6a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:44:92:04:ff:c9:2a:01:57:59:72:62:fa:68:02:0c:e6:b7: 85:51:8b:97:ca:bb:ef:f8:b9:d4:84:15:be:15:66:27:0b:5b: ca:38:69:44:da:6f:bd:e6:75:06:41:4c:00:a0:c8:2c:fb:c4: f2:9c:65:57:fe:90:e2:3f:fd:5a:e4:83:15:9b:1b:b4:92:4b: e1:4a:98:47:43:1e:c6:84:31:4b:b1:c7:d1:26:ec:6a:35:a8: 06:67:93:19:fe:68:56:d9:90:97:b5:54:d4:1f:33:72:5d:45: 3f:91:d0:6f:9d:98:ae:60:2b:3f:a1:e2:10:f2:4b:3a:5b:0a: 11:7f:10:41:3e:38:ab:21:eb:2a:44:ba:57:91:27:92:97:d1: e1:11:1c:89:ab:93:e3:c9:f1:ca:c1:c4:6e:18:87:7d:ad:b1: 94:47:04:01:2f:50:b1:c8:68:ae:b1:2a:65:4e:a6:b1:7f:3a: 82:e1:f5:6a:cc:19:00:da:c9:9a:8e:ef:1f:9a:18:e3:74:e9: b4:e8:3d:47:8f:13:0d:15:02:eb:ac:33:7e:10:c1:db:78:cd: 34:cc:1e:72:b2:93:38:ff:46:3b:83:d0:a7:43:44:ed:99:55: 33:a2:4f:d9:2d:1f:25:5e:84:a5:b1:ef:0c:8b:11:65:4c:b2: 0e:eb:4a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLMpu3NRT4JYXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTM1OWE2YTgtN2ZhYS00OTQ0LTlkZWItMTE2ZjMyNjg5NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqj7jAFKwrVOHR3MpOh9fhzQR0QhzWMe00Cy 9Tfr2tTavJc4R4PCmfRHMwB5o+pjRruJxAJjACC/ic67xvuvuWKiXCPNyI/y0ZMI pqfLIPWp9WZ5na6wv8TjD7Ux6K2w8mb3sLwg43BsuR/sGWqi7/0OV4OX/Q8dV2ry 2rNixrikGZpv/I2cOGD7HWhZBQqVfVv899AlUfHEqilkcrLH7zs/TpkWatdvqTbO Kw0DzypmczkeTHn2ipvN8uVi3icIdclp6dYWuLtJVfNb1K1v+qxmAs0sAbUZsOa6 7Yq4lYOSEjuL2XzC9WsgBrv9aitdps/QmrhM8bfZq7pQyI8JmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7CDB6diuq/yWJFPXB4WoBqzwcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk5NGEyYzAtNzJmMy0z ZWFjLWIzNmItODU1ODVhMDZmNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdEkgT/ySoBV1lyYvpoAgzmt4VRi5fKu+/4udSEFb4VZicLW8o4aUTa b73mdQZBTACgyCz7xPKcZVf+kOI//VrkgxWbG7SSS+FKmEdDHsaEMUuxx9Em7Go1 qAZnkxn+aFbZkJe1VNQfM3JdRT+R0G+dmK5gKz+h4hDySzpbChF/EEE+OKsh6ypE uleRJ5KX0eERHImrk+PJ8crBxG4Yh32tsZRHBAEvULHIaK6xKmVOprF/OoLh9WrM GQDayZqO7x+aGON06bToPUePEw0VAuusM34Qwdt4zTTMHnKykzj/RjuD0KdDRO2Z VTOiT9ktHyVehKWx7wyLEWVMsg7rSmE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:24 2026 by rpki-client