$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa File: 9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa (raw, json) Hash identifier: yeGJmA+MGolsWsZPst7iULLsCr+/kvpGXpxu2kyw2yA= Subject key identifier: 38:18:7C:84:C8:8D:36:51:3A:6F:75:07:29:B2:22:A8:50:18:BB:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A41236C0C5B0482AED80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396553 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a4:12:36:c0:c5:b0:48:2a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=52ccc2ef-bd7c-49d5-84fd-0f81af53f2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:d4:c3:53:15:f8:98:50:f5:9c:86:91:d7: fe:59:e1:4d:8b:c6:00:af:58:0d:0f:36:c6:2d:c4: 9a:67:6a:07:4e:bc:b6:7a:41:60:b0:33:77:ae:c4: 09:00:60:25:35:b5:75:ec:84:2a:94:c9:98:59:d8: 10:71:44:3e:78:db:44:02:7b:bd:cd:aa:e7:32:60: a3:84:7d:96:ab:eb:97:13:a3:dc:0a:2c:f7:5b:6a: 50:83:d6:42:12:95:a5:e5:d9:0d:9e:53:12:7a:ae: d3:44:8d:44:72:2c:cd:9c:13:c5:0d:b6:1c:19:70: c8:a2:18:30:c2:ce:2d:98:7b:a5:37:1c:35:4a:6c: 95:7c:b2:27:21:7b:29:7d:2c:f6:1d:97:40:07:55: f9:bd:28:d1:07:8a:18:f0:12:ab:2f:c1:cc:0c:ab: 9a:ba:93:ed:dc:d9:56:f9:04:d9:cd:72:bb:89:33: 41:9e:a9:a6:d8:6b:c4:4d:bc:03:31:3c:49:0e:07: 04:3f:ae:75:80:20:80:d7:59:b1:71:ad:0b:30:39: 08:d7:3c:da:2e:91:34:c4:c8:22:cb:7d:4a:05:46: 8c:6b:2a:e3:ea:15:60:8d:92:f9:11:ac:5b:33:63: 6b:40:c0:c8:fe:9e:6c:29:26:e7:6e:3d:94:d2:4a: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:7C:84:C8:8D:36:51:3A:6F:75:07:29:B2:22:A8:50:18:BB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e21bc2e-6e32-33c2-be35-3e09d2a8ae1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:79:2c:d3:fd:16:15:ce:ba:3c:fd:87:2f:c5:d8:74:00:40: 2e:5a:95:56:3c:c8:cf:51:7b:17:22:12:7d:71:ba:69:46:37: f6:11:c9:c0:52:fb:08:a8:98:8a:7e:1a:92:f5:19:e3:82:77: 19:11:88:f7:d8:5c:8c:72:30:9f:c0:52:01:a4:20:e0:a3:03: d2:36:ab:2e:43:e7:c9:a9:73:62:dd:78:5b:f5:51:2f:d5:6d: e0:76:15:9f:cc:9f:cf:37:a2:e4:6c:22:33:d8:34:5a:bf:0e: 1b:74:6f:10:f8:ad:a6:5b:5e:2f:9e:b0:a2:d1:5b:73:3e:68: ab:0e:35:fd:5f:ac:69:d6:a8:7d:ee:e7:bf:e3:9e:b3:2d:1f: 60:77:4d:b1:3a:91:7f:56:43:f1:03:75:3f:1a:cc:57:88:5c: 5d:60:82:70:a3:4f:c9:49:03:3b:63:44:fe:5e:ea:f5:68:ab: c5:85:aa:70:68:2a:7e:6f:ff:34:c6:88:ef:b5:08:a2:3a:a8: 34:80:0d:c3:e9:5e:e8:7b:e4:6f:5b:67:aa:f9:1a:1d:c0:ee: cd:0f:3a:c6:f2:b1:bd:d2:fe:20:53:e6:48:58:c7:ae:3d:d3: e3:4e:36:8e:93:55:c6:91:fc:ec:1f:ae:63:0e:38:07:13:b1: 28:b0:92:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKQSNsDFsEgq7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NTJjY2MyZWYtYmQ3Yy00OWQ1LTg0ZmQtMGY4MWFmNTNmMmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoHUw1MV+JhQ9ZyGkdf+WeFNi8YAr1gNDzbG LcSaZ2oHTry2ekFgsDN3rsQJAGAlNbV17IQqlMmYWdgQcUQ+eNtEAnu9zarnMmCj hH2Wq+uXE6PcCiz3W2pQg9ZCEpWl5dkNnlMSeq7TRI1EcizNnBPFDbYcGXDIohgw ws4tmHulNxw1SmyVfLInIXspfSz2HZdAB1X5vSjRB4oY8BKrL8HMDKuaupPt3NlW +QTZzXK7iTNBnqmm2GvETbwDMTxJDgcEP651gCCA11mxca0LMDkI1zzaLpE0xMgi y31KBUaMayrj6hVgjZL5EaxbM2NrQMDI/p5sKSbnbj2U0koOAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgYfITIjTZROm91BymyIqhQGLsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWUyMWJjMmUtNmUzMi0z M2MyLWJlMzUtM2UwOWQyYThhZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHd5LNP9FhXOujz9hy/F2HQAQC5alVY8yM9RexciEn1xumlGN/YRycBS +wiomIp+GpL1GeOCdxkRiPfYXIxyMJ/AUgGkIOCjA9I2qy5D58mpc2LdeFv1US/V beB2FZ/Mn883ouRsIjPYNFq/Dht0bxD4raZbXi+esKLRW3M+aKsONf1frGnWqH3u 57/jnrMtH2B3TbE6kX9WQ/EDdT8azFeIXF1ggnCjT8lJAztjRP5e6vVoq8WFqnBo Kn5v/zTGiO+1CKI6qDSADcPpXuh75G9bZ6r5Gh3A7s0POsbysb3S/iBT5khYx649 0+NONo6TVcaR/OwfrmMOOAcTsSiwkgI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:52 2026 by rpki-client