$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa File: a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa (raw, json) Hash identifier: 25fu7PBPlYJQYghpTLWSIEWHNqhphc/f6wY9g19arBo= Subject key identifier: FB:B1:AE:5D:5F:98:DB:8A:E3:A6:3D:01:12:8D:C4:01:3B:79:33:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D7D3290B3D09845B8600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397201 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d7:d3:29:0b:3d:09:84:5b:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f6b48747-7c88-47e2-9ad5-8fd51dd6cbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:07:4c:fb:5d:65:2a:a5:a9:1f:31:0c:09: ad:b3:13:7c:ca:1e:ec:ec:88:83:3b:2e:ae:55:12: ef:c3:bf:48:0c:f3:71:ac:a3:c5:13:83:cb:42:a7: c3:41:5b:cd:18:e6:5d:2a:ea:bc:1a:b6:c0:c6:43: 7c:8f:24:51:ba:b4:b0:46:b9:3f:60:55:86:b3:e1: 25:71:9c:8a:f5:69:fc:1d:42:aa:c5:e9:c2:a8:2b: a4:72:03:64:ce:eb:87:e1:31:68:c1:e9:bc:17:e8: ed:32:49:e3:bd:f6:99:88:67:61:e5:e6:a3:d8:1e: 46:4f:1d:a3:64:10:85:8c:96:bc:9a:9e:82:65:19: df:84:0f:b9:12:12:9d:4e:55:31:d0:00:72:b2:97: 34:3d:a5:1d:65:7a:83:53:f6:4f:1b:5f:3e:d2:16: 31:31:ef:14:07:f4:40:b4:e2:69:dc:8a:6f:c2:b4: 72:04:38:09:85:37:67:e3:eb:cf:2f:dd:dc:ff:f4: 0c:ee:d8:40:8c:d3:4a:6f:b7:0a:d7:88:fe:2b:8f: 4f:ce:2c:78:eb:de:52:af:fe:38:42:91:15:e2:6b: 33:7c:30:38:d1:55:c1:cf:12:8e:ea:a4:ac:23:ef: 33:91:8f:04:97:25:32:56:be:f3:88:1f:57:8b:27: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B1:AE:5D:5F:98:DB:8A:E3:A6:3D:01:12:8D:C4:01:3B:79:33:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2019ce0-6ee9-3a01-bfba-9bf4086f8665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:95:4a:d0:71:89:31:60:e9:a3:55:d2:b3:77:71:16:75:42: 77:38:72:d9:e4:4a:72:2c:91:0a:65:65:a4:d5:f7:9b:96:6a: b2:36:3e:e0:0e:01:1a:2d:9c:d4:67:53:47:0b:4b:5d:ff:4f: c3:b1:4d:42:e8:d9:ee:24:16:65:4b:19:80:22:c7:c4:dc:e7: e1:8b:b8:fe:fb:fc:f1:78:fb:96:20:bc:09:e5:9b:d9:ad:18: 22:06:00:be:a3:9e:d2:10:08:71:c0:b2:70:02:3b:79:95:d5: 63:62:e1:71:99:bf:7a:b3:47:f0:34:dc:57:e5:ff:98:a0:4f: ca:67:16:58:b7:ea:e3:67:6c:b2:a5:c9:31:52:9a:9d:48:f3: a6:1a:fd:f6:b6:9a:f0:8a:c1:21:64:e7:54:4e:a5:d8:11:6f: 90:e2:33:6a:ce:ca:a8:9a:d0:37:46:4d:d5:1e:88:a6:54:82: 91:62:51:e6:90:14:8c:ab:d2:2a:96:67:04:98:aa:50:e4:7b: aa:63:60:1a:6e:72:a7:f2:40:7f:d6:09:4c:19:78:91:95:fd: e1:ee:ab:27:dd:fc:c6:fa:8d:c1:87:25:f4:05:2b:aa:25:3e: a0:53:d9:d3:77:00:d3:11:0b:b4:1b:82:a2:b0:17:27:54:db: 0f:da:e4:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNfTKQs9CYRbhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjZiNDg3NDctN2M4OC00N2UyLTlhZDUtOGZkNTFkZDZjYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn60HTPtdZSqlqR8xDAmtsxN8yh7s7IiDOy6u VRLvw79IDPNxrKPFE4PLQqfDQVvNGOZdKuq8GrbAxkN8jyRRurSwRrk/YFWGs+El cZyK9Wn8HUKqxenCqCukcgNkzuuH4TFowem8F+jtMknjvfaZiGdh5eaj2B5GTx2j ZBCFjJa8mp6CZRnfhA+5EhKdTlUx0AByspc0PaUdZXqDU/ZPG18+0hYxMe8UB/RA tOJp3IpvwrRyBDgJhTdn4+vPL93c//QM7thAjNNKb7cK14j+K49Pzix4695Sr/44 QpEV4mszfDA40VXBzxKO6qSsI+8zkY8ElyUyVr7ziB9XiyeJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuxrl1fmNuK46Y9ARKNxAE7eTNNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwMTljZTAtNmVlOS0z YTAxLWJmYmEtOWJmNDA4NmY4NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyVStBxiTFg6aNV0rN3cRZ1Qnc4ctnkSnIskQplZaTV95uWarI2PuAO ARotnNRnU0cLS13/T8OxTULo2e4kFmVLGYAix8Tc5+GLuP77/PF4+5YgvAnlm9mt GCIGAL6jntIQCHHAsnACO3mV1WNi4XGZv3qzR/A03Ffl/5igT8pnFli36uNnbLKl yTFSmp1I86Ya/fa2mvCKwSFk51ROpdgRb5DiM2rOyqia0DdGTdUeiKZUgpFiUeaQ FIyr0iqWZwSYqlDke6pjYBpucqfyQH/WCUwZeJGV/eHuqyfd/Mb6jcGHJfQFK6ol PqBT2dN3ANMRC7QbgqKwFydU2w/a5Mw= -----END CERTIFICATE-----Generated at Thu Mar 26 21:49:04 2026 by rpki-client