$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa File: a2894194-5977-35b0-91f8-795131d217be.roa (raw, json) Hash identifier: lahmYszVGch07oTAhI4MhJsnv2k0j8rwxj7AgSUpF/s= Subject key identifier: 99:E9:91:7C:81:9B:A8:67:0D:AA:90:A1:8A:27:2B:FA:9D:A9:5A:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A1D4A5423D0004315B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396599 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a1:d4:a5:42:3d:00:04:31:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=0768322f-5e53-40a0-916d-dfd84435ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:f6:d1:1b:48:e0:0c:98:b5:24:cb:90:d7: 9f:33:13:2f:41:12:d2:4e:55:f7:48:9e:de:82:20: 01:3d:2a:b3:7a:53:99:90:0f:53:b5:d7:8e:c1:0f: 8a:8f:57:cc:6b:d8:46:19:7b:f5:3c:a4:a1:6f:e9: c7:7f:30:31:55:42:3f:55:5f:e0:5b:43:d8:80:f5: 61:80:21:d0:1e:6e:25:ac:0f:43:fb:b7:0a:39:bc: 62:43:76:db:5c:85:6e:7f:2a:0a:d1:e5:92:d0:29: de:cb:e4:67:d3:93:3c:93:e5:c3:4a:3f:ca:57:10: 4c:40:e2:ce:f5:38:bd:19:94:7b:fb:a6:cb:2e:15: 10:14:41:a9:ac:a7:cc:94:ff:91:82:af:de:27:3d: cc:c0:a8:ed:33:91:cf:14:91:36:23:a1:b5:1e:d4: 98:8b:82:58:46:72:a8:79:fb:57:f1:38:31:1c:2f: c4:96:e1:36:7a:d0:c6:36:4d:e4:da:58:c4:27:ee: 6c:10:ad:76:a9:be:9a:6d:9c:09:26:66:79:3c:37: 87:25:ae:dd:0a:9d:92:67:75:8c:72:6a:54:85:c6: 5a:89:17:ad:d6:8e:ce:99:4d:d2:bb:ed:a6:1d:11: ee:03:32:6b:42:47:45:04:01:61:94:26:ff:9e:5d: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E9:91:7C:81:9B:A8:67:0D:AA:90:A1:8A:27:2B:FA:9D:A9:5A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2894194-5977-35b0-91f8-795131d217be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:01:61:26:f5:b5:25:cc:2d:92:ad:d3:22:61:de:bf:43:41: 40:50:e5:3a:ca:7d:aa:c4:3f:c1:b9:64:2d:d4:c3:5b:02:53: e1:a9:70:25:55:89:3b:3d:01:0f:15:3d:4f:b1:e7:04:b3:39: 68:31:7d:59:3e:14:ab:fb:51:53:3f:ba:4d:6a:3c:44:02:a6: 9a:22:f5:d9:bc:e3:b5:2b:d8:33:68:26:98:e1:56:15:f8:18: 97:1d:aa:b3:67:f6:ff:2f:4f:38:7e:0e:86:1f:c4:2a:11:96: b3:f0:7a:1e:6f:c7:23:51:d9:69:22:d1:ca:09:84:71:8a:df: 8c:68:33:29:4a:0b:6b:96:44:56:35:5c:a3:cc:f6:49:bd:c4: ac:4d:ab:71:3a:4a:df:54:2d:5b:24:2e:b0:57:1a:91:ba:e4: 28:23:d3:da:54:4e:a1:fe:7b:4a:32:d4:92:6f:8e:7f:66:9e: f5:c2:a6:31:69:f7:ff:b8:8e:17:80:d2:c8:51:4c:4f:f9:02: 5b:d3:9d:2d:87:bf:47:bf:01:ca:6d:7f:3c:b4:18:67:c1:da: 4c:62:09:cd:ed:42:22:d9:31:d9:ae:45:8c:51:9c:b8:6b:a2: a2:21:2a:6f:b9:5a:a3:d7:6c:c7:88:03:f7:8f:fe:75:a4:9a: 0d:7a:6d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKHUpUI9AAQxW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDc2ODMyMmYtNWU1My00MGEwLTkxNmQtZGZkODQ0MzVlYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49j20RtI4AyYtSTLkNefMxMvQRLSTlX3SJ7e giABPSqzelOZkA9TtdeOwQ+Kj1fMa9hGGXv1PKShb+nHfzAxVUI/VV/gW0PYgPVh gCHQHm4lrA9D+7cKObxiQ3bbXIVufyoK0eWS0Cney+Rn05M8k+XDSj/KVxBMQOLO 9Ti9GZR7+6bLLhUQFEGprKfMlP+Rgq/eJz3MwKjtM5HPFJE2I6G1HtSYi4JYRnKo eftX8TgxHC/EluE2etDGNk3k2ljEJ+5sEK12qb6abZwJJmZ5PDeHJa7dCp2SZ3WM cmpUhcZaiRet1o7OmU3Su+2mHRHuAzJrQkdFBAFhlCb/nl08nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnpkXyBm6hnDaqQoYonK/qdqVp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI4OTQxOTQtNTk3Ny0z NWIwLTkxZjgtNzk1MTMxZDIxN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcBYSb1tSXMLZKt0yJh3r9DQUBQ5TrKfarEP8G5ZC3Uw1sCU+GpcCVV iTs9AQ8VPU+x5wSzOWgxfVk+FKv7UVM/uk1qPEQCppoi9dm847Ur2DNoJpjhVhX4 GJcdqrNn9v8vTzh+DoYfxCoRlrPweh5vxyNR2Wki0coJhHGK34xoMylKC2uWRFY1 XKPM9km9xKxNq3E6St9ULVskLrBXGpG65Cgj09pUTqH+e0oy1JJvjn9mnvXCpjFp 9/+4jheA0shRTE/5AlvTnS2Hv0e/Acptfzy0GGfB2kxiCc3tQiLZMdmuRYxRnLhr oqIhKm+5WqPXbMeIA/eP/nWkmg16bXM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:16 2026 by rpki-client