$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a435b802-4586-330a-a978-9988bc7a76c1.roa File: a435b802-4586-330a-a978-9988bc7a76c1.roa (raw, json) Hash identifier: 8S7KAS28Pp7WvgxXk51canC4FF+yyk44MB38q2JDzrM= Subject key identifier: 42:E4:DD:AD:6D:B8:11:12:16:56:33:25:FA:B3:F2:D1:C2:24:4A:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D34B117A01712214F580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a435b802-4586-330a-a978-9988bc7a76c1.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396566 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d3:4b:11:7a:01:71:22:14:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=bec5e5a9-4c49-4cf3-a5f1-8d2da8f2f394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:1d:74:a7:94:71:59:d0:54:8e:92:f5:9a: aa:48:bf:f7:0f:32:67:80:3a:63:91:bb:4d:82:20: 0f:d3:8d:3d:97:99:d2:43:4d:83:2c:7c:7c:e1:0d: 02:86:44:4d:09:ba:3e:5e:e9:1c:a1:38:6a:04:43: 37:de:1e:87:68:c4:75:01:31:06:69:6f:fa:be:f2: 98:31:75:5d:e0:65:54:35:d3:2b:43:de:7b:c7:8f: 8c:61:30:a5:9e:6a:49:b6:1f:54:f8:d3:2e:39:b0: ad:27:fd:3c:12:8a:a6:a7:93:dc:ff:92:cf:0e:a2: 8d:02:5a:f4:af:12:9a:2b:b0:48:30:ba:26:40:23: 52:75:92:cc:b6:6d:77:f0:df:08:9c:e7:71:63:76: a1:d2:47:f0:8e:a7:ac:9c:39:74:24:ff:ec:be:07: bb:29:e9:49:e8:4e:1c:c2:b5:8d:68:8f:26:12:c3: 92:c0:ad:68:0d:f9:32:6d:db:b8:f0:97:c6:89:49: ec:db:07:eb:59:6a:c3:5d:18:46:fd:b7:bb:e5:10: 59:29:16:77:99:0e:0c:53:01:13:83:79:12:0f:ce: 5a:90:3a:34:c8:87:20:dd:35:90:4a:6e:60:5e:6f: 4a:ee:14:30:d7:0b:a2:85:9b:c2:46:d0:2c:07:a9: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E4:DD:AD:6D:B8:11:12:16:56:33:25:FA:B3:F2:D1:C2:24:4A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a435b802-4586-330a-a978-9988bc7a76c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c6:ba:67:b5:5a:10:bd:10:90:7b:75:93:31:51:c8:c3:07: 55:cf:62:d9:f4:94:0d:6f:cf:8d:50:d4:ad:22:70:87:60:13: be:52:15:ec:78:e6:5a:c3:f1:76:54:ef:2e:e8:8c:95:06:27: 1e:58:d0:36:3d:83:1c:f8:fb:58:92:0d:22:07:cf:26:b7:fd: 74:6a:e9:43:b9:93:cd:1c:70:a2:85:16:a4:8f:59:c8:9a:c5: 23:b0:39:ee:b5:05:75:1d:29:4b:14:d1:78:d1:85:10:b3:ad: 3e:fd:f2:18:20:3a:96:79:a0:bf:b8:8e:01:90:c3:7e:a9:82: 07:3b:91:8b:bf:17:fe:a3:5c:4c:a2:1e:0e:8a:68:33:3a:46: 53:25:25:0f:c3:9c:82:eb:1c:bd:44:aa:93:81:16:0f:39:6d: d6:a0:62:73:34:ae:b1:64:a3:87:fb:f7:99:b4:c2:e3:58:be: 77:f4:55:9f:1b:fc:25:cb:25:b2:3b:7c:76:b6:75:85:89:9a: 15:14:aa:e4:6d:83:77:88:8b:10:05:48:12:f4:b0:bb:dc:38: 6d:da:14:0a:82:a1:b2:fa:48:91:68:1d:29:09:91:0b:19:df: 6c:1b:1b:49:46:72:44:53:40:78:4b:74:68:ed:92:34:53:da: eb:2c:ad:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNNLEXoBcSIU9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YmVjNWU1YTktNGM0OS00Y2YzLWE1ZjEtOGQyZGE4ZjJmMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZQddKeUcVnQVI6S9ZqqSL/3DzJngDpjkbtN giAP0409l5nSQ02DLHx84Q0ChkRNCbo+XukcoThqBEM33h6HaMR1ATEGaW/6vvKY MXVd4GVUNdMrQ957x4+MYTClnmpJth9U+NMuObCtJ/08Eoqmp5Pc/5LPDqKNAlr0 rxKaK7BIMLomQCNSdZLMtm138N8InOdxY3ah0kfwjqesnDl0JP/svge7KelJ6E4c wrWNaI8mEsOSwK1oDfkybdu48JfGiUns2wfrWWrDXRhG/be75RBZKRZ3mQ4MUwET g3kSD85akDo0yIcg3TWQSm5gXm9K7hQw1wuihZvCRtAsB6n1lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELk3a1tuBESFlYzJfqz8tHCJEqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQzNWI4MDItNDU4Ni0z MzBhLWE5NzgtOTk4OGJjN2E3NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrGume1WhC9EJB7dZMxUcjDB1XPYtn0lA1vz41Q1K0icIdgE75SFex4 5lrD8XZU7y7ojJUGJx5Y0DY9gxz4+1iSDSIHzya3/XRq6UO5k80ccKKFFqSPWcia xSOwOe61BXUdKUsU0XjRhRCzrT798hggOpZ5oL+4jgGQw36pggc7kYu/F/6jXEyi Hg6KaDM6RlMlJQ/DnILrHL1EqpOBFg85bdagYnM0rrFko4f795m0wuNYvnf0VZ8b /CXLJbI7fHa2dYWJmhUUquRtg3eIixAFSBL0sLvcOG3aFAqCobL6SJFoHSkJkQsZ 32wbG0lGckRTQHhLdGjtkjRT2ussrSw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:03 2026 by rpki-client