$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa File: a531be19-5d60-38e3-b64b-c39e645315b7.roa (raw, json) Hash identifier: 3h5lQCUQqti2D587fOhchZBexlCmvvJZHUumEBnRn2g= Subject key identifier: AE:20:2B:07:58:5A:1A:F6:F1:E8:F9:13:C9:95:EE:91:24:8F:26:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D6383843A3CF1EDE82C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396547 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d6:38:38:43:a3:cf:1e:de:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=66897b22-f383-46ae-9559-18d5cbf5041a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:bf:cb:77:10:28:fe:5a:17:23:55:e6:76: 3b:9b:1d:9f:e1:05:67:a8:bf:dd:07:07:c2:b9:c8: 9c:ec:1d:7c:c9:33:d7:46:d3:84:08:f5:47:fe:9b: 9e:52:e0:81:60:0b:ae:b1:d7:eb:e2:b1:2e:e5:62: c7:a0:c0:ff:3a:d7:11:00:49:96:d1:d6:b5:4a:3f: 7e:de:da:0b:a2:ed:8b:0b:8d:94:cc:1d:3d:bf:c8: 01:dc:99:96:6e:71:ff:c9:f7:cb:ae:88:0f:b8:14: d1:85:66:a0:4a:20:41:af:d7:10:e9:64:26:12:74: b3:da:3e:5d:70:95:64:4d:63:fa:06:5a:c7:39:ea: f4:b4:3b:f2:06:ab:52:82:17:2d:5a:e1:23:c1:ae: 83:aa:ff:bb:9d:12:5d:6d:5c:bf:27:fb:a1:b2:c5: 98:a9:ab:c9:5b:78:52:db:7b:07:2a:c7:a9:e5:52: 15:9e:1a:79:e7:43:bb:e1:13:2f:00:e0:d7:95:2c: 47:48:2b:6c:0c:68:bc:1b:64:8d:ee:f5:3b:ff:31: 75:19:01:88:da:d4:74:34:5e:8a:a2:d8:68:c1:ca: 92:65:23:57:37:ee:87:e1:c3:05:25:56:51:4a:3d: 88:f2:56:03:53:f7:ae:bc:ec:c4:a3:09:93:8f:11: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:2B:07:58:5A:1A:F6:F1:E8:F9:13:C9:95:EE:91:24:8F:26:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531be19-5d60-38e3-b64b-c39e645315b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b5:54:59:d5:c8:fc:47:46:af:32:af:2b:2f:b2:eb:5e:5e: 9d:bc:80:5d:6c:5c:fe:0c:a1:18:9b:5a:5e:a6:80:64:fa:9c: 0b:c9:47:0c:85:d6:45:a8:d0:3c:ed:7f:4a:aa:82:0d:29:b5: 10:f3:8e:e2:57:f4:ee:ff:7b:02:73:2c:e4:90:64:5c:93:f2: 8d:ce:d4:1d:78:50:1c:cb:42:b3:fd:ff:83:d3:7b:c9:8c:c5: 20:83:18:4e:54:f5:8a:33:c1:6c:be:22:d9:69:ff:20:f8:a3: 75:2e:e8:57:1a:aa:b6:9d:35:1b:03:94:d6:1c:7b:8d:b1:70: 45:37:dd:47:f9:3a:74:3d:60:92:57:3a:d3:90:3b:f1:87:7a: 47:b3:33:09:a4:cc:ea:fd:ef:95:82:b2:5a:51:f7:3a:31:50: d5:9e:40:19:32:49:aa:2c:a9:f1:58:1a:cf:70:50:43:ba:29: 1b:b3:2b:62:cc:ba:65:e0:b1:ae:28:b9:98:e9:8a:29:27:80: 84:d3:55:00:56:75:55:2c:5b:7d:38:6d:be:82:10:42:7c:e3: 8a:df:82:69:0a:68:b2:1b:0c:49:4b:1c:98:86:42:ac:59:87: 12:ce:e1:3a:a4:73:68:45:83:f3:2d:73:50:cd:25:5c:fa:5c: b3:ba:04:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNY4OEOjzx7egsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjY4OTdiMjItZjM4My00NmFlLTk1NTktMThkNWNiZjUwNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTG/y3cQKP5aFyNV5nY7mx2f4QVnqL/dBwfC ucic7B18yTPXRtOECPVH/pueUuCBYAuusdfr4rEu5WLHoMD/OtcRAEmW0da1Sj9+ 3toLou2LC42UzB09v8gB3JmWbnH/yffLrogPuBTRhWagSiBBr9cQ6WQmEnSz2j5d cJVkTWP6BlrHOer0tDvyBqtSghctWuEjwa6Dqv+7nRJdbVy/J/uhssWYqavJW3hS 23sHKsep5VIVnhp550O74RMvAODXlSxHSCtsDGi8G2SN7vU7/zF1GQGI2tR0NF6K othowcqSZSNXN+6H4cMFJVZRSj2I8lYDU/euvOzEowmTjxGtyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4gKwdYWhr28ej5E8mV7pEkjybSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWJlMTktNWQ2MC0z OGUzLWI2NGItYzM5ZTY0NTMxNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa1VFnVyPxHRq8yrysvsuteXp28gF1sXP4MoRibWl6mgGT6nAvJRwyF 1kWo0Dztf0qqgg0ptRDzjuJX9O7/ewJzLOSQZFyT8o3O1B14UBzLQrP9/4PTe8mM xSCDGE5U9YozwWy+Itlp/yD4o3Uu6FcaqradNRsDlNYce42xcEU33Uf5OnQ9YJJX OtOQO/GHekezMwmkzOr975WCslpR9zoxUNWeQBkySaosqfFYGs9wUEO6KRuzK2LM umXgsa4ouZjpiikngITTVQBWdVUsW304bb6CEEJ844rfgmkKaLIbDElLHJiGQqxZ hxLO4Tqkc2hFg/Mtc1DNJVz6XLO6BOE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:08 2026 by rpki-client