$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa File: af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa (raw, json) Hash identifier: BvpaMSb+aPJYo5yN/qzwL0oRnIIGZm+WVBWwVGwOkDY= Subject key identifier: 58:FC:09:B5:54:A3:F5:90:9A:C4:6B:26:1B:44:E4:83:DE:58:D9:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4A52845EE1D21A562D600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397195 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:a5:28:45:ee:1d:21:a5:62:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=c5d8366b-7392-45d6-8c4e-b64765ebf0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:e1:8c:f9:86:5a:11:6c:6d:6a:32:11:5d: 7d:e0:71:8a:2c:6b:52:d2:04:89:2e:fa:43:9e:78: 93:54:0e:35:53:04:6b:58:7c:1a:96:89:1e:d8:42: 9a:67:02:69:58:ff:23:70:06:fb:21:9b:6e:6d:40: aa:bd:29:ac:08:d9:0d:f3:11:ea:ac:3f:1d:26:f9: af:fb:cb:46:93:f9:2c:9c:67:df:95:8b:5c:c8:ad: ee:d3:24:b8:b3:a1:b3:9b:73:3d:16:dd:24:e5:ff: 9b:67:4e:10:e7:50:b7:d2:4b:b0:26:fd:9b:5d:94: 7f:d7:e6:c7:8e:50:43:f0:a3:83:ef:f9:5d:a9:d0: e8:b8:7a:80:88:fc:ba:d8:d6:bd:fd:e0:bd:01:9d: 26:7d:ae:fc:1e:78:39:ab:33:61:0c:cb:b3:e4:4c: 3e:ee:d2:b2:dd:c8:07:69:42:01:32:54:c5:72:37: bf:79:48:9c:60:02:ff:31:61:18:0f:d4:ca:46:25: 46:2a:6c:e3:e9:2c:f4:fc:a5:82:ab:21:c3:3f:03: 27:3c:05:a3:76:08:4c:c3:34:f0:72:ca:a0:4a:70: 31:5b:ad:2f:6a:e1:9d:34:7d:60:67:f0:75:d1:c0: 37:61:9b:f5:87:59:61:d6:c3:e7:54:30:52:64:5b: b4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FC:09:B5:54:A3:F5:90:9A:C4:6B:26:1B:44:E4:83:DE:58:D9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f35eb-8e39-3599-bcbd-d6af7d9708e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ac:8e:f5:b6:4f:4f:73:51:3f:50:10:83:b7:ff:4e:e0:a7: 3d:d2:0f:31:80:95:86:3b:9d:c9:87:96:4a:93:c3:67:51:f1: 2f:bd:f4:88:7e:4d:7e:49:b5:92:5f:70:da:67:9a:07:eb:34: 8f:00:24:98:f7:fe:b7:41:76:61:c4:a3:19:42:81:db:7d:53: 2a:27:b8:9d:8d:51:19:80:aa:15:65:7e:b2:02:5d:35:b3:11: 55:9d:a5:e5:c6:e5:36:ce:3d:d0:dc:c0:f4:fb:d0:d0:12:21: 81:e6:ba:21:65:97:32:4e:c8:26:c5:da:d0:29:8e:a8:ba:ce: 66:57:6c:87:00:61:87:ba:66:a4:35:d4:44:44:d2:a0:3f:4e: d9:2d:95:5d:de:56:d7:a3:4b:41:51:6a:9f:9f:09:27:34:2a: da:27:df:ed:5d:d3:bf:47:36:4a:16:e3:fa:33:6d:8c:89:01: ea:cd:97:47:5e:32:28:35:f4:07:e1:b0:36:a1:55:e9:26:ef: ab:37:ac:f3:c5:2f:99:13:d9:af:de:1d:76:ac:b9:d4:a7:3f: c4:1a:b7:35:2b:5c:96:2b:d4:8c:8d:d0:b2:d1:ed:e5:e3:26: 55:ad:86:14:ff:5a:b5:28:8d:ce:c3:df:86:12:4a:0a:bc:e8: d6:b7:72:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKUoRe4dIaVi1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzVkODM2NmItNzM5Mi00NWQ2LThjNGUtYjY0NzY1ZWJmMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjbhjPmGWhFsbWoyEV194HGKLGtS0gSJLvpD nniTVA41UwRrWHwaloke2EKaZwJpWP8jcAb7IZtubUCqvSmsCNkN8xHqrD8dJvmv +8tGk/ksnGfflYtcyK3u0yS4s6Gzm3M9Ft0k5f+bZ04Q51C30kuwJv2bXZR/1+bH jlBD8KOD7/ldqdDouHqAiPy62Na9/eC9AZ0mfa78Hng5qzNhDMuz5Ew+7tKy3cgH aUIBMlTFcje/eUicYAL/MWEYD9TKRiVGKmzj6Sz0/KWCqyHDPwMnPAWjdghMwzTw csqgSnAxW60vauGdNH1gZ/B10cA3YZv1h1lh1sPnVDBSZFu0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj8CbVUo/WQmsRrJhtE5IPeWNnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4ZjM1ZWItOGUzOS0z NTk5LWJjYmQtZDZhZjdkOTcwOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+sjvW2T09zUT9QEIO3/07gpz3SDzGAlYY7ncmHlkqTw2dR8S+99Ih+ TX5JtZJfcNpnmgfrNI8AJJj3/rdBdmHEoxlCgdt9UyonuJ2NURmAqhVlfrICXTWz EVWdpeXG5TbOPdDcwPT70NASIYHmuiFllzJOyCbF2tApjqi6zmZXbIcAYYe6ZqQ1 1ERE0qA/TtktlV3eVtejS0FRap+fCSc0Kton3+1d079HNkoW4/ozbYyJAerNl0de Mig19AfhsDahVekm76s3rPPFL5kT2a/eHXasudSnP8QatzUrXJYr1IyN0LLR7eXj JlWthhT/WrUojc7D34YSSgq86Na3ch0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:59 2026 by rpki-client