$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa File: b942e58f-d211-36ad-886c-6c16451f8f09.roa (raw, json) Hash identifier: BA6GfTLgREIJ/j6R3UEtDwzro8ykhrk24WOKvep9V1k= Subject key identifier: 88:3B:B3:03:85:01:96:7A:10:28:8D:06:E8:AB:56:5A:38:BD:9E:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49CC36296A687CA6F3D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397210 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9c:c3:62:96:a6:87:ca:6f:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=be752e91-ce85-4f46-8008-6897b8dc3ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:1c:ab:08:47:01:8a:be:b0:04:e7:e0:e8: 44:39:8d:a6:1c:7b:8b:ea:a4:84:9c:00:8e:76:50: cf:01:1a:51:c0:fa:33:7d:5f:c0:91:7c:bc:e8:94: 4c:5a:47:6e:13:3a:a5:fb:d6:9a:c0:ef:c3:4a:1d: 45:5f:71:58:2e:44:02:10:62:de:2f:12:25:79:1a: 18:b1:45:77:63:c1:95:e6:60:4d:44:8e:42:c5:77: dc:9f:86:8a:70:ad:51:fd:bd:3d:a1:e6:16:78:8f: d5:eb:e8:9b:f0:76:a8:b4:1b:1a:9f:e5:a9:e5:d3: 35:c3:53:ee:2e:aa:d5:d9:c9:8e:b4:56:e8:2a:c9: a0:ad:85:ac:17:c5:79:fc:d4:97:b2:39:71:49:8b: 30:d4:a3:f3:e3:a0:72:e6:57:2d:01:c1:eb:78:8f: 74:14:5d:40:68:d6:71:c9:b0:f4:3b:2d:8c:97:91: cd:a4:be:c0:35:de:a6:66:1f:9a:f4:ee:0c:ee:8e: dd:49:c2:22:67:9f:2f:97:7f:0c:ac:b1:cf:10:73: 28:ba:68:49:ba:c8:b1:6b:01:53:05:ca:83:2b:96: fd:f6:61:b4:00:de:8c:f8:59:e1:17:a4:8b:53:3a: 14:d2:cd:c4:5f:04:08:5c:98:53:ac:b1:e1:f5:b9: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3B:B3:03:85:01:96:7A:10:28:8D:06:E8:AB:56:5A:38:BD:9E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b942e58f-d211-36ad-886c-6c16451f8f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8d:f6:92:f3:47:16:4d:c3:5c:f2:48:6e:cf:b0:7f:27:c4: 67:9f:f9:cd:11:cd:7f:45:a0:07:f8:a1:f1:30:11:1d:ed:72: 89:04:05:b9:7a:07:44:44:f4:b6:4f:da:eb:d3:d4:70:b0:3d: 8f:57:a4:ab:26:a2:9b:13:ce:11:6d:7c:64:8f:ac:08:22:f5: 70:f2:75:68:f9:a0:1f:d6:93:ef:54:af:b3:d8:5d:68:41:e2: 6b:62:4f:78:23:7c:44:23:3d:77:2d:5b:45:96:e7:f1:cd:e8: f6:d8:79:bc:a8:de:5e:6e:29:23:bd:85:46:b9:c9:8e:c3:94: e7:ef:66:78:6d:c1:4c:f2:d7:87:42:de:05:ed:87:a2:1a:11: ba:38:5a:48:c9:fc:0e:0e:f5:30:de:f9:17:a1:fd:9f:c1:5a: f9:49:a2:e1:e1:5b:e8:18:18:fa:b8:2d:61:f8:2f:8f:17:ff: 23:b5:1a:5b:60:ca:d5:c7:f3:0e:b9:d8:fa:37:0b:03:2c:0e: d7:80:65:48:ed:c2:eb:95:c1:3a:46:21:35:de:c2:f5:ab:9a: c5:a0:b5:0d:c6:aa:63:1f:ef:cf:d8:ec:c6:be:f4:e2:bc:b2: 37:9c:cc:1a:d0:f9:eb:56:3f:19:36:32:d5:a4:74:67:f9:19: e3:d2:26:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJzDYpamh8pvPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YmU3NTJlOTEtY2U4NS00ZjQ2LTgwMDgtNjg5N2I4ZGMzY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRgcqwhHAYq+sATn4OhEOY2mHHuL6qSEnACO dlDPARpRwPozfV/AkXy86JRMWkduEzql+9aawO/DSh1FX3FYLkQCEGLeLxIleRoY sUV3Y8GV5mBNRI5CxXfcn4aKcK1R/b09oeYWeI/V6+ib8HaotBsan+Wp5dM1w1Pu LqrV2cmOtFboKsmgrYWsF8V5/NSXsjlxSYsw1KPz46By5lctAcHreI90FF1AaNZx ybD0Oy2Ml5HNpL7ANd6mZh+a9O4M7o7dScIiZ58vl38MrLHPEHMoumhJusixawFT BcqDK5b99mG0AN6M+FnhF6SLUzoU0s3EXwQIXJhTrLHh9bkHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg7swOFAZZ6ECiNBuirVlo4vZ4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk0MmU1OGYtZDIxMS0z NmFkLTg4NmMtNmMxNjQ1MWY4ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImN9pLzRxZNw1zySG7PsH8nxGef+c0RzX9FoAf4ofEwER3tcokEBbl6 B0RE9LZP2uvT1HCwPY9XpKsmopsTzhFtfGSPrAgi9XDydWj5oB/Wk+9Ur7PYXWhB 4mtiT3gjfEQjPXctW0WW5/HN6PbYebyo3l5uKSO9hUa5yY7DlOfvZnhtwUzy14dC 3gXth6IaEbo4WkjJ/A4O9TDe+Reh/Z/BWvlJouHhW+gYGPq4LWH4L48X/yO1Gltg ytXH8w652Po3CwMsDteAZUjtwuuVwTpGITXewvWrmsWgtQ3GqmMf78/Y7Ma+9OK8 sjeczBrQ+etWPxk2MtWkdGf5GePSJjM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:47 2026 by rpki-client