$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa File: ba01f06e-95a6-3810-b336-c2de627801ec.roa (raw, json) Hash identifier: P5bM/apb3He+pr7e3mgCS79XX9Wot28x/o7ExWInqLI= Subject key identifier: 4C:A9:86:42:13:22:EC:96:20:7E:91:75:9D:6A:84:5B:F8:D7:C7:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4B2B6D125130D12E39180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396581 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b2:b6:d1:25:13:0d:12:e3:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=67e1c409-edcb-45f4-a923-262c4118c91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7c:39:a2:52:b7:4a:ae:68:cf:0e:c1:77:78: 0d:59:7f:17:d0:90:73:f2:b9:e2:e7:f0:6f:16:85: e1:1c:6a:30:3a:eb:de:c7:6b:3a:f7:6b:f8:fc:c0: bb:04:fc:db:9e:4f:51:bb:51:96:f8:71:71:67:de: 3d:c6:1c:1a:a4:ae:ef:25:06:8b:19:dc:00:d1:c6: e2:ab:7d:35:60:e5:e1:bb:e7:7e:dc:1c:f5:8c:e7: 92:bc:cb:d2:34:a6:c0:c5:67:35:4b:17:21:61:b1: 91:34:c1:49:35:b3:8f:83:85:72:2b:bf:bc:81:30: a3:88:80:34:94:16:4c:c3:1d:ed:de:ae:ea:18:3e: 1c:d7:48:65:4b:bf:28:84:62:70:4e:da:91:43:7e: 45:03:93:83:1e:ff:8b:39:a1:a5:05:73:57:31:35: af:c8:2c:0b:d2:a9:64:07:f2:6b:20:c3:93:39:86: d1:b5:7d:8f:39:32:df:8b:28:74:b1:59:e8:43:97: 76:8f:af:6d:13:6c:a2:89:fe:c5:36:17:d1:b7:65: f1:79:97:90:b8:25:08:66:7b:84:cc:c9:ad:ba:7a: 87:79:ae:f5:43:b8:a4:2e:57:ff:85:2a:af:b6:cc: 02:c0:7c:24:98:e3:a5:a8:d5:59:e1:16:dc:82:2b: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A9:86:42:13:22:EC:96:20:7E:91:75:9D:6A:84:5B:F8:D7:C7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba01f06e-95a6-3810-b336-c2de627801ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:82:6f:7a:05:af:e4:aa:82:6e:63:72:1f:42:59:c3:e2:bd: a8:d0:5a:25:85:c5:42:87:7e:c1:30:f0:c3:13:4c:48:14:e2: 7a:c7:2b:d6:62:29:5b:4f:32:09:22:fa:fa:90:e5:0d:c6:27: 94:8d:5d:45:56:ec:65:d2:3d:1f:b2:eb:84:3d:4a:35:79:ff: 30:4b:6c:b0:70:a1:7e:c6:c3:15:8c:87:95:47:cb:57:c5:0e: 19:85:3b:df:f9:9b:97:f9:e7:9a:0f:ae:3d:e0:2f:a6:ca:3e: 50:b9:52:63:37:19:80:17:fb:68:ca:c1:cd:c7:0c:56:e4:ff: 9a:ff:9b:ff:db:45:42:3e:c6:58:7e:dd:51:9d:2d:85:1f:ac: 24:15:b6:fb:e0:a1:c5:1c:2c:b7:67:70:c1:aa:1a:36:90:32: e2:9f:b5:fd:33:b7:e5:f8:23:d3:e9:16:5a:f5:1d:b5:40:89: b9:ad:5b:f0:84:6b:1a:03:98:d5:cb:84:d8:e9:fa:ba:3e:a2: 44:0e:71:fd:2a:aa:61:9b:5a:59:de:d2:0d:64:5a:cf:0d:99: 21:01:c4:7a:be:e2:1c:3d:9f:4b:aa:ac:00:b8:03:6e:48:b8: 1b:91:f2:c9:3d:23:d6:87:ba:4f:29:c3:fd:44:86:10:c1:ea: e5:0b:3b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLK20SUTDRLjkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NjdlMWM0MDktZWRjYi00NWY0LWE5MjMtMjYyYzQxMThjOTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3w5olK3Sq5ozw7Bd3gNWX8X0JBz8rni5/Bv FoXhHGowOuvex2s692v4/MC7BPzbnk9Ru1GW+HFxZ949xhwapK7vJQaLGdwA0cbi q301YOXhu+d+3Bz1jOeSvMvSNKbAxWc1SxchYbGRNMFJNbOPg4VyK7+8gTCjiIA0 lBZMwx3t3q7qGD4c10hlS78ohGJwTtqRQ35FA5ODHv+LOaGlBXNXMTWvyCwL0qlk B/JrIMOTOYbRtX2POTLfiyh0sVnoQ5d2j69tE2yiif7FNhfRt2XxeZeQuCUIZnuE zMmtunqHea71Q7ikLlf/hSqvtswCwHwkmOOlqNVZ4RbcgivB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyphkITIuyWIH6RdZ1qhFv418cqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEwMWYwNmUtOTVhNi0z ODEwLWIzMzYtYzJkZTYyNzgwMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmCb3oFr+Sqgm5jch9CWcPivajQWiWFxUKHfsEw8MMTTEgU4nrHK9Zi KVtPMgki+vqQ5Q3GJ5SNXUVW7GXSPR+y64Q9SjV5/zBLbLBwoX7GwxWMh5VHy1fF DhmFO9/5m5f555oPrj3gL6bKPlC5UmM3GYAX+2jKwc3HDFbk/5r/m//bRUI+xlh+ 3VGdLYUfrCQVtvvgocUcLLdncMGqGjaQMuKftf0zt+X4I9PpFlr1HbVAibmtW/CE axoDmNXLhNjp+ro+okQOcf0qqmGbWlne0g1kWs8NmSEBxHq+4hw9n0uqrAC4A25I uBuR8sk9I9aHuk8pw/1EhhDB6uULO/k= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:34 2026 by rpki-client