$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa File: ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa (raw, json) Hash identifier: dlxdYSBwQgknSABXFsWiby3guDVw8vMRc3rM1Mqm+O8= Subject key identifier: 68:58:10:D4:4B:D4:7F:07:9E:BC:05:58:98:70:0F:F0:74:0A:D1:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D62992EC284D18C3DBD0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397211 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d6:29:92:ec:28:4d:18:c3:db:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=35af2a05-51f2-426a-909a-6e0ed1a1a7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:9f:22:a4:f6:d2:6a:0a:9f:18:93:5a:7d: 38:75:c0:6c:2e:17:04:f8:06:8d:ed:9b:74:6a:29: bc:68:ad:8e:85:aa:02:de:e6:29:7d:4b:84:36:bd: 4c:14:95:e4:d9:8c:9d:4d:19:45:ae:db:b3:df:e4: 22:cd:74:c6:7b:5f:dd:0a:0f:d5:8c:eb:aa:25:d3: 62:dd:2c:95:ef:d6:79:81:4e:ad:69:47:23:ad:06: be:f2:21:50:f6:f7:be:98:0d:81:4b:d3:69:94:98: 58:b9:fc:af:a0:48:f1:b5:04:21:fb:36:6a:4e:19: 6d:dc:49:cf:f7:87:6a:b1:87:48:71:d8:ec:6d:8f: 36:20:32:e0:bc:f6:20:ea:88:84:d3:9e:b4:d9:bb: 4b:1b:db:2e:9e:8d:a9:61:2f:a9:a3:af:40:37:b5: c6:73:0c:e4:0c:cd:20:ad:4e:7d:b5:3e:8a:69:e0: 4e:a4:3f:08:ef:9e:40:e2:1b:6c:57:2a:b0:e2:65: 12:3c:f1:06:04:0e:89:9d:e3:2f:60:c5:68:3d:b8: c1:85:da:d1:d4:b7:bc:54:91:41:68:48:41:83:fc: 25:c4:bb:41:b1:06:18:55:7e:0b:67:51:90:f9:0b: e8:da:62:ff:de:d1:65:b1:0b:67:17:c2:0d:7d:4e: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:10:D4:4B:D4:7F:07:9E:BC:05:58:98:70:0F:F0:74:0A:D1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba2cc2ea-b339-3159-a3f2-42e8b29496b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e0:22:8e:fe:ad:dd:e2:bb:d5:4d:14:c0:ba:36:2a:54:8b: 51:86:e1:a1:9b:99:45:6a:46:4c:ff:de:8c:d5:df:1a:fe:21: db:f2:17:43:95:54:b8:44:b7:c2:f1:c2:d0:cb:18:f0:f8:cf: 08:dc:ec:d2:11:14:60:72:41:ac:c7:36:dd:ee:5e:b5:dd:fb: 37:f5:7f:7c:3d:fd:82:b4:4e:0c:10:fc:08:4a:97:44:f3:b3: 3e:bc:15:c0:ed:77:8b:b9:22:26:1a:88:56:a4:25:16:75:7d: 09:03:9a:7c:6d:29:b9:ef:f7:68:e7:7a:49:0a:09:d1:f3:c8: 36:9a:91:8f:9e:a1:56:ea:5f:44:06:8d:6b:27:8d:14:90:f7: ac:ff:4f:66:78:01:96:0a:86:18:9f:6c:1b:f7:36:6b:2e:eb: 78:09:58:96:73:75:73:1f:1e:81:9e:34:44:7a:1c:f6:be:11: 04:a4:e7:3e:01:b9:2c:2d:a6:c8:fb:ed:e6:5f:56:cc:85:9e: 19:d7:88:94:53:3b:83:e9:d1:ed:bc:ef:0b:e9:b6:cb:57:ee: f6:9d:89:b9:4a:3b:c1:04:90:ad:c8:3a:5c:98:68:56:5a:13: 09:8a:5f:bc:6c:41:61:2a:4b:51:ec:69:ea:2b:de:4b:00:14: bc:81:e1:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNYpkuwoTRjD29AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MzVhZjJhMDUtNTFmMi00MjZhLTkwOWEtNmUwZWQxYTFhN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwKfIqT20moKnxiTWn04dcBsLhcE+AaN7Zt0 aim8aK2OhaoC3uYpfUuENr1MFJXk2YydTRlFrtuz3+QizXTGe1/dCg/VjOuqJdNi 3SyV79Z5gU6taUcjrQa+8iFQ9ve+mA2BS9NplJhYufyvoEjxtQQh+zZqThlt3EnP 94dqsYdIcdjsbY82IDLgvPYg6oiE05602btLG9suno2pYS+po69AN7XGcwzkDM0g rU59tT6KaeBOpD8I755A4htsVyqw4mUSPPEGBA6JneMvYMVoPbjBhdrR1Le8VJFB aEhBg/wlxLtBsQYYVX4LZ1GQ+Qvo2mL/3tFlsQtnF8INfU6GmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhYENRL1H8HnrwFWJhwD/B0CtHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEyY2MyZWEtYjMzOS0z MTU5LWEzZjItNDJlOGIyOTQ5NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTgIo7+rd3iu9VNFMC6NipUi1GG4aGbmUVqRkz/3ozV3xr+IdvyF0OV VLhEt8LxwtDLGPD4zwjc7NIRFGByQazHNt3uXrXd+zf1f3w9/YK0TgwQ/AhKl0Tz sz68FcDtd4u5IiYaiFakJRZ1fQkDmnxtKbnv92jnekkKCdHzyDaakY+eoVbqX0QG jWsnjRSQ96z/T2Z4AZYKhhifbBv3Nmsu63gJWJZzdXMfHoGeNER6HPa+EQSk5z4B uSwtpsj77eZfVsyFnhnXiJRTO4Pp0e287wvptstX7vadiblKO8EEkK3IOlyYaFZa EwmKX7xsQWEqS1Hsaeor3ksAFLyB4Uk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:52 2026 by rpki-client