$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa File: c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa (raw, json) Hash identifier: yzp2VFbQyLwUn7mAE9oHIm0nBGeGvsNKzj6V01FDtBQ= Subject key identifier: 9A:A0:0B:C9:FE:80:ED:C7:08:32:CC:53:D6:87:5F:25:87:47:8B:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B49EB8DD6AA9D2FD692900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 20172 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:9e:b8:dd:6a:a9:d2:fd:69:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f9ffc905-e897-47e1-8d59-38455a43f0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8d:b9:37:2a:1b:d1:bf:39:79:10:b5:27:92: 15:66:ca:c8:d0:e3:51:f7:f3:40:0c:15:09:19:94: ad:40:d1:20:23:39:1d:49:33:9c:d6:07:6e:f4:7c: dc:b8:9c:65:ac:82:bb:87:51:52:d1:af:ad:43:e0: 3b:d3:28:22:31:1a:61:54:8e:83:9b:80:27:44:62: f0:b8:92:81:fa:e0:9e:79:3c:a9:1e:1d:17:d1:d9: 5f:3a:bf:5e:fa:54:90:5a:07:a3:2d:95:be:77:66: 7b:9a:e7:6c:a5:b6:4e:7e:36:c1:8b:5c:1a:fa:49: 22:fd:ce:ad:2f:c1:7d:bf:45:9c:2d:0e:ed:b2:08: 17:9d:cc:b2:ea:8d:3f:42:68:17:e0:1d:d3:d2:40: e0:d5:52:74:12:2a:db:b3:1c:d8:2b:fd:45:49:e4: 70:3e:d2:8a:c9:13:ca:2b:b1:cf:16:4b:e4:ca:da: e7:4f:8e:fb:50:54:72:af:fa:d0:26:e3:69:60:7f: eb:5c:1c:54:6a:60:17:73:de:8a:34:87:d2:ab:f9: e3:dd:78:3a:9c:ce:cf:98:f5:fc:3e:45:9c:42:bf: 83:57:5a:76:a4:5e:79:90:3a:3c:33:13:7b:c1:b5: e7:0b:ac:48:d5:6d:2a:6c:93:a3:1d:29:f1:2f:22: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:0B:C9:FE:80:ED:C7:08:32:CC:53:D6:87:5F:25:87:47:8B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0b:96:53:9e:71:97:77:78:1f:96:cf:9d:c7:bf:f3:6d:25: 45:ae:b3:c9:30:89:1b:84:a2:d3:28:57:34:90:18:2d:c5:4b: 45:78:d3:e9:65:c5:5c:74:22:f9:78:e8:76:e0:77:c2:67:4c: 24:d6:50:63:d8:3c:ca:fe:8d:ca:cf:8d:8f:82:6e:8c:2a:34: 09:59:4b:57:f8:71:05:9e:08:2c:70:06:88:6a:dc:6b:c1:21: 19:ae:c1:fc:fc:91:d5:62:65:7b:23:81:92:d2:f7:f6:d8:fe: d0:5f:38:62:e6:22:48:33:42:fc:15:c6:0d:53:5f:95:f3:3e: 2b:41:dd:dd:1e:7f:1c:aa:64:d5:9e:4d:5f:87:85:82:9e:e7: 03:12:f8:fb:1a:c0:79:ed:9d:2f:c8:f5:3e:a4:01:25:f4:03: 91:57:97:6f:56:ed:75:45:d6:6a:2f:0b:59:55:c8:aa:d9:d7: 5d:2e:db:24:76:4c:cc:11:dd:0b:96:0e:ea:21:6c:ae:b1:11: 44:0d:2c:bb:59:70:2c:18:f0:58:06:da:73:56:4e:41:47:c4: 73:ff:cb:a5:92:54:8f:e0:5e:f7:de:f7:ad:88:6c:77:08:7e: 1d:70:d5:73:75:64:c9:99:ad:cd:cd:e2:8f:0a:2c:4f:3a:5e: f9:66:1e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtJ643Wqp0v1pKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjlmZmM5MDUtZTg5Ny00N2UxLThkNTktMzg0NTVhNDNmMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I25Nyob0b85eRC1J5IVZsrI0ONR9/NADBUJ GZStQNEgIzkdSTOc1gdu9HzcuJxlrIK7h1FS0a+tQ+A70ygiMRphVI6Dm4AnRGLw uJKB+uCeeTypHh0X0dlfOr9e+lSQWgejLZW+d2Z7mudspbZOfjbBi1wa+kki/c6t L8F9v0WcLQ7tsggXncyy6o0/QmgX4B3T0kDg1VJ0EirbsxzYK/1FSeRwPtKKyRPK K7HPFkvkytrnT477UFRyr/rQJuNpYH/rXBxUamAXc96KNIfSq/nj3Xg6nM7PmPX8 PkWcQr+DV1p2pF55kDo8MxN7wbXnC6xI1W0qbJOjHSnxLyJWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqgC8n+gO3HCDLMU9aHXyWHR4vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY3YjA4NGItNWY4YS0z YTRmLWIyYWItNDkxODBlNjIxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQLllOecZd3eB+Wz53Hv/NtJUWus8kwiRuEotMoVzSQGC3FS0V40+ll xVx0Ivl46Hbgd8JnTCTWUGPYPMr+jcrPjY+CbowqNAlZS1f4cQWeCCxwBohq3GvB IRmuwfz8kdViZXsjgZLS9/bY/tBfOGLmIkgzQvwVxg1TX5XzPitB3d0efxyqZNWe TV+HhYKe5wMS+PsawHntnS/I9T6kASX0A5FXl29W7XVF1movC1lVyKrZ110u2yR2 TMwR3QuWDuohbK6xEUQNLLtZcCwY8FgG2nNWTkFHxHP/y6WSVI/gXvfe962IbHcI fh1w1XN1ZMmZrc3N4o8KLE86XvlmHjk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:50 2026 by rpki-client