$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa File: c8b3dff7-8897-3692-893d-51a768f982fa.roa (raw, json) Hash identifier: /v59JMb9fPa/Qxife4nMJsiQy0W2Ta2haNME3yzo3TE= Subject key identifier: 2E:BE:D7:49:85:96:A4:6D:58:E8:AD:13:3B:B5:38:4F:A0:57:11:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D5FA7056528C1900E780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 36620 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d5:fa:70:56:52:8c:19:00:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=c640af53-4b33-40d0-b77e-d41c056f70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:b3:59:37:ac:fd:88:c2:17:bc:63:d4:a5: c5:2f:a9:71:3a:39:5b:7d:74:15:eb:fa:84:39:8e: 93:7d:8b:f1:e2:fc:fb:61:13:1b:ea:2e:8e:b8:b8: 3c:94:cc:e7:46:9e:a4:04:40:dd:36:0e:4a:7c:be: eb:72:46:c3:d1:b1:81:7e:b2:3a:3d:e4:3f:82:fd: 39:b1:20:cb:5d:79:81:b7:f3:f0:c7:46:9e:c8:03: e0:64:f0:d6:8d:1f:e4:9a:74:76:f6:77:89:ad:ed: 9d:f6:4f:d7:38:a9:84:45:e9:88:16:55:c2:8c:9d: 82:b7:40:2d:47:e4:f8:53:5b:d7:a6:98:27:49:41: 90:31:5a:13:e3:42:ab:08:f0:3c:d6:08:cd:86:0e: 15:f9:51:49:08:42:4b:3f:64:a9:92:3e:e1:e6:a2: 56:d4:1c:91:d4:71:2a:e5:15:5a:af:63:b4:da:56: 4f:27:8d:f5:fc:ed:cb:2d:c9:75:fb:d9:97:d0:1a: 50:31:44:0d:fd:f4:dc:d6:1a:4a:19:16:25:d2:2a: 27:a1:0f:0c:35:55:bd:99:50:ca:ac:a6:eb:da:a1: bc:0e:bc:ee:5a:16:db:c6:2b:55:00:ca:2d:b2:c5: 8d:e9:ae:ec:a9:83:33:4f:fe:89:95:47:e3:f5:36: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BE:D7:49:85:96:A4:6D:58:E8:AD:13:3B:B5:38:4F:A0:57:11:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8b3dff7-8897-3692-893d-51a768f982fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:11:2c:c6:69:5e:f3:e5:eb:01:ab:53:63:2b:ef:ac:8e:bd: 27:d3:e1:34:3d:95:cb:57:1d:68:fa:99:82:6d:44:f4:4b:3e: a0:8f:0f:41:65:87:4f:0e:da:0f:cd:82:70:9f:42:0c:3f:cc: 9f:57:b6:c2:5b:fa:30:69:18:21:a0:6d:b6:8a:96:ca:b5:4f: b0:64:51:b9:a2:c9:31:55:53:64:f7:cc:93:54:47:54:c5:76: 68:aa:bc:1a:ca:17:9d:2d:3a:30:b9:d7:20:f8:7a:00:50:e9: f9:3d:6f:c3:c5:19:03:45:ff:0a:c7:21:84:d3:3b:6c:7b:58: b3:5e:ad:00:5f:0a:f0:ad:31:9b:61:02:a3:2f:5e:2c:84:2a: 94:37:e9:4f:1a:16:ca:41:47:26:8d:20:dc:14:79:37:ce:24: a1:9c:94:1f:62:b7:8e:1a:08:b0:cb:4c:86:df:d5:23:70:78: bd:fd:ab:c6:92:0f:12:69:e2:fe:a6:6c:a8:c9:a9:03:50:af: 53:67:36:59:a9:bb:69:4a:bd:c1:cb:b0:ec:9f:ab:d4:3d:a9: 5e:bc:64:57:72:c7:17:da:bd:63:92:44:6a:c4:80:fa:0a:2d: 80:1a:48:c2:81:3a:24:e6:d4:68:63:31:5d:7b:2f:d1:cb:2d: 28:db:38:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNX6cFZSjBkA54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzY0MGFmNTMtNGIzMy00MGQwLWI3N2UtZDQxYzA1NmY3MGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqGzWTes/YjCF7xj1KXFL6lxOjlbfXQV6/qE OY6TfYvx4vz7YRMb6i6OuLg8lMznRp6kBEDdNg5KfL7rckbD0bGBfrI6PeQ/gv05 sSDLXXmBt/Pwx0aeyAPgZPDWjR/kmnR29neJre2d9k/XOKmERemIFlXCjJ2Ct0At R+T4U1vXppgnSUGQMVoT40KrCPA81gjNhg4V+VFJCEJLP2Spkj7h5qJW1ByR1HEq 5RVar2O02lZPJ431/O3LLcl1+9mX0BpQMUQN/fTc1hpKGRYl0ionoQ8MNVW9mVDK rKbr2qG8DrzuWhbbxitVAMotssWN6a7sqYMzT/6JlUfj9TZhwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6+10mFlqRtWOitEzu1OE+gVxGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhiM2RmZjctODg5Ny0z NjkyLTg5M2QtNTFhNzY4Zjk4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4RLMZpXvPl6wGrU2Mr76yOvSfT4TQ9lctXHWj6mYJtRPRLPqCPD0Fl h08O2g/NgnCfQgw/zJ9XtsJb+jBpGCGgbbaKlsq1T7BkUbmiyTFVU2T3zJNUR1TF dmiqvBrKF50tOjC51yD4egBQ6fk9b8PFGQNF/wrHIYTTO2x7WLNerQBfCvCtMZth AqMvXiyEKpQ36U8aFspBRyaNINwUeTfOJKGclB9it44aCLDLTIbf1SNweL39q8aS DxJp4v6mbKjJqQNQr1NnNlmpu2lKvcHLsOyfq9Q9qV68ZFdyxxfavWOSRGrEgPoK LYAaSMKBOiTm1GhjMV17L9HLLSjbOIE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:14 2026 by rpki-client