$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9873f46-20fe-31ac-aaa3-45da1f48e9c8.roa File: c9873f46-20fe-31ac-aaa3-45da1f48e9c8.roa (raw, json) Hash identifier: 3UBSnjx0hukDreNGvtkMw6rQL2u0qeiRSWWTzNFBYR0= Subject key identifier: 6E:34:80:41:5E:4B:1B:5E:DB:76:2B:A5:D5:0E:40:AE:34:74:CC:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D6490523C09324D5A180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9873f46-20fe-31ac-aaa3-45da1f48e9c8.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396587 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d6:49:05:23:c0:93:24:d5:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=0979c3d5-e4d3-4cb2-904c-b30d3f0f6f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:93:d9:87:d1:c6:7f:e2:42:fd:40:0b:c5: 61:a4:c1:02:81:f2:dd:6d:bf:68:69:3a:a9:2c:5e: 89:87:63:ec:c7:1d:d6:76:69:8a:7d:72:cc:58:ed: 47:89:04:fc:01:70:31:d9:dd:95:89:41:f9:14:b7: 88:ab:d8:88:36:37:d3:79:57:eb:2a:3a:b3:be:e8: e2:9e:e6:88:26:81:da:34:f5:d3:74:ab:fb:6f:67: 33:8f:bb:6d:d9:93:ed:49:f6:a6:82:b0:2a:a1:14: 07:2a:08:79:5e:2e:9b:04:7c:71:38:3c:9f:7c:1a: 39:c4:8a:86:41:6e:69:43:d1:ce:fc:44:27:44:7e: bb:57:79:9b:90:d1:76:a0:9c:4e:59:f1:bf:79:92: 91:93:58:e2:78:a3:70:28:89:fe:4f:28:e8:4b:90: 4a:99:2c:e5:59:8a:6c:4e:b0:1b:1a:b6:56:ee:cc: a8:cf:dc:a8:94:d7:1d:87:2c:ec:6d:50:82:d3:54: c7:85:58:66:17:84:3d:bf:75:2a:df:c7:ba:8d:9e: cb:f3:4e:df:ac:af:8a:b5:1f:77:4c:f2:41:ea:2d: a6:89:6c:36:a8:24:57:e4:4b:06:f1:cd:5e:f9:da: 0f:49:66:1b:56:32:79:c7:f1:49:fb:29:32:dd:1b: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:34:80:41:5E:4B:1B:5E:DB:76:2B:A5:D5:0E:40:AE:34:74:CC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c9873f46-20fe-31ac-aaa3-45da1f48e9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b8:89:38:2d:06:bd:61:e0:f9:32:87:1b:5a:fd:88:f8:66: b7:6a:ce:7d:27:fd:7a:77:ab:ee:73:16:b8:a0:dd:69:81:45: 57:4d:63:7a:25:68:ed:81:1a:81:14:f1:7f:af:79:c0:f9:26: 6a:3b:9e:d1:3d:26:9f:11:cc:f3:64:f1:d1:d8:83:ab:8c:bf: 56:9b:60:2d:72:9a:d8:61:f5:e7:8e:8d:65:a4:7c:c9:88:c1: 95:86:06:4d:cf:23:c2:87:65:38:40:f7:ff:0a:63:6f:c1:00: 58:1b:02:7f:ed:ff:0e:e8:e1:5f:b8:5d:f0:00:f3:ca:b9:a1: e7:79:67:0f:59:12:30:e6:70:f9:57:e0:97:6a:90:6b:56:db: 3b:53:e6:de:ef:4f:e2:12:90:55:80:90:53:6f:70:f2:50:fe: 55:58:b6:f6:8b:fc:b6:e8:4c:35:b7:24:20:00:83:91:44:ea: 6e:9e:07:5f:06:3f:8a:6a:00:58:f3:b8:97:64:47:11:db:e1: 25:2a:14:7e:b5:a6:33:71:79:bf:81:fd:91:ee:40:ab:16:a5: 6a:f0:02:04:72:ab:54:e7:63:73:4b:1c:81:75:f5:57:06:6b: f9:30:17:ae:79:d3:10:ef:ab:70:8f:e2:34:c0:bb:be:f3:b4: d3:79:5a:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNZJBSPAkyTVoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDk3OWMzZDUtZTRkMy00Y2IyLTkwNGMtYjMwZDNmMGY2ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7KT2YfRxn/iQv1AC8VhpMECgfLdbb9oaTqp LF6Jh2Psxx3WdmmKfXLMWO1HiQT8AXAx2d2ViUH5FLeIq9iINjfTeVfrKjqzvuji nuaIJoHaNPXTdKv7b2czj7tt2ZPtSfamgrAqoRQHKgh5Xi6bBHxxODyffBo5xIqG QW5pQ9HO/EQnRH67V3mbkNF2oJxOWfG/eZKRk1jieKNwKIn+TyjoS5BKmSzlWYps TrAbGrZW7syoz9yolNcdhyzsbVCC01THhVhmF4Q9v3Uq38e6jZ7L807frK+KtR93 TPJB6i2miWw2qCRX5EsG8c1e+doPSWYbVjJ5x/FJ+yky3RvfNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG40gEFeSxte23YrpdUOQK40dMxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzk4NzNmNDYtMjBmZS0z MWFjLWFhYTMtNDVkYTFmNDhlOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa4iTgtBr1h4Pkyhxta/Yj4Zrdqzn0n/Xp3q+5zFrig3WmBRVdNY3ol aO2BGoEU8X+vecD5Jmo7ntE9Jp8RzPNk8dHYg6uMv1abYC1ymthh9eeOjWWkfMmI wZWGBk3PI8KHZThA9/8KY2/BAFgbAn/t/w7o4V+4XfAA88q5oed5Zw9ZEjDmcPlX 4JdqkGtW2ztT5t7vT+ISkFWAkFNvcPJQ/lVYtvaL/LboTDW3JCAAg5FE6m6eB18G P4pqAFjzuJdkRxHb4SUqFH61pjNxeb+B/ZHuQKsWpWrwAgRyq1TnY3NLHIF19VcG a/kwF6550xDvq3CP4jTAu77ztNN5Wo8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:21 2026 by rpki-client