$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa File: cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa (raw, json) Hash identifier: fiVmq+s5DTNdzZBFmpjpsFmpEP5LDSEB39XcT6TMtCg= Subject key identifier: 9A:AD:8B:66:79:8E:89:FA:0B:12:14:47:4A:52:2B:AF:DE:82:32:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584D19B4D5B8D7A529C9C26AFC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396608 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d5:b8:d7:a5:29:c9:c2:6a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a76f01fc-48bb-4f49-b31f-fedf8bef2998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:79:6f:c7:f3:27:cc:9a:da:05:76:39:ac:e6: 7e:45:50:81:4e:72:3b:be:3e:1c:9e:2b:c1:c4:fe: fa:1b:c9:a5:0d:d3:da:a3:ed:ba:f0:ef:93:ec:a0: 0a:a7:ee:59:a6:81:75:79:f0:0b:c0:28:b7:48:b2: b4:82:82:48:ab:48:b4:f5:b7:32:8d:a2:f6:bd:c6: 43:dd:cb:cf:20:45:6f:b8:17:3d:d0:8a:eb:7f:32: e1:86:d2:08:10:ef:81:8f:12:7f:5d:60:65:63:48: 54:5b:78:d5:1a:b0:bd:6f:c1:e4:7d:e1:3e:d6:9a: ef:45:cb:4c:8d:ed:ea:3d:1b:0a:ad:f8:cb:45:9f: 07:b2:ec:a0:e7:d4:0b:2b:5e:5c:19:ea:3d:2b:9f: d4:12:7c:8d:a4:b2:35:de:ae:83:58:84:aa:6f:0d: 78:4f:ca:cb:fa:ad:72:81:ba:35:e9:ea:24:a4:c2: 86:41:6a:e2:38:75:05:d8:4c:aa:86:b4:43:eb:7a: 0c:6b:32:89:54:bc:dd:6d:84:4f:4f:71:0c:f3:f0: 1f:2f:9f:e2:28:94:e4:c3:c7:c9:9b:44:fb:86:eb: 28:e3:88:1d:5a:2d:e1:da:9f:ef:49:ce:b1:e1:ae: 0e:c9:99:b6:d0:4f:43:79:1f:0d:2d:f7:ae:c7:5a: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AD:8B:66:79:8E:89:FA:0B:12:14:47:4A:52:2B:AF:DE:82:32:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6a:16:7b:32:c9:64:5f:1b:2e:67:0a:d7:20:fc:0e:8b:89: b9:9d:98:5e:2e:2e:b9:26:ec:dd:87:80:21:fb:b9:7d:2f:99: 33:42:59:6f:d3:d3:db:28:16:86:1a:c5:20:96:de:ae:e1:9c: 9f:45:a9:ed:9d:11:6b:65:0e:6b:fc:f1:29:2a:29:37:37:d9: d8:db:dc:41:e2:1c:be:a4:3d:2e:f4:96:06:73:4a:04:0a:6a: 1c:7d:9c:b6:7c:bd:25:a2:93:d1:2d:dd:51:61:f4:5b:29:cc: 87:37:7d:05:13:13:58:0c:46:b6:70:8f:f0:59:b8:ee:cc:38: c8:79:1c:6e:52:76:4d:29:d7:cc:7d:74:98:9e:76:70:5a:88: 96:ed:9f:de:0f:81:38:2a:73:3d:d7:ee:63:12:56:15:02:59: 2f:ef:b2:91:54:e9:b2:f3:0f:4b:d6:0a:5d:7b:da:e3:f0:8b: 01:67:71:22:ee:22:f0:04:2a:5c:9b:fa:7d:7a:7f:40:76:a6: ba:b1:20:6c:78:d5:29:8d:c6:da:08:05:c0:8d:aa:8a:36:2f: 63:ac:83:58:c6:e7:2f:74:b4:7a:a8:da:3b:58:0b:1d:f4:29: bf:63:37:76:80:77:9e:b7:cd:11:52:55:22:e0:46:4a:32:ab: 32:7e:a3:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNW416UpycJq/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTc2ZjAxZmMtNDhiYi00ZjQ5LWIzMWYtZmVkZjhiZWYyOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nlvx/MnzJraBXY5rOZ+RVCBTnI7vj4cnivB xP76G8mlDdPao+268O+T7KAKp+5ZpoF1efALwCi3SLK0goJIq0i09bcyjaL2vcZD 3cvPIEVvuBc90IrrfzLhhtIIEO+BjxJ/XWBlY0hUW3jVGrC9b8HkfeE+1prvRctM je3qPRsKrfjLRZ8Hsuyg59QLK15cGeo9K5/UEnyNpLI13q6DWISqbw14T8rL+q1y gbo16eokpMKGQWriOHUF2EyqhrRD63oMazKJVLzdbYRPT3EM8/AfL5/iKJTkw8fJ m0T7huso44gdWi3h2p/vSc6x4a4OyZm20E9DeR8NLfeux1p5MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqti2Z5jon6CxIUR0pSK6/egjKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4YTkwNGMtNWJmYy0z ZmFmLWJjMTQtZjg4OTUyZmM3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxqFnsyyWRfGy5nCtcg/A6LibmdmF4uLrkm7N2HgCH7uX0vmTNCWW/T 09soFoYaxSCW3q7hnJ9Fqe2dEWtlDmv88SkqKTc32djb3EHiHL6kPS70lgZzSgQK ahx9nLZ8vSWik9Et3VFh9FspzIc3fQUTE1gMRrZwj/BZuO7MOMh5HG5Sdk0p18x9 dJiednBaiJbtn94PgTgqcz3X7mMSVhUCWS/vspFU6bLzD0vWCl172uPwiwFncSLu IvAEKlyb+n16f0B2prqxIGx41SmNxtoIBcCNqoo2L2Osg1jG5y90tHqo2jtYCx30 Kb9jN3aAd563zRFSVSLgRkoyqzJ+o8s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:23 2026 by rpki-client